$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa File: 868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa (raw, json) Hash identifier: MSJOs0ek2lHqNgHh6/0IJ+UizAE68kqGHVXlEsFkL+8= Subject key identifier: 37:5F:0A:48:10:7C:89:28:E9:BC:FA:E2:D9:7E:F0:20:1D:43:B5:AD Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D6AAA79A328A2150F337DC2A0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 22606 IP address blocks: 13.111.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:79:a3:28:a2:15:0f:33:7d:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=97a123a5-dc27-4e52-ae07-f16d928d5776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:b4:b3:3e:98:4c:ca:99:76:84:9b:6a:0d: a9:d0:95:7c:ce:e3:62:62:00:a7:e8:06:82:10:da: 98:5a:a1:93:0b:79:b1:8c:a9:32:e1:d9:1d:3b:e0: d0:37:14:26:5c:19:c1:3a:ef:19:a4:f5:1d:19:c4: 94:19:67:0c:13:89:79:5c:e9:a5:fc:cf:67:1a:e9: fc:9d:26:c6:4e:4a:b6:35:79:2c:db:3e:23:13:d6: 96:36:74:b3:f7:87:04:ae:76:96:c4:93:bd:20:99: c2:62:db:92:02:b7:4c:fd:82:48:4d:ad:a0:a6:a7: 9b:13:90:26:8c:d0:67:d8:fc:6d:01:25:33:5c:69: 8f:a4:98:27:d7:8f:32:8a:c7:df:45:7f:1f:8f:5b: 67:71:5f:98:13:c5:08:5f:bd:e9:71:41:b1:36:53: 66:a7:56:d1:bc:a5:7b:19:3b:4c:ab:f6:9e:50:7a: 63:2e:bd:27:72:db:cb:04:7a:f2:2a:9c:86:58:98: 20:e6:b9:4c:1b:69:ff:48:16:ba:b4:cc:6b:89:8c: 3e:8e:30:ec:c8:98:2d:37:b9:f9:b1:17:ae:06:a8: 2d:e3:60:20:f8:ee:e0:12:87:b0:35:a6:91:3d:65: 28:e4:1c:af:a9:07:fc:e3:d2:ac:95:5f:b0:2d:c0: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5F:0A:48:10:7C:89:28:E9:BC:FA:E2:D9:7E:F0:20:1D:43:B5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6e:01:59:a8:cf:e4:e4:32:64:ad:8d:78:6a:33:74:ab:71: 7c:c3:fd:80:04:96:94:e1:79:9a:37:eb:5b:c0:90:3a:25:ac: c3:88:49:63:0d:9b:3e:47:fa:0b:72:66:93:d8:36:d8:4c:34: 14:e1:a6:bc:7b:86:5b:6f:94:3a:c3:7a:93:f7:62:85:f1:fe: 3d:5a:24:eb:b7:c8:05:f0:e7:c8:0a:a3:95:10:79:f2:b5:42: dd:36:6b:9c:0a:ee:03:69:07:da:3f:7f:bb:d8:fd:74:92:04: 72:b2:8f:69:35:94:84:11:6e:e5:af:87:88:60:9c:42:9a:36: 2a:87:ef:f5:05:2c:9b:3f:70:b9:f0:8e:e1:0b:eb:cc:34:b5: 74:84:65:83:f3:79:3e:b0:7a:17:f5:04:41:a9:66:ad:b4:7b: e3:a8:8c:36:ae:96:17:51:34:b4:cd:15:de:11:47:09:10:3a: 14:7f:8d:04:cb:fc:99:07:ea:86:84:ce:fa:aa:58:10:53:33: 2b:2d:66:2b:7c:93:6e:05:a6:39:55:06:9f:ab:10:c4:61:03: ef:5f:fa:96:0b:ff:c8:13:f2:d3:29:e6:06:bd:3e:50:b9:c5: 3c:46:c5:cb:c4:1c:44:95:f4:1d:6b:a2:4a:5f:ed:99:fb:0e: d2:e5:53:7a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1qqnmjKKIVDzN9wqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OTdhMTIzYTUtZGMyNy00ZTUyLWFlMDctZjE2ZDkyOGQ1Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglC0sz6YTMqZdoSbag2p0JV8zuNiYgCn6AaC ENqYWqGTC3mxjKky4dkdO+DQNxQmXBnBOu8ZpPUdGcSUGWcME4l5XOml/M9nGun8 nSbGTkq2NXks2z4jE9aWNnSz94cErnaWxJO9IJnCYtuSArdM/YJITa2gpqebE5Am jNBn2PxtASUzXGmPpJgn148yisffRX8fj1tncV+YE8UIX73pcUGxNlNmp1bRvKV7 GTtMq/aeUHpjLr0nctvLBHryKpyGWJgg5rlMG2n/SBa6tMxriYw+jjDsyJgtN7n5 sReuBqgt42Ag+O7gEoewNaaRPWUo5ByvqQf849KslV+wLcAuTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDdfCkgQfIko6bz64tl+8CAdQ7WtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvODY4YTZkMzktYmFkOS0z NDI4LWFlMDctM2E4YzU0YWNiM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMADW8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWW4BWajP5OQyZK2NeGozdKtxfMP9gASWlOF5mjfrW8CQOiWsw4hJYw2b Pkf6C3Jmk9g22Ew0FOGmvHuGW2+UOsN6k/dihfH+PVok67fIBfDnyAqjlRB58rVC 3TZrnAruA2kH2j9/u9j9dJIEcrKPaTWUhBFu5a+HiGCcQpo2Kofv9QUsmz9wufCO 4QvrzDS1dIRlg/N5PrB6F/UEQalmrbR746iMNq6WF1E0tM0V3hFHCRA6FH+NBMv8 mQfqhoTO+qpYEFMzKy1mK3yTbgWmOVUGn6sQxGED71/6lgv/yBPy0ynmBr0+ULnF PEbFy8QcRJX0HWuiSl/tmfsO0uVTeg== -----END CERTIFICATE-----Generated at Sat Apr 18 04:42:46 2026 by rpki-client