$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf6805e7-2128-324f-961d-0ee5e263f39a.roa File: bf6805e7-2128-324f-961d-0ee5e263f39a.roa (raw, json) Hash identifier: R01Jr86Llk/k0ZD6gFg7h0VWXJ41dDcGmK81T1j9K0E= Subject key identifier: 1F:F5:86:EF:DB:04:F0:1D:22:E8:4D:F9:A1:7D:6D:88:A3:EC:77:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D52434CA5F7CBE549643BCE40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf6805e7-2128-324f-961d-0ee5e263f39a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 30036 IP address blocks: 97.64.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4c:a5:f7:cb:e5:49:64:3b:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=77c1b40f-c2df-46ef-b728-305815c3bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:45:61:23:34:03:88:36:ab:ae:4c:11:53: 19:bc:bd:ea:89:3e:53:fd:a4:5c:78:10:6d:c3:e7: 27:8b:ad:df:c6:d4:23:d9:26:10:e4:13:5a:48:18: 49:82:6d:75:c8:81:c3:ca:f0:46:14:cc:ab:22:f8: 69:a0:7a:46:2e:57:f4:77:8c:8d:f2:2e:6a:ca:15: e7:1f:e1:95:e8:43:be:31:e3:0c:68:20:a8:c5:94: 6c:0d:1b:a3:95:7a:b4:34:c5:e9:7d:43:b0:13:1f: 75:c2:e2:1e:57:1e:b9:bd:e4:17:d4:16:ea:9e:ed: b2:6c:8c:85:c4:49:e9:c2:14:2f:6f:66:e5:71:50: 40:32:e8:2a:00:ce:0d:21:aa:dc:fa:b8:65:56:96: e3:c9:87:62:fb:33:d3:83:cf:16:08:d3:27:29:61: 64:34:01:2d:1b:e4:53:9c:ca:67:4d:7c:d3:b2:f4: ae:d1:3f:7e:08:35:93:f7:24:2e:f0:fa:74:c4:22: 4b:af:0a:e1:13:ba:d7:c0:b9:bb:5d:f2:1e:17:b1: 9f:0d:14:ca:74:89:66:b9:c4:3f:c4:d4:f7:29:b6: d3:22:15:f0:df:bc:00:a1:31:36:ee:3c:fe:c0:10: 04:8e:99:2a:25:a9:9a:ff:b4:93:33:b7:3d:26:5b: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:86:EF:DB:04:F0:1D:22:E8:4D:F9:A1:7D:6D:88:A3:EC:77:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf6805e7-2128-324f-961d-0ee5e263f39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0c:35:41:f6:3d:14:82:fa:9d:fe:08:b1:5f:cf:2c:34:65: dc:c9:9f:00:52:72:35:01:4d:01:0f:97:24:40:61:63:43:0e: e5:c1:6a:29:0c:c1:7a:ab:db:ef:65:c1:32:78:c5:28:83:cd: 5c:4c:87:4f:49:55:11:92:36:1a:6b:5d:cc:87:03:1c:ae:20: 64:cc:25:9c:e2:a8:8d:39:97:eb:9f:1b:45:22:be:8c:a8:64: 53:65:a2:b0:58:02:b8:5a:74:d8:3f:70:1f:28:76:7b:b3:e9: 05:15:a5:7a:c7:0f:c3:3d:53:10:0a:a8:24:57:d8:3b:e9:c5: f5:27:cf:49:11:80:89:f8:39:8c:0a:38:30:38:2d:da:30:2c: be:2e:6d:9d:15:20:0f:13:80:ce:df:5e:be:08:f4:5d:5d:e5: d0:12:92:c0:e7:41:ce:dc:6f:05:d7:a0:db:67:54:e8:e5:56: f5:d9:42:4f:22:94:2e:0f:98:9a:dd:50:27:d9:69:64:08:40: c9:d9:10:ad:3e:67:43:6e:ca:99:a9:bf:e9:31:83:ac:63:bb: 8a:a0:27:e6:16:ec:f2:75:d5:66:3a:2d:97:26:83:61:81:e8: b1:a6:a5:4a:02:5a:f9:4e:dc:cb:47:92:39:b9:0e:9d:58:a1: 83:0c:90:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0yl98vlSWQ7zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NzdjMWI0MGYtYzJkZi00NmVmLWI3MjgtMzA1ODE1YzNiZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JNFYSM0A4g2q65MEVMZvL3qiT5T/aRceBBt w+cni63fxtQj2SYQ5BNaSBhJgm11yIHDyvBGFMyrIvhpoHpGLlf0d4yN8i5qyhXn H+GV6EO+MeMMaCCoxZRsDRujlXq0NMXpfUOwEx91wuIeVx65veQX1Bbqnu2ybIyF xEnpwhQvb2blcVBAMugqAM4NIarc+rhlVpbjyYdi+zPTg88WCNMnKWFkNAEtG+RT nMpnTXzTsvSu0T9+CDWT9yQu8Pp0xCJLrwrhE7rXwLm7XfIeF7GfDRTKdIlmucQ/ xNT3KbbTIhXw37wAoTE27jz+wBAEjpkqJama/7STM7c9JltGvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/1hu/bBPAdIuhN+aF9bYij7HcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2ODA1ZTctMjEyOC0z MjRmLTk2MWQtMGVlNWUyNjNmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoMNUH2PRSC+p3+CLFfzyw0ZdzJnwBScjUBTQEPlyRAYWNDDuXBaikM wXqr2+9lwTJ4xSiDzVxMh09JVRGSNhprXcyHAxyuIGTMJZziqI05l+ufG0Uivoyo ZFNlorBYArhadNg/cB8odnuz6QUVpXrHD8M9UxAKqCRX2DvpxfUnz0kRgIn4OYwK ODA4LdowLL4ubZ0VIA8TgM7fXr4I9F1d5dASksDnQc7cbwXXoNtnVOjlVvXZQk8i lC4PmJrdUCfZaWQIQMnZEK0+Z0Nuypmpv+kxg6xju4qgJ+YW7PJ11WY6LZcmg2GB 6LGmpUoCWvlO3MtHkjm5Dp1YoYMMkNI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:20 2026 by rpki-client