$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa File: dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa (raw, json) Hash identifier: TMlLzkoZ0134j9CqTBym4UBr2a39jG5SeVFD3DnEGiI= Subject key identifier: A8:A1:AE:F2:E0:3C:3D:B6:2A:AB:3B:76:F6:13:84:FA:4D:1E:D1:CE Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D6EDA8E0587B886FD79D73480 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 13.111.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8e:05:87:b8:86:fd:79:d7:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=bf6e95e4-00ad-4d00-a038-ab543d4e56b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:84:6d:90:b7:13:49:ed:8e:7b:e5:ef:18: c6:2f:dc:19:20:8b:6c:d3:12:4a:16:33:86:29:20: 7c:e1:e7:9c:f7:23:8f:ec:fe:bb:d7:87:a6:1a:85: 90:da:7a:ba:83:e5:50:aa:3a:45:a6:c3:4b:a1:78: 00:7a:4c:e7:cd:23:6d:b9:28:0f:f3:ee:80:96:59: 07:81:3f:fc:71:64:39:97:61:52:d7:f7:aa:0e:6d: 25:64:65:6a:3d:fe:18:59:31:b0:79:9b:2d:1e:a2: ff:22:a3:36:41:d3:72:2e:b0:91:57:81:58:35:cd: b8:f1:9d:2d:e9:4f:a3:36:36:4d:6c:b6:5b:98:26: c5:81:f8:d3:be:a0:48:87:9b:18:1e:85:91:95:14: 46:26:36:8a:be:1e:37:ad:10:20:1d:e1:a8:5a:15: e5:b6:1a:1a:3b:91:95:21:c6:cb:67:80:f4:10:66: 9b:b5:09:f9:f4:53:6e:8c:67:bf:71:96:ab:1a:f6: e0:12:85:59:6b:29:e6:8f:4c:6b:6a:36:68:84:a7: c4:d6:5e:3c:f1:d3:4c:ba:0c:1b:96:9a:4a:f7:e4: 16:2d:37:3b:a1:bf:ef:fc:39:f2:8b:6a:fb:c9:0e: a7:de:ea:00:14:d2:da:ba:56:89:83:8b:d4:10:4c: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A1:AE:F2:E0:3C:3D:B6:2A:AB:3B:76:F6:13:84:FA:4D:1E:D1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dc71cf42-d9bf-3345-8821-8e7e97d671e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:32:c9:7c:4d:25:3b:e8:6d:60:a0:3a:3e:65:6a:48:21:1a: 59:2e:a1:3c:e9:89:04:94:0b:00:5e:48:ed:97:25:75:b2:3f: 7e:7c:d3:9b:e5:3a:c0:63:ba:c4:7a:ea:0b:bf:9f:f1:ef:9b: c9:09:d4:af:c5:41:f6:08:3f:48:86:49:a9:c6:23:6a:e7:18: d5:58:87:e1:cc:f4:b7:9c:a3:c4:d4:55:0b:9d:18:cb:6e:8e: 92:be:57:d8:41:6e:80:44:d4:eb:c9:a5:2c:1d:89:67:1f:b4: 0a:a9:8f:4a:52:fc:56:2f:ed:ee:83:a4:af:e1:54:76:8f:74: 9a:97:6d:81:42:6a:7f:d2:6b:74:d5:26:25:24:37:6e:e2:42: 8d:fc:60:ea:4d:9c:84:b2:0d:c2:21:1e:65:78:3a:9a:18:80: 1b:f4:c0:77:af:87:09:da:52:4f:92:87:b6:01:eb:1e:80:51: f6:c2:55:41:fc:d7:1b:a2:6c:f1:88:2c:64:bb:a2:eb:44:7b: a7:ac:ad:94:56:48:b5:01:ce:46:b0:b6:8c:b4:46:aa:cb:58: 02:b9:9d:9b:a9:5c:5a:ef:2d:2f:a9:2a:75:46:ea:95:63:bd: e3:9a:0c:f6:0b:40:3b:eb:5c:72:19:f4:ec:af:66:33:1d:0b: 90:89:c7:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o4Fh7iG/XnXNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YmY2ZTk1ZTQtMDBhZC00ZDAwLWEwMzgtYWI1NDNkNGU1NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmziEbZC3E0ntjnvl7xjGL9wZIIts0xJKFjOG KSB84eec9yOP7P6714emGoWQ2nq6g+VQqjpFpsNLoXgAekznzSNtuSgP8+6AllkH gT/8cWQ5l2FS1/eqDm0lZGVqPf4YWTGweZstHqL/IqM2QdNyLrCRV4FYNc248Z0t 6U+jNjZNbLZbmCbFgfjTvqBIh5sYHoWRlRRGJjaKvh43rRAgHeGoWhXlthoaO5GV IcbLZ4D0EGabtQn59FNujGe/cZarGvbgEoVZaynmj0xrajZohKfE1l488dNMugwb lppK9+QWLTc7ob/v/Dnyi2r7yQ6n3uoAFNLaulaJg4vUEExDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKihrvLgPD22Kqs7dvYThPpNHtHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGM3MWNmNDItZDliZi0z MzQ1LTg4MjEtOGU3ZTk3ZDY3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADW/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8yyXxNJTvobWCgOj5lakghGlkuoTzpiQSUCwBeSO2XJXWyP35805vl OsBjusR66gu/n/Hvm8kJ1K/FQfYIP0iGSanGI2rnGNVYh+HM9Leco8TUVQudGMtu jpK+V9hBboBE1OvJpSwdiWcftAqpj0pS/FYv7e6DpK/hVHaPdJqXbYFCan/Sa3TV JiUkN27iQo38YOpNnISyDcIhHmV4OpoYgBv0wHevhwnaUk+Sh7YB6x6AUfbCVUH8 1xuibPGILGS7outEe6esrZRWSLUBzkawtoy0RqrLWAK5nZupXFrvLS+pKnVG6pVj veOaDPYLQDvrXHIZ9OyvZjMdC5CJx08= -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:42 2026 by rpki-client