$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa File: bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa (raw, json) Hash identifier: iCVTGTOUMab/z9qEso9fnNzlAOfckDZ+Plr9SjNk59A= Subject key identifier: 79:19:74:88:27:FE:49:5A:FA:86:69:AF:94:45:8D:3C:03:C5:05:5D Certificate issuer: /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Certificate serial: 010D0C9F4328584E0865E3947BAD58A61EC53580 Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 28931 IP address blocks: 199.201.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e3:94:7b:ad:58:a6:1e:c5:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=fe1f615d-09ab-4ae8-9196-8aaf7006303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:be:14:8d:9f:61:49:74:fc:ef:e3:9f:3c: c0:65:09:f2:40:e9:c0:aa:ec:b1:87:a3:1c:c5:92: 9a:53:c3:1b:b4:08:91:36:93:9c:90:a5:40:00:7c: 10:e5:ea:b1:63:64:c4:1c:fd:ba:d3:dd:17:ae:5d: b6:81:cf:94:99:79:dd:b4:4c:07:b6:c3:9b:f8:c4: ad:48:97:b3:05:4f:bb:cd:3c:3a:a5:47:be:87:b2: 78:89:12:61:55:f9:62:50:ff:6c:7f:51:53:c0:99: a3:12:ee:aa:8a:00:38:5d:c6:fd:3f:5d:2d:6f:ae: 08:2e:a7:5b:fe:03:58:a1:51:5a:93:05:1f:0d:a0: be:32:cd:be:48:17:c7:53:53:8a:5a:28:50:bb:98: 1b:40:95:37:40:cd:91:41:d8:cd:50:8d:c5:d6:a0: 78:0b:da:50:11:5a:88:e1:31:24:85:94:bb:3f:fe: 68:2f:81:17:9b:1a:0d:03:6e:77:8e:7e:a1:00:da: 10:59:5c:f5:3d:a2:9d:52:9c:6a:b1:b2:46:25:ea: c9:0a:8e:83:83:b5:e6:49:74:e6:c3:0b:15:42:73: ca:69:54:cb:61:37:34:86:6c:f3:01:75:64:d0:e4: d6:ae:7c:a4:27:e9:06:8a:98:92:fa:ed:e8:ef:1d: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:19:74:88:27:FE:49:5A:FA:86:69:AF:94:45:8D:3C:03:C5:05:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl X509v3 Authority Key Identifier: keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer sbgp-ipAddrBlock: critical IPv4: 199.201.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c0:e4:47:cf:7b:fe:d9:c1:42:c0:13:4b:b6:39:a3:94:7f: 8d:ec:1a:58:3a:62:39:31:bd:4a:09:44:2c:c3:f2:7f:df:dc: b2:2c:57:ad:3f:dd:9c:68:7b:7d:8c:71:b1:c6:aa:06:85:a4: 5a:66:da:17:f5:97:82:c2:b5:c4:0b:56:86:6b:ac:09:87:a0: 93:9e:f4:c3:76:36:e0:be:16:96:21:36:9c:14:22:0d:2b:e2: fa:36:27:3b:6a:fc:c7:3a:55:b0:f9:bb:6e:4a:fc:40:b9:32: e1:e8:aa:da:50:a5:38:32:90:d5:f7:df:e2:86:a5:7c:57:ec: e5:c2:b9:d8:26:c2:a1:24:6a:7c:bb:6e:f1:a9:94:60:ce:09: 72:40:ec:70:fd:24:40:5a:91:54:2a:c9:2f:1b:16:8f:9a:8c: b9:18:86:e6:73:20:86:21:81:ae:1c:bc:54:9a:2d:76:50:b9: 3c:28:44:c9:7d:04:b5:8a:66:30:fa:83:10:4b:5e:e3:b4:24: 4c:7a:85:2c:60:65:9e:76:6c:fc:24:0b:21:66:27:4a:ee:30: 48:0d:b1:d2:7f:3a:6e:7a:b7:4f:53:37:05:6f:74:ab:91:42: 12:8c:27:7b:29:e9:03:2a:16:5d:61:8e:60:14:98:38:a6:d3: f5:9a:b7:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeOUe61Yph7FNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy YWEyMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZmUxZjYxNWQtMDlhYi00YWU4LTkxOTYtOGFhZjcwMDYzMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs92+FI2fYUl0/O/jnzzAZQnyQOnAquyxh6Mc xZKaU8MbtAiRNpOckKVAAHwQ5eqxY2TEHP26090Xrl22gc+UmXndtEwHtsOb+MSt SJezBU+7zTw6pUe+h7J4iRJhVfliUP9sf1FTwJmjEu6qigA4Xcb9P10tb64ILqdb /gNYoVFakwUfDaC+Ms2+SBfHU1OKWihQu5gbQJU3QM2RQdjNUI3F1qB4C9pQEVqI 4TEkhZS7P/5oL4EXmxoNA253jn6hANoQWVz1PaKdUpxqsbJGJerJCo6Dg7XmSXTm wwsVQnPKaVTLYTc0hmzzAXVk0OTWrnykJ+kGipiS+u3o7x1dJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkZdIgn/kla+oZpr5RFjTwDxQVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvYmZmNTliMmEtYjdlOC0z M2YwLThkNTUtNzJhMTg2OWUxMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1 OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0 MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4 ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvA5EfPe/7ZwULAE0u2OaOUf43sGlg6YjkxvUoJRCzD8n/f3LIsV60/ 3Zxoe32McbHGqgaFpFpm2hf1l4LCtcQLVoZrrAmHoJOe9MN2NuC+FpYhNpwUIg0r 4vo2Jztq/Mc6VbD5u25K/EC5MuHoqtpQpTgykNX33+KGpXxX7OXCudgmwqEkany7 bvGplGDOCXJA7HD9JEBakVQqyS8bFo+ajLkYhuZzIIYhga4cvFSaLXZQuTwoRMl9 BLWKZjD6gxBLXuO0JEx6hSxgZZ52bPwkCyFmJ0ruMEgNsdJ/Om56t09TNwVvdKuR QhKMJ3sp6QMqFl1hjmAUmDim0/WatwE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:56:59 2026 by rpki-client