$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e0855eb8-1253-3e7e-8618-6e46d6450121.roa File: e0855eb8-1253-3e7e-8618-6e46d6450121.roa (raw, json) Hash identifier: YvcOExSIc6PRrFFEUUKjv7Q+G/mL2xW8I+5aBT4S3CU= Subject key identifier: 3B:20:32:5A:5C:03:53:2A:2E:88:EF:B7:BC:AA:13:E8:DE:80:39:28 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D003C0C60F7F9E16C4012ADE0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e0855eb8-1253-3e7e-8618-6e46d6450121.roa Signing time: Fri 27 Feb 2026 10:02:34 +0000 ROA not before: Fri 27 Feb 2026 10:02:34 +0000 ROA not after: Thu 28 May 2026 09:02:34 +0000 asID: 16509 IP address blocks: 170.139.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:3c:0c:60:f7:f9:e1:6c:40:12:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Feb 27 10:02:34 2026 GMT Not After : May 28 09:02:34 2026 GMT Subject: CN=0698e752-2808-4af8-9a42-449a6bd848f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:af:b5:63:5c:b0:09:87:c3:94:b1:e0:9b: 35:65:7c:c4:99:f1:93:35:0c:88:8a:eb:22:ae:31: 02:32:4c:49:bb:2f:d0:a2:fa:35:f5:bd:d9:e1:8e: 2f:b1:41:14:7f:ab:86:1a:cb:de:74:f2:97:85:b1: 57:97:00:da:95:8c:75:2f:1e:d4:20:f9:a1:14:f4: 94:f8:a6:53:d0:47:71:fd:ff:28:f1:6c:7e:05:48: 86:ef:d8:40:ee:69:1c:f5:d0:9a:28:c6:e1:13:7c: 82:e8:ae:c8:0a:55:e0:fd:3d:9c:bf:6f:5d:01:b3: be:b2:95:5b:0d:28:8e:72:73:54:31:39:24:e1:9b: 31:f9:0a:61:6f:90:7d:49:da:3d:e3:e3:27:d2:17: ac:f6:f5:0c:70:24:de:78:7e:a9:6c:bd:1b:a2:cd: 95:32:c9:ca:aa:6b:6d:83:38:9a:ef:e5:da:38:e9: 35:bc:71:d1:7b:ee:1c:1a:c4:cb:1c:68:94:cb:71: 2e:61:2b:23:43:f3:8a:1e:b3:77:d2:fc:21:d0:01: 2c:77:b6:84:dd:ab:e8:24:24:e3:0a:cb:a1:b4:f4: a9:a5:e1:3c:b1:d5:25:3c:54:5f:c5:05:8c:64:4c: 97:8d:ce:62:40:42:68:4d:ee:3d:c0:cc:74:52:23: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:32:5A:5C:03:53:2A:2E:88:EF:B7:BC:AA:13:E8:DE:80:39:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e0855eb8-1253-3e7e-8618-6e46d6450121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 170.139.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:47:d8:5f:fd:fe:b7:5c:5d:1b:0d:ed:e2:39:9c:7f:83:b0: bf:bd:c9:dd:d3:0d:8a:e2:bf:0c:1e:a1:e3:e4:c2:63:77:fe: b7:e7:ac:ed:0f:3a:93:b7:68:1c:c3:5f:65:56:1b:1f:59:00: dd:74:a9:59:a6:ab:7b:48:9a:45:59:ab:f2:8a:62:22:33:34: 07:dd:8b:f2:85:72:cd:44:63:51:1f:1f:f7:be:e0:e3:21:5a: b7:15:7d:58:e5:49:ff:65:27:74:5e:a2:b5:9c:2e:38:8c:2f: 65:96:dc:67:4c:bc:e1:90:7f:00:0a:70:32:dc:e1:30:bf:13: a7:07:29:ac:b7:5d:85:41:35:17:8d:8e:05:c6:7a:97:7f:6c: 63:d1:9d:08:a5:c0:b8:2b:9d:28:ce:c7:d9:3a:d9:8a:0c:2b: f2:43:e5:f7:fd:f5:60:ff:67:ef:b4:2c:46:e8:9a:64:86:44: 24:56:41:e0:8b:13:73:20:94:f1:3d:42:59:75:24:5f:fe:56: 4d:be:4a:4e:71:d0:ce:84:4f:4f:84:7c:8b:2e:54:9b:37:96: 8d:12:4a:56:07:b5:4a:ec:7a:ff:16:48:c2:b8:11:41:ff:85: 09:22:53:89:02:ac:37:25:4e:3d:ff:a7:f6:54:d5:31:7f:fc: 54:1f:e0:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0APAxg9/nhbEASreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDIyNzEwMDIzNFoXDTI2MDUyODA5MDIzNFowLzEtMCsGA1UEAxMk MDY5OGU3NTItMjgwOC00YWY4LTlhNDItNDQ5YTZiZDg0OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto6vtWNcsAmHw5Sx4Js1ZXzEmfGTNQyIiusi rjECMkxJuy/Qovo19b3Z4Y4vsUEUf6uGGsvedPKXhbFXlwDalYx1Lx7UIPmhFPSU +KZT0Edx/f8o8Wx+BUiG79hA7mkc9dCaKMbhE3yC6K7IClXg/T2cv29dAbO+spVb DSiOcnNUMTkk4Zsx+Qphb5B9Sdo94+Mn0hes9vUMcCTeeH6pbL0bos2VMsnKqmtt gzia7+XaOOk1vHHRe+4cGsTLHGiUy3EuYSsjQ/OKHrN30vwh0AEsd7aE3avoJCTj CsuhtPSppeE8sdUlPFRfxQWMZEyXjc5iQEJoTe49wMx0UiPCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsgMlpcA1MqLojvt7yqE+jegDkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZTA4NTVlYjgtMTI1My0z ZTdlLTg2MTgtNmU0NmQ2NDUwMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqovgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBH2F/9/rdcXRsN7eI5nH+DsL+9yd3TDYrivwweoePkwmN3/rfnrO0P OpO3aBzDX2VWGx9ZAN10qVmmq3tImkVZq/KKYiIzNAfdi/KFcs1EY1EfH/e+4OMh WrcVfVjlSf9lJ3ReorWcLjiML2WW3GdMvOGQfwAKcDLc4TC/E6cHKay3XYVBNReN jgXGepd/bGPRnQilwLgrnSjOx9k62YoMK/JD5ff99WD/Z++0LEbommSGRCRWQeCL E3MglPE9Qll1JF/+Vk2+Sk5x0M6ET0+EfIsuVJs3lo0SSlYHtUrsev8WSMK4EUH/ hQkiU4kCrDclTj3/p/ZU1TF//FQf4Hw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:47:07 2026 by rpki-client