$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/d9b929ba-cf1f-3852-8614-fbd414262ca4.roa File: d9b929ba-cf1f-3852-8614-fbd414262ca4.roa (raw, json) Hash identifier: hzwDqCJT7iPvJRmiYLAnumooU/IOrHfUzU12DDvx1qM= Subject key identifier: 5D:DF:52:97:19:B0:FF:96:92:FD:16:F0:65:7B:8B:1C:F2:0C:C1:51 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D003B6FC558F5E111417A5B40 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/d9b929ba-cf1f-3852-8614-fbd414262ca4.roa Signing time: Fri 27 Feb 2026 10:01:20 +0000 ROA not before: Fri 27 Feb 2026 10:01:20 +0000 ROA not after: Thu 28 May 2026 09:01:20 +0000 asID: 14618 IP address blocks: 170.139.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:3b:6f:c5:58:f5:e1:11:41:7a:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Feb 27 10:01:20 2026 GMT Not After : May 28 09:01:20 2026 GMT Subject: CN=a389fea7-c654-4c42-89e5-7f079147795c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7e:e1:00:68:70:1b:9d:02:10:7b:2a:75:78: 8c:8d:9b:b8:f1:58:bd:9b:0d:5a:8b:d8:2b:68:f6: a5:35:f2:f5:e3:10:87:f4:c0:6c:9f:be:b4:d7:b3: 68:67:05:87:02:38:0f:c7:98:19:bf:51:52:17:fb: 56:81:ef:d6:01:d4:58:de:50:f6:78:41:22:24:ec: a8:d0:dd:cf:44:72:fa:f9:ad:9f:95:88:8a:a2:31: a5:73:50:37:d0:18:e9:06:53:b2:46:02:97:47:4e: d8:93:51:7a:a4:a1:c1:09:eb:f5:e6:33:83:8a:5d: 3a:46:43:1b:5f:10:2b:d8:3d:7b:3c:56:27:67:73: b8:69:ca:f8:50:99:37:de:a2:2c:94:a4:c2:a4:1a: dd:99:42:d0:1f:d4:c7:8f:d9:a7:c5:00:64:13:08: 97:d7:9e:66:5e:95:8d:db:d1:6f:b4:7f:29:7f:c9: a8:a0:68:c9:80:de:b9:9b:29:5c:25:45:27:02:75: 7a:00:2b:cc:88:82:26:c6:95:6f:a6:0f:bc:bb:21: 0c:17:b6:f1:91:29:8b:df:17:5b:b5:9b:8f:17:80: d0:55:7a:aa:ae:17:7d:d3:3c:c0:df:da:9e:37:fd: 4b:8a:98:ad:6b:88:e7:f5:91:31:4a:58:b6:54:ff: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:52:97:19:B0:FF:96:92:FD:16:F0:65:7B:8B:1C:F2:0C:C1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/d9b929ba-cf1f-3852-8614-fbd414262ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 170.139.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:40:76:b6:c9:57:d9:f7:5d:85:08:0d:00:94:c3:7d:a3:97: 83:2d:7f:a6:1e:9b:2e:59:47:33:e4:60:56:12:92:e7:84:5b: c9:49:ec:c2:a2:79:4e:f8:7a:32:6b:58:05:35:80:b3:69:58: b7:c1:18:aa:02:a0:fa:3d:9f:f5:e1:d6:1a:05:96:74:c7:be: c2:56:8a:d1:92:ff:34:65:b6:2f:5f:00:5c:ce:0f:90:eb:15: 46:38:4f:fa:62:c0:18:b1:41:18:10:13:a7:16:b5:f4:75:c8: a7:a4:c0:2e:8d:a2:4d:a1:20:e1:e7:8f:61:71:d1:59:ca:07: 6d:e6:00:6b:86:47:2c:5c:e9:2b:cd:99:e5:41:8f:b4:1d:9c: 7c:02:2d:56:c4:72:ec:ee:0f:00:06:dc:ac:32:31:cf:1f:d1: 00:95:97:05:3a:bf:de:77:92:a0:42:c6:31:1e:63:0b:2e:33: 88:94:aa:1f:1c:39:14:dc:8f:4c:6c:90:2e:98:60:1e:e2:d1: 36:bb:5f:79:bc:f3:e0:a0:93:e6:9d:3a:3f:16:03:c5:42:05: 99:01:f4:0a:0c:83:90:d9:b1:02:50:7e:fb:82:12:2c:28:cc: c1:54:34:b7:c3:61:39:91:fc:b2:7e:97:e1:68:b1:4c:bc:90: d1:0f:64:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AO2/FWPXhEUF6W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDIyNzEwMDEyMFoXDTI2MDUyODA5MDEyMFowLzEtMCsGA1UEAxMk YTM4OWZlYTctYzY1NC00YzQyLTg5ZTUtN2YwNzkxNDc3OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH7hAGhwG50CEHsqdXiMjZu48Vi9mw1ai9gr aPalNfL14xCH9MBsn76017NoZwWHAjgPx5gZv1FSF/tWge/WAdRY3lD2eEEiJOyo 0N3PRHL6+a2flYiKojGlc1A30BjpBlOyRgKXR07Yk1F6pKHBCev15jODil06RkMb XxAr2D17PFYnZ3O4acr4UJk33qIslKTCpBrdmULQH9THj9mnxQBkEwiX155mXpWN 29FvtH8pf8mooGjJgN65mylcJUUnAnV6ACvMiIImxpVvpg+8uyEMF7bxkSmL3xdb tZuPF4DQVXqqrhd90zzA39qeN/1Lipita4jn9ZExSli2VP/0OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3fUpcZsP+Wkv0W8GV7ixzyDMFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZDliOTI5YmEtY2YxZi0z ODUyLTg2MTQtZmJkNDE0MjYyY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqouAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVAdrbJV9n3XYUIDQCUw32jl4Mtf6Yemy5ZRzPkYFYSkueEW8lJ7MKi eU74ejJrWAU1gLNpWLfBGKoCoPo9n/Xh1hoFlnTHvsJWitGS/zRlti9fAFzOD5Dr FUY4T/piwBixQRgQE6cWtfR1yKekwC6Nok2hIOHnj2Fx0VnKB23mAGuGRyxc6SvN meVBj7QdnHwCLVbEcuzuDwAG3KwyMc8f0QCVlwU6v953kqBCxjEeYwsuM4iUqh8c ORTcj0xskC6YYB7i0Ta7X3m88+Cgk+adOj8WA8VCBZkB9AoMg5DZsQJQfvuCEiwo zMFUNLfDYTmR/LJ+l+FosUy8kNEPZPQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:17:25 2026 by rpki-client