$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa File: bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa (raw, json) Hash identifier: 88i8zf2LxsmJqBMGKQGuvPXVFeLhS+mT2Ron07BGVMQ= Subject key identifier: 0D:CA:C6:B5:36:DB:5E:F0:63:33:F8:4E:46:AB:36:9C:62:13:C0:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE87B96C0B62F04FCECFA600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33287 IP address blocks: 68.84.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:b9:6c:0b:62:f0:4f:ce:cf:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=d9b42421-0861-4e56-b73a-b126a26fdf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:6f:f9:f4:27:c2:b1:9a:ca:fe:38:c8:24: 76:af:fb:23:6b:7d:83:97:08:7f:c2:0f:9d:ff:1d: 1f:a6:ef:8f:db:8d:c0:25:fa:ba:a9:0e:88:02:b7: 01:9d:25:00:50:89:5b:85:7d:6f:f1:89:f4:10:7f: f1:3a:69:fc:e5:1f:99:d1:d3:e8:0f:92:6d:c0:62: 27:03:a9:67:a9:15:aa:b3:87:4f:0d:81:a7:27:e6: c2:10:40:03:c1:63:a8:b6:12:28:c2:c9:0a:47:24: 26:25:11:62:f1:67:eb:67:ff:4d:6f:58:e2:c1:c7: a7:9f:eb:81:54:ca:18:ea:3a:0f:f9:4d:8a:2a:38: 7e:ab:66:13:fe:6c:e5:93:68:c3:24:5f:e4:02:4f: 51:71:7c:49:9e:b9:d6:ba:c2:19:b4:68:7d:74:85: 1c:63:7a:bd:f5:09:52:0a:72:84:f5:ea:b5:9a:e3: a1:59:a4:fa:29:fa:f0:8c:0e:ba:68:35:fa:0e:fd: 82:a3:3d:6b:d3:bc:ac:4f:10:6b:f4:08:c3:ce:6c: ca:2f:e9:16:15:e1:ef:94:d1:6c:28:a9:ed:b0:30: c5:0f:a0:74:2e:48:b2:37:1b:80:47:d3:21:e8:42: c6:48:28:23:c7:d2:74:4c:a8:b6:2c:05:fb:36:33: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CA:C6:B5:36:DB:5E:F0:63:33:F8:4E:46:AB:36:9C:62:13:C0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:23:f8:c8:af:38:6c:c9:1e:3b:cb:fc:b0:06:bc:c5:2b:d7: 02:f2:b4:7e:df:8f:3c:4f:f4:3a:8d:31:4f:11:70:19:19:2e: 16:6f:8a:25:67:bf:e1:82:f6:fb:92:15:4f:62:82:2d:21:d6: 22:4c:0a:69:da:fa:91:39:d6:f3:54:39:a2:a6:fa:81:af:96: 4d:4b:fc:34:c8:a7:f6:e0:3d:57:ac:87:9b:5f:14:48:ad:8f: 34:04:36:7b:3a:3d:20:3c:67:53:43:b0:0c:17:28:56:da:f9: eb:f6:f4:85:f3:62:43:7d:54:89:1a:65:a8:18:d1:24:66:22: a5:07:b6:0d:4a:75:8e:63:22:fd:59:f9:3a:9c:a6:7a:22:13: 42:40:6c:d1:fd:2a:39:e9:65:57:ee:54:dd:8f:d6:18:c1:9a: 9d:b5:ca:4b:8e:82:71:21:58:34:17:96:7b:8a:52:d1:88:9e: 27:14:84:67:19:3a:68:1c:72:93:28:ca:06:50:ef:51:ad:3c: 82:de:a6:e3:f2:d7:5d:64:1d:83:d4:c6:cd:96:d1:62:36:30: f1:41:ae:76:a2:90:59:e8:c2:fd:b0:04:cf:af:b1:e8:f2:6d: f8:25:8b:49:95:26:3b:97:47:56:ce:11:98:9c:e2:fb:b6:9a: be:68:bb:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eh7lsC2LwT87PpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk ZDliNDI0MjEtMDg2MS00ZTU2LWI3M2EtYjEyNmEyNmZkZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswtv+fQnwrGayv44yCR2r/sja32Dlwh/wg+d /x0fpu+P243AJfq6qQ6IArcBnSUAUIlbhX1v8Yn0EH/xOmn85R+Z0dPoD5JtwGIn A6lnqRWqs4dPDYGnJ+bCEEADwWOothIowskKRyQmJRFi8WfrZ/9Nb1jiwcenn+uB VMoY6joP+U2KKjh+q2YT/mzlk2jDJF/kAk9RcXxJnrnWusIZtGh9dIUcY3q99QlS CnKE9eq1muOhWaT6KfrwjA66aDX6Dv2Coz1r07ysTxBr9AjDzmzKL+kWFeHvlNFs KKntsDDFD6B0LkiyNxuAR9Mh6ELGSCgjx9J0TKi2LAX7NjMmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3KxrU2217wYzP4TkarNpxiE8C/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZjZThlZTktMDNhMy0z ZjdlLWE3NWItN2M4ZjNjODI0MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0j+MivOGzJHjvL/LAGvMUr1wLytH7fjzxP9DqNMU8RcBkZLhZviiVn v+GC9vuSFU9igi0h1iJMCmna+pE51vNUOaKm+oGvlk1L/DTIp/bgPVesh5tfFEit jzQENns6PSA8Z1NDsAwXKFba+ev29IXzYkN9VIkaZagY0SRmIqUHtg1KdY5jIv1Z +TqcpnoiE0JAbNH9KjnpZVfuVN2P1hjBmp21ykuOgnEhWDQXlnuKUtGInicUhGcZ OmgccpMoygZQ71GtPILepuPy111kHYPUxs2W0WI2MPFBrnaikFnowv2wBM+vsejy bfgli0mVJjuXR1bOEZic4vu2mr5ouzw= -----END CERTIFICATE-----Generated at Sat Jun 13 19:22:19 2026 by rpki-client