$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa File: bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa (raw, json) Hash identifier: vKrsgN0UZqlVh6JM1cxIwLmKJHBQXF36AwOOYAcXWco= Subject key identifier: 01:E2:BF:CD:7D:24:C1:FD:1D:AC:3F:B1:58:76:E3:2F:12:F8:FD:3D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0436228F989E0A52EA3CF080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 30036 IP address blocks: 173.26.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:22:8f:98:9e:0a:52:ea:3c:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=1c1e4609-ef86-4099-a8e6-56f6b393f02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:27:9c:63:e3:1f:0d:0a:52:d7:4d:1c:65: 5f:5f:41:72:5b:bd:5d:d4:d0:ee:50:dd:0f:5d:57: 3d:c8:12:cb:96:1b:7d:d3:9c:b8:f9:6f:39:d7:5d: b1:94:a3:fb:3f:96:52:eb:1d:57:da:11:e8:4f:dd: 23:80:9e:65:66:f9:8c:08:ed:93:cc:78:eb:f1:59: b0:49:a3:de:73:fe:92:e4:bf:6d:4f:5f:25:fd:53: ee:95:38:05:dc:29:cf:a6:99:19:95:39:69:c9:5f: 8c:e6:4d:a2:ed:d5:c6:b7:fa:e2:2e:0d:11:e2:62: 53:ce:43:8a:0c:22:8d:87:5e:36:64:84:19:62:fd: d9:49:ee:48:f7:81:45:bc:cb:d9:e9:79:d8:31:ef: 2e:c5:56:b8:3c:d2:4a:fa:71:ac:c1:d0:47:06:a3: b6:1c:92:24:85:75:87:65:00:e1:e2:3e:9b:0d:9b: d8:16:67:52:e0:ee:29:cd:eb:ab:f4:85:7a:07:92: a1:1f:7a:82:0a:4a:b4:7a:16:c2:65:9e:71:8a:0d: 51:20:be:95:e7:97:95:17:27:91:a4:46:17:d8:5e: d4:f7:96:1e:96:62:99:b0:14:e8:78:26:d1:9f:fc: b4:c6:cc:ed:b6:63:54:c6:c5:1f:d3:5c:25:ba:5f: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:BF:CD:7D:24:C1:FD:1D:AC:3F:B1:58:76:E3:2F:12:F8:FD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:ad:15:ab:57:37:5b:c1:c3:1d:40:fd:24:8d:a3:3a:bf: 8d:b0:39:be:ea:2d:fd:e8:2b:a0:98:92:06:70:7b:b4:5d:dc: 70:7e:8e:a7:a7:6a:80:9f:88:18:d1:e8:62:93:4b:3d:3e:e8: 53:83:1d:1c:86:d1:47:b7:58:87:62:fc:57:4b:40:49:1e:fd: f9:a2:71:ed:ed:28:c6:e5:ba:03:d2:39:c9:6d:89:0b:53:26: 9c:ee:06:2f:20:5b:a1:86:cd:39:2a:8c:c7:b0:ed:62:da:09: d5:3b:48:9c:94:ed:f7:a1:07:03:43:06:74:92:25:96:84:1c: a9:3d:20:ca:58:5e:24:08:5f:75:2b:d4:55:33:02:e5:52:94: 9a:45:66:71:26:9b:d0:40:67:57:ab:3a:01:8f:82:28:69:d4: c1:93:0c:71:e6:86:da:d3:21:a9:d6:b2:61:e6:2a:d2:ae:69: 7c:22:ac:6f:16:43:db:ee:2e:02:00:00:f0:a9:b8:40:f8:51: 1b:3d:c7:ab:92:79:30:8f:2c:39:90:80:d0:29:64:4a:f2:cc: 53:dd:3e:ef:2c:db:92:53:24:b9:f3:6c:39:1b:fe:63:d7:3a: 17:ae:ac:8c:b6:72:13:be:a1:8a:60:c0:e2:79:8b:67:c5:01: 94:08:7f:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiKPmJ4KUuo88IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MWMxZTQ2MDktZWY4Ni00MDk5LWE4ZTYtNTZmNmIzOTNmMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxsnnGPjHw0KUtdNHGVfX0FyW71d1NDuUN0P XVc9yBLLlht905y4+W85112xlKP7P5ZS6x1X2hHoT90jgJ5lZvmMCO2TzHjr8Vmw SaPec/6S5L9tT18l/VPulTgF3CnPppkZlTlpyV+M5k2i7dXGt/riLg0R4mJTzkOK DCKNh142ZIQZYv3ZSe5I94FFvMvZ6XnYMe8uxVa4PNJK+nGswdBHBqO2HJIkhXWH ZQDh4j6bDZvYFmdS4O4pzeur9IV6B5KhH3qCCkq0ehbCZZ5xig1RIL6V55eVFyeR pEYX2F7U95YelmKZsBToeCbRn/y0xszttmNUxsUf01wlul8QAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHiv819JMH9Haw/sVh24y8S+P09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZkMDdkNDktNzNlMy0z YjZmLTlhMzEtMjZjYzEyMGMzZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBVrRWrVzdbwcMdQP0kjaM6v42wOb7qLf3oK6CYkgZwe7Rd3HB+jqen aoCfiBjR6GKTSz0+6FODHRyG0Ue3WIdi/FdLQEke/fmice3tKMblugPSOcltiQtT JpzuBi8gW6GGzTkqjMew7WLaCdU7SJyU7fehBwNDBnSSJZaEHKk9IMpYXiQIX3Ur 1FUzAuVSlJpFZnEmm9BAZ1erOgGPgihp1MGTDHHmhtrTIanWsmHmKtKuaXwirG8W Q9vuLgIAAPCpuED4URs9x6uSeTCPLDmQgNApZEryzFPdPu8s25JTJLnzbDkb/mPX OheurIy2chO+oYpgwOJ5i2fFAZQIfyY= -----END CERTIFICATE-----Generated at Sat Jun 13 16:27:47 2026 by rpki-client