$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf1ff146-60bc-3944-81ee-e53e6b26648b.roa File: bf1ff146-60bc-3944-81ee-e53e6b26648b.roa (raw, json) Hash identifier: YqZw0PctmillprtcoCX3tATDd6EPWb2EY0UzhTPT8pc= Subject key identifier: F2:8C:A5:56:B4:BD:9C:90:3B:91:BD:C8:C5:E6:1D:48:EA:68:A6:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB148CBC7AD597ED5A7280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf1ff146-60bc-3944-81ee-e53e6b26648b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.43.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:14:8c:bc:7a:d5:97:ed:5a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=51d4324b-6aba-4c75-b675-17a2a141b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:86:20:3a:4f:75:26:a5:b9:cd:30:d1:3e: 14:54:86:41:be:c0:df:dd:2c:0a:8b:4e:c8:9c:b8: b3:46:71:b0:7a:9b:84:87:13:fa:9f:da:9b:1d:a1: 9a:49:3d:9a:f6:64:7d:07:81:6c:f5:03:1f:b8:5f: b7:5c:e6:ba:7f:a9:f8:64:5a:82:b1:88:2a:d3:2f: e9:d2:47:ce:da:14:6e:86:60:02:77:f5:02:f0:ee: ea:72:ab:c3:eb:fa:a6:74:de:7b:e7:d4:a6:6f:2a: 7e:62:b9:20:27:df:52:34:67:bf:a3:f3:6d:ae:84: b3:c7:4f:90:93:70:77:f9:12:9a:28:76:85:ea:1e: 55:8f:af:90:2a:4a:7f:30:4b:de:bd:65:9b:31:14: 2a:dd:a6:09:65:24:b5:53:93:3d:6e:c3:8b:61:7c: 90:59:12:3b:8b:4d:61:cc:ad:90:d5:55:82:fc:ec: 52:1a:b7:97:b6:92:9f:56:38:04:89:c6:cf:18:56: 44:73:02:b3:ae:ba:a5:fc:ab:7a:74:f5:d6:39:d2: ae:7c:63:4b:42:be:44:b5:a6:33:f8:0e:b4:05:a3: 74:df:1e:f1:59:45:d2:9b:46:78:86:1f:f4:76:52: 3f:f7:2e:cb:d6:8d:1e:c6:db:93:ef:18:ad:1a:12: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:A5:56:B4:BD:9C:90:3B:91:BD:C8:C5:E6:1D:48:EA:68:A6:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf1ff146-60bc-3944-81ee-e53e6b26648b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:97:89:b4:96:1c:93:8f:41:2c:2c:11:c8:a3:5f:54:f9:66: 59:53:09:80:e8:62:d7:69:7e:19:83:b4:12:48:42:11:4f:65: c1:f5:5c:e0:cb:7c:d2:80:19:4e:68:c0:83:e9:fa:b5:ee:5b: 0a:22:64:f6:b7:68:8f:f5:bf:7e:e6:aa:cb:68:86:69:67:30: 68:b2:88:1e:3c:fa:20:ae:2d:bd:03:04:cd:ef:2c:8d:31:a3: c1:79:bd:50:2b:ea:e3:c1:93:8c:12:83:f1:5d:e6:ba:15:d8: c4:a1:8d:3b:b4:d3:9c:56:34:93:74:35:0d:9c:1f:11:56:4a: f3:ea:0b:91:a1:20:ad:b6:2b:32:ae:43:b7:8b:e6:03:38:ae: 3a:87:f7:7d:01:fc:ee:50:a6:14:07:ce:d7:d3:98:cb:22:19: be:7f:33:94:9e:fa:94:48:48:6f:0b:5e:2e:58:f6:6b:6f:88: 8d:67:18:bc:2c:bd:3a:0c:20:66:05:59:5c:62:dc:8f:2b:70: a9:a9:a3:90:9f:b3:64:48:ce:96:9a:cd:92:3d:bf:ab:12:78: ab:99:1a:76:30:85:00:27:70:e3:32:90:2a:9d:34:09:34:82: e8:2c:80:c4:34:a6:1e:10:f2:69:c3:35:ea:d5:70:9f:81:ae: 23:95:5a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuxSMvHrVl+1acoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTFkNDMyNGItNmFiYS00Yzc1LWI2NzUtMTdhMmExNDFiMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXmGIDpPdSaluc0w0T4UVIZBvsDf3SwKi07I nLizRnGwepuEhxP6n9qbHaGaST2a9mR9B4Fs9QMfuF+3XOa6f6n4ZFqCsYgq0y/p 0kfO2hRuhmACd/UC8O7qcqvD6/qmdN5759Smbyp+YrkgJ99SNGe/o/NtroSzx0+Q k3B3+RKaKHaF6h5Vj6+QKkp/MEvevWWbMRQq3aYJZSS1U5M9bsOLYXyQWRI7i01h zK2Q1VWC/OxSGreXtpKfVjgEicbPGFZEcwKzrrql/Kt6dPXWOdKufGNLQr5EtaYz +A60BaN03x7xWUXSm0Z4hh/0dlI/9y7L1o0extuT7xitGhKZfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKMpVa0vZyQO5G9yMXmHUjqaKZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYxZmYxNDYtNjBiYy0z OTQ0LTgxZWUtZTUzZTZiMjY2NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKXibSWHJOPQSwsEcijX1T5ZllTCYDoYtdpfhmDtBJIQhFPZcH1XODL fNKAGU5owIPp+rXuWwoiZPa3aI/1v37mqstohmlnMGiyiB48+iCuLb0DBM3vLI0x o8F5vVAr6uPBk4wSg/Fd5roV2MShjTu005xWNJN0NQ2cHxFWSvPqC5GhIK22KzKu Q7eL5gM4rjqH930B/O5QphQHztfTmMsiGb5/M5Se+pRISG8LXi5Y9mtviI1nGLws vToMIGYFWVxi3I8rcKmpo5Cfs2RIzpaazZI9v6sSeKuZGnYwhQAncOMykCqdNAk0 gugsgMQ0ph4Q8mnDNerVcJ+BriOVWhE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:59:39 2026 by rpki-client