$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdfb3cb2-53f0-3d2b-aba0-34d80f1611cc.roa File: bdfb3cb2-53f0-3d2b-aba0-34d80f1611cc.roa (raw, json) Hash identifier: FXq6hnwlQ2p4DUu2ch1DdSt2ZZ6q0uDL1k3y6UGPLXM= Subject key identifier: 35:25:5E:91:50:60:BE:C4:B1:DC:54:AC:82:D5:30:04:A3:5A:26:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8100655BA5DF13D7E09B0280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdfb3cb2-53f0-3d2b-aba0-34d80f1611cc.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 7725 IP address blocks: 24.99.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:65:5b:a5:df:13:d7:e0:9b:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=6089ae12-b088-4a47-8419-4b4286b98c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:f8:31:6e:9e:e5:8a:8e:fa:8e:7d:12:fe: 1d:cd:82:b5:8e:64:87:bf:53:c6:6c:24:48:7f:03: 2c:db:fd:26:cc:7d:75:89:eb:c1:d7:43:24:76:55: c8:1b:a1:2d:b6:eb:9f:1b:48:2b:ee:5f:a0:c9:67: 74:c2:17:b9:96:08:ba:82:f1:e0:91:27:96:c0:e8: 20:7a:c8:b1:5e:cb:89:63:6c:ed:61:8d:82:57:3a: 45:1e:38:87:4f:52:16:88:7e:69:ee:7c:d7:35:da: fb:4c:2e:1c:45:f2:e1:ec:f9:dc:16:ac:a1:9e:4f: 7d:a6:d6:4f:4c:df:96:79:12:f4:29:04:84:c2:28: 4d:dd:ba:be:65:f5:c8:6e:97:ab:92:48:1b:1e:27: 71:ea:f2:ef:4e:61:99:2c:09:e7:e5:ed:90:9e:82: 21:fb:e3:da:03:55:94:55:05:83:fa:d2:c8:bb:e0: f0:9b:57:45:d0:d1:40:ff:42:f9:83:9d:1f:65:f9: 4e:6c:1a:45:2e:5f:85:db:d7:3b:7a:e0:76:ea:2f: 4a:f5:33:25:92:b8:9a:c1:61:03:db:a5:12:9a:46: 20:93:fd:02:b0:f9:0b:57:13:4b:a1:d6:52:9b:6b: 71:63:ce:6a:77:cd:a3:2c:3a:f8:1d:64:fe:89:cb: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:25:5E:91:50:60:BE:C4:B1:DC:54:AC:82:D5:30:04:A3:5A:26:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdfb3cb2-53f0-3d2b-aba0-34d80f1611cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e0:21:d3:65:32:a2:aa:6f:5a:45:43:51:b9:dd:58:2e:da: 5f:05:bb:43:50:0b:56:80:b1:ec:71:70:c7:45:c7:d6:37:06: 47:52:4f:d7:9f:64:e9:93:1f:a7:14:6e:be:49:c4:e0:4e:11: b2:f3:43:10:1d:f2:ca:6c:68:f1:57:10:25:e9:96:1f:8e:54: 7e:c3:47:ad:02:3d:5b:a6:e2:f4:13:99:fb:78:73:b7:17:09: 49:07:17:22:26:6d:7d:09:10:6c:05:7f:b3:8f:22:83:88:9b: cd:ef:60:61:d9:7b:b4:9b:57:20:90:d3:2a:23:ce:06:7c:5c: d5:c6:85:c3:53:f1:a7:49:c5:2f:7b:ea:5a:c2:ac:50:3c:6b: e8:b8:2b:e3:5f:a4:2f:c5:35:b1:e8:3c:7b:9a:d8:af:6f:d9: 32:d5:13:56:fa:9b:4e:23:fe:ad:ab:8c:a2:8b:ae:ad:65:cb: a9:a0:20:84:0b:8f:99:55:49:12:11:e0:0e:f3:43:85:6f:32: 1c:8c:de:3a:0b:3c:eb:ae:c5:12:37:ee:c4:a4:ca:20:16:61: 16:61:20:08:52:2d:a6:ae:55:8a:d4:14:9c:0c:03:f5:09:4d: 89:4a:fc:71:7c:2d:68:b3:e7:22:7e:71:a9:ce:56:77:ec:67: 6d:cf:6d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAGVbpd8T1+CbAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NjA4OWFlMTItYjA4OC00YTQ3LTg0MTktNGI0Mjg2Yjk4Yzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dn4MW6e5YqO+o59Ev4dzYK1jmSHv1PGbCRI fwMs2/0mzH11ievB10MkdlXIG6EttuufG0gr7l+gyWd0whe5lgi6gvHgkSeWwOgg esixXsuJY2ztYY2CVzpFHjiHT1IWiH5p7nzXNdr7TC4cRfLh7PncFqyhnk99ptZP TN+WeRL0KQSEwihN3bq+ZfXIbperkkgbHidx6vLvTmGZLAnn5e2QnoIh++PaA1WU VQWD+tLIu+Dwm1dF0NFA/0L5g50fZflObBpFLl+F29c7euB26i9K9TMlkriawWED 26USmkYgk/0CsPkLVxNLodZSm2txY85qd82jLDr4HWT+icvk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUlXpFQYL7EsdxUrILVMASjWibmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRmYjNjYjItNTNmMC0z ZDJiLWFiYTAtMzRkODBmMTYxMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGO6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALngIdNlMqKqb1pFQ1G53Vgu2l8Fu0NQC1aAsexxcMdFx9Y3BkdST9ef ZOmTH6cUbr5JxOBOEbLzQxAd8spsaPFXECXplh+OVH7DR60CPVum4vQTmft4c7cX CUkHFyImbX0JEGwFf7OPIoOIm83vYGHZe7SbVyCQ0yojzgZ8XNXGhcNT8adJxS97 6lrCrFA8a+i4K+NfpC/FNbHoPHua2K9v2TLVE1b6m04j/q2rjKKLrq1ly6mgIIQL j5lVSRIR4A7zQ4VvMhyM3joLPOuuxRI37sSkyiAWYRZhIAhSLaauVYrUFJwMA/UJ TYlK/HF8LWiz5yJ+canOVnfsZ23PbSM= -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:08 2026 by rpki-client