$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa File: bfa17855-802a-32e9-b629-716363d8dec0.roa (raw, json) Hash identifier: d9Lc/YCCi//tfVxHkizPOnem6iRM1sEe23QT7Ux/RvA= Subject key identifier: EE:F2:00:91:92:F1:7D:29:DD:17:5E:D3:DE:C5:5F:82:A3:65:86:DF Certificate issuer: /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Certificate serial: 010D0C9F4328584E000637EF746C7674B493F3A0 Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 20014 IP address blocks: 208.71.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:37:ef:74:6c:76:74:b4:93:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=e97609f7-aed6-4863-b8ac-1f3ba1311c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:d0:d9:c8:e6:4e:26:e8:06:22:aa:0f:77: 0e:fc:b3:3b:72:c7:8a:1b:b8:14:15:c0:26:41:42: e6:a9:2d:74:26:6e:bf:1e:fd:0f:1a:d8:6f:80:60: c2:4d:59:1c:f9:2f:c8:54:f8:22:4c:f7:da:7d:09: ce:fd:c8:c6:69:05:cc:c0:b4:d4:a3:92:f1:8d:4d: f8:73:78:7c:0a:52:da:9f:9e:00:9f:38:3d:53:9e: 50:70:79:7b:5d:4d:5c:46:49:9c:3a:a7:e9:d0:93: e9:01:be:37:cc:9e:88:fc:fa:62:66:b3:47:eb:9a: 8b:0c:0a:a6:1e:09:81:15:16:d5:ce:3c:86:e4:40: 92:fd:f9:70:f6:63:f2:ed:ef:57:3a:e6:53:9a:20: 84:9c:8a:bb:e0:56:e3:be:b7:f8:50:bf:af:cf:ef: 1e:31:5e:62:59:57:59:70:bb:2e:45:f8:3e:a2:2c: 7d:4f:d4:1a:f5:4e:0d:ce:9c:6a:c8:48:8f:a7:b1: 67:57:30:16:c6:d8:80:25:ec:a0:37:90:2d:6b:af: 88:79:af:2f:b3:03:5d:ac:b9:3e:f5:a1:20:a5:f8: 4f:cd:e7:25:d8:32:de:d0:1d:1d:b3:fe:8d:68:d2: 81:0e:6e:47:5b:19:33:c1:39:0f:9c:5a:b8:f3:07: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F2:00:91:92:F1:7D:29:DD:17:5E:D3:DE:C5:5F:82:A3:65:86:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl X509v3 Authority Key Identifier: keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer sbgp-ipAddrBlock: critical IPv4: 208.71.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5f:31:68:d2:09:d4:27:33:6e:3a:03:5f:25:ee:83:8a:d6: 89:cc:82:1c:98:3b:55:9b:96:87:24:f5:3c:e0:42:34:fc:ac: b8:b1:3a:0b:00:7f:68:6a:a4:20:ab:60:1c:80:b8:ac:6e:a9: 34:23:66:91:15:9a:18:2b:49:62:2e:f0:53:b3:77:cc:fe:f1: 4f:e7:3d:04:8d:73:ee:25:93:b2:30:5c:72:5e:bf:0d:e0:bd: ef:d4:15:0a:e5:b2:a8:49:a9:d7:61:99:fb:ef:2e:a4:5d:f4: b8:06:8b:f8:bb:ba:86:fa:63:36:c9:f1:19:88:54:e4:66:d1: ba:d4:19:19:2d:6c:4e:83:a8:8e:6b:2b:1b:3f:2c:9f:d7:f7: 59:b2:56:d2:06:63:1a:95:98:c4:89:dc:ab:3c:8d:25:f3:dc: 50:80:30:3e:0c:3a:ef:5e:95:82:da:cb:94:71:ad:e1:88:a2: c7:32:ae:dc:7f:64:62:3a:45:9a:5a:e3:ee:cc:4b:55:94:fb: 29:35:4e:a1:18:d1:09:aa:55:08:42:19:fb:fe:2e:f8:07:df: a3:3a:c3:7d:b1:0d:ad:c0:47:df:55:65:1d:17:9d:b1:d6:d3: 98:12:f7:b7:27:2a:6f:c6:fa:15:49:9f:99:e2:3f:f4:36:e0: 8b:60:ee:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABjfvdGx2dLST86AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNi MTNlMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk ZTk3NjA5ZjctYWVkNi00ODYzLWI4YWMtMWYzYmExMzExYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFLQ2cjmTiboBiKqD3cO/LM7cseKG7gUFcAm QULmqS10Jm6/Hv0PGthvgGDCTVkc+S/IVPgiTPfafQnO/cjGaQXMwLTUo5LxjU34 c3h8ClLan54Anzg9U55QcHl7XU1cRkmcOqfp0JPpAb43zJ6I/PpiZrNH65qLDAqm HgmBFRbVzjyG5ECS/flw9mPy7e9XOuZTmiCEnIq74Fbjvrf4UL+vz+8eMV5iWVdZ cLsuRfg+oix9T9Qa9U4NzpxqyEiPp7FnVzAWxtiAJeygN5Ata6+Iea8vswNdrLk+ 9aEgpfhPzecl2DLe0B0ds/6NaNKBDm5HWxkzwTkPnFq48wf1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7yAJGS8X0p3Rde097FX4KjZYbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Nh M2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvYmZhMTc4NTUtODAyYS0z MmU5LWI2MjktNzE2MzYzZDhkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNjYTNjOWItMTE0Ny00ZTkxLTg0 ODAtMzdlZDFiZWNiMTNlLzFjY2EzYzliLTExNDctNGU5MS04NDgwLTM3ZWQxYmVj YjEzZS5jcmwwHwYDVR0jBBgwFoAU5ZSC2cRdy+EEAvK/v1php4yiLqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2Vk MWJlY2IxM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtfMWjSCdQnM246A18l7oOK1onMghyYO1Wblock9TzgQjT8rLixOgsA f2hqpCCrYByAuKxuqTQjZpEVmhgrSWIu8FOzd8z+8U/nPQSNc+4lk7IwXHJevw3g ve/UFQrlsqhJqddhmfvvLqRd9LgGi/i7uob6YzbJ8RmIVORm0brUGRktbE6DqI5r Kxs/LJ/X91myVtIGYxqVmMSJ3Ks8jSXz3FCAMD4MOu9elYLay5RxreGIoscyrtx/ ZGI6RZpa4+7MS1WU+yk1TqEY0QmqVQhCGfv+LvgH36M6w32xDa3AR99VZR0XnbHW 05gS97cnKm/G+hVJn5niP/Q24Itg7tE= -----END CERTIFICATE-----Generated at Sun Jun 14 04:16:36 2026 by rpki-client