$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa File: 5ec3dafb-0c5c-33db-868e-2f679742f920.roa (raw, json) Hash identifier: b/7UKbiDpnjdFT+ijS1a+kV5jVD/ZVX28tN0lzXnlLs= Subject key identifier: E0:E0:04:D3:5B:DA:84:25:CC:2D:C3:CC:0C:7F:DC:3A:5D:CE:BD:48 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D6AAA710448F119E41080FB00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14340 IP address blocks: 136.147.164.0/22 maxlen: 24 136.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:71:04:48:f1:19:e4:10:80:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=ed667d0e-f079-4b4a-b298-85d39c5e3c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:28:0b:ba:3f:76:8b:75:2f:63:3b:f4:6b: 0e:b3:c7:bd:0e:19:eb:d2:b1:05:e3:fc:18:74:72: 1f:fe:b3:d4:6e:64:99:13:44:00:39:4d:86:ac:f4: bf:8d:f2:6f:cf:fa:4e:4d:f1:3e:59:bb:dd:95:4f: 45:13:f9:27:07:3d:da:a6:0a:c5:1c:84:24:89:df: 29:98:df:fa:02:76:d7:2f:55:1a:d8:cb:23:74:f5: 21:34:a2:10:85:80:e5:b3:cd:30:3c:a7:0d:bb:31: 78:f7:f3:59:80:4b:27:44:a5:f0:6f:49:eb:ff:f0: a8:0b:dc:a6:6c:99:25:99:2c:39:97:c0:04:f9:66: c7:4c:06:4a:f4:66:05:c2:bb:4a:4e:1e:a9:a4:1b: f4:c1:f8:e7:91:de:b0:60:11:02:42:48:9a:89:23: 0a:cd:05:35:d1:0c:de:a0:79:8f:9b:61:28:eb:46: eb:af:72:4a:18:df:e0:e7:cd:05:dd:cb:e0:11:cf: fc:ea:db:8c:23:d9:c5:c6:bd:49:52:9e:66:ad:86: c6:eb:e0:03:60:08:97:4d:71:0b:8b:71:bc:97:06: 60:5f:16:b1:70:6c:63:d9:05:4a:b1:44:57:bb:13: 33:cc:75:11:5e:0e:cd:fb:f8:06:e9:a7:aa:a4:3f: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E0:04:D3:5B:DA:84:25:CC:2D:C3:CC:0C:7F:DC:3A:5D:CE:BD:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.164.0/22 136.147.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:83:67:7f:c9:4c:72:58:81:75:b8:18:2c:30:ab:13:d9:af: 9f:ab:04:68:b2:d2:da:4e:ba:ad:44:7b:38:f2:43:59:3e:b1: d5:ba:f4:f3:d2:60:52:0b:fa:b3:22:0f:26:7d:3e:ca:fb:cb: ac:a9:d4:e3:9a:31:7e:60:10:bb:7b:75:62:00:77:96:21:82: 2c:61:3d:e8:81:51:ad:b3:6c:35:06:38:89:c6:21:e8:0e:e7: 35:d5:73:1f:a6:5a:59:46:31:1d:1c:2d:e4:02:2d:e1:47:00: 4c:ed:a1:16:80:e1:1b:1a:c6:a7:86:4b:bf:87:88:53:91:dc: 61:3b:77:40:3b:b3:d0:30:3e:63:3c:fd:4b:1c:5d:ea:e0:50: 60:88:39:ea:83:4f:59:a8:5d:52:58:80:15:fd:9b:cc:3b:f9: 26:a4:05:1c:bb:e0:35:b1:c4:32:ce:b4:48:48:7b:6c:42:0d: 76:93:89:63:2f:9a:a9:9f:ab:ce:8c:0e:58:5e:b2:83:26:dd: e5:2e:2a:c2:8e:38:bc:87:4d:69:79:b6:4e:66:2c:56:84:2b: 6e:44:11:09:dc:ab:3e:1e:80:f4:6b:b9:11:09:71:96:f9:3f: 2a:ba:df:28:58:e6:ce:da:f7:d0:d6:43:96:9e:c1:5c:bf:11: 86:6e:39:35 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1qqnEESPEZ5BCA+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZWQ2NjdkMGUtZjA3OS00YjRhLWIyOTgtODVkMzljNWUzYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAAoC7o/dot1L2M79GsOs8e9Dhnr0rEF4/wY dHIf/rPUbmSZE0QAOU2GrPS/jfJvz/pOTfE+WbvdlU9FE/knBz3apgrFHIQkid8p mN/6AnbXL1Ua2MsjdPUhNKIQhYDls80wPKcNuzF49/NZgEsnRKXwb0nr//CoC9ym bJklmSw5l8AE+WbHTAZK9GYFwrtKTh6ppBv0wfjnkd6wYBECQkiaiSMKzQU10Qze oHmPm2Eo60brr3JKGN/g580F3cvgEc/86tuMI9nFxr1JUp5mrYbG6+ADYAiXTXEL i3G8lwZgXxaxcGxj2QVKsURXuxMzzHURXg7N+/gG6aeqpD+2FwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFODgBNNb2oQlzC3DzAx/3Dpdzr1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWVjM2RhZmItMGM1Yy0z M2RiLTg2OGUtMmY2Nzk3NDJmOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALSDZ3/JTHJYgXW4GCwwqxPZr5+rBGiy0tpOuq1EezjyQ1k+ sdW69PPSYFIL+rMiDyZ9Psr7y6yp1OOaMX5gELt7dWIAd5YhgixhPeiBUa2zbDUG OInGIegO5zXVcx+mWllGMR0cLeQCLeFHAEztoRaA4RsaxqeGS7+HiFOR3GE7d0A7 s9AwPmM8/UscXergUGCIOeqDT1moXVJYgBX9m8w7+SakBRy74DWxxDLOtEhIe2xC DXaTiWMvmqmfq86MDlhesoMm3eUuKsKOOLyHTWl5tk5mLFaEK25EEQncqz4egPRr uREJcZb5Pyq63yhY5s7a99DWQ5aewVy/EYZuOTU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:27 2026 by rpki-client