$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc8c600-9a67-35e6-aa16-69cadad6c4a9.roa File: bfc8c600-9a67-35e6-aa16-69cadad6c4a9.roa (raw, json) Hash identifier: LxPrtKHR9YShCC5YojhBeAv4BXywDQAvyEUPaC9ROHk= Subject key identifier: 82:7E:DB:F4:B8:C6:B0:BD:C4:D2:ED:8E:75:6D:81:26:71:CD:36:83 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81286B602D79BAC2B485C380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc8c600-9a67-35e6-aa16-69cadad6c4a9.roa Signing time: Tue 14 Apr 2026 14:22:18 +0000 ROA not before: Tue 14 Apr 2026 14:22:18 +0000 ROA not after: Mon 13 Jul 2026 14:22:18 +0000 asID: 396581 IP address blocks: 199.7.76.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:6b:60:2d:79:ba:c2:b4:85:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:18 2026 GMT Not After : Jul 13 14:22:18 2026 GMT Subject: CN=a59aaaee-4379-4e73-91e1-66cac15cc9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:d9:5c:1b:70:db:b4:1c:e3:f2:bf:fc:de: c1:07:65:47:c9:17:b3:a2:c9:9e:e5:3f:fd:b8:d0: eb:0a:de:24:a8:53:ce:69:bc:f8:8f:e8:20:1a:a9: 22:fe:2b:8d:27:1d:c8:ee:e7:35:a9:8c:88:14:52: ab:66:46:83:e6:58:b3:0a:e2:3e:a9:f7:6d:df:3d: b6:6b:df:5d:16:2d:71:88:fc:0c:53:6e:09:eb:26: 5c:86:24:6b:25:4c:2e:d4:4c:af:09:c3:d2:4a:ad: 58:6d:79:3a:57:22:29:4a:fa:4e:d2:cf:c1:05:06: 96:c2:01:2b:1e:a1:bf:0c:5d:58:54:74:9c:30:c2: 3f:b2:7e:0f:e5:e9:d4:95:89:10:a8:b7:1d:2b:8b: 46:06:93:1d:3b:6a:5e:c4:18:a8:e1:a1:4e:75:d7: 25:cb:46:26:59:43:23:4d:5a:f0:9f:96:2a:0e:93: bb:1c:77:a5:f9:02:f8:ca:ed:87:fe:ea:e8:5a:c0: 9b:6b:76:3d:5a:d4:9a:d1:d4:39:a0:71:be:ec:a0: bd:4e:d2:2e:08:0f:d9:a9:2e:3a:02:52:6f:c3:5d: f3:66:3d:f7:26:7d:e8:e1:fb:71:a6:c2:f8:7f:70: 6a:ab:06:f2:3d:20:bb:cf:7d:8e:b5:7f:b1:b8:6c: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7E:DB:F4:B8:C6:B0:BD:C4:D2:ED:8E:75:6D:81:26:71:CD:36:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc8c600-9a67-35e6-aa16-69cadad6c4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:7c:6c:5d:4e:f9:bd:6b:8d:9a:69:e8:59:35:52:56:15:c8: 4f:48:c5:e0:75:0e:f0:84:a3:35:e0:23:1a:48:27:38:f3:cf: 3c:26:7e:cc:68:5b:e3:d5:de:ee:02:1b:d5:49:90:16:b3:8d: 37:d1:b9:54:7c:9b:92:c4:df:0a:9a:65:f8:aa:12:50:81:af: 4b:83:df:b9:70:6b:e1:b5:8c:51:4a:9c:b4:6a:66:dc:5d:2d: 99:0b:c1:a5:e4:2b:1b:36:f5:02:63:4d:cf:d6:e9:d1:ee:dd: 34:8f:05:2a:f6:f9:37:fa:b2:fa:24:04:10:80:8c:2f:0a:c1: 11:c3:1f:dd:5b:4d:20:cc:93:b3:68:db:d7:84:5b:48:bd:20: 08:9a:2d:e4:20:dc:23:5e:9c:2a:e2:c0:0b:7c:f9:a8:3d:c4: a8:55:e1:47:f5:27:3c:bc:97:95:07:65:e2:6e:52:1c:46:7d: 3e:5b:b8:9b:51:fa:ef:26:b1:e5:8c:90:93:96:48:70:94:29: 3b:15:a0:3a:53:ba:b7:d6:79:05:70:19:b7:67:7c:4d:da:5d: a0:31:ac:50:1f:32:50:53:c6:1b:af:fe:37:90:4b:97:e0:21: de:1d:b2:a6:a6:6b:bd:5a:d0:00:90:28:ee:7f:1d:fd:aa:54: 52:48:0f:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKGtgLXm6wrSFw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxOFoXDTI2MDcxMzE0MjIxOFowLzEtMCsGA1UEAxMk YTU5YWFhZWUtNDM3OS00ZTczLTkxZTEtNjZjYWMxNWNjOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgDZXBtw27Qc4/K//N7BB2VHyRezosme5T/9 uNDrCt4kqFPOabz4j+ggGqki/iuNJx3I7uc1qYyIFFKrZkaD5lizCuI+qfdt3z22 a99dFi1xiPwMU24J6yZchiRrJUwu1EyvCcPSSq1YbXk6VyIpSvpO0s/BBQaWwgEr HqG/DF1YVHScMMI/sn4P5enUlYkQqLcdK4tGBpMdO2pexBio4aFOddcly0YmWUMj TVrwn5YqDpO7HHel+QL4yu2H/uroWsCba3Y9WtSa0dQ5oHG+7KC9TtIuCA/ZqS46 AlJvw13zZj33Jn3o4ftxpsL4f3BqqwbyPSC7z32OtX+xuGy9xQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIJ+2/S4xrC9xNLtjnVtgSZxzTaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZjOGM2MDAtOWE2Ny0z NWU2LWFhMTYtNjljYWRhZDZjNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1fGxdTvm9a42aaehZNVJWFchPSMXgdQ7whKM14CMaSCc48888Jn7M aFvj1d7uAhvVSZAWs4030blUfJuSxN8KmmX4qhJQga9Lg9+5cGvhtYxRSpy0ambc XS2ZC8Gl5CsbNvUCY03P1unR7t00jwUq9vk3+rL6JAQQgIwvCsERwx/dW00gzJOz aNvXhFtIvSAImi3kINwjXpwq4sALfPmoPcSoVeFH9Sc8vJeVB2XiblIcRn0+W7ib UfrvJrHljJCTlkhwlCk7FaA6U7q31nkFcBm3Z3xN2l2gMaxQHzJQU8Ybr/43kEuX 4CHeHbKmpmu9WtAAkCjufx39qlRSSA8J -----END CERTIFICATE-----Generated at Fri Apr 17 12:52:45 2026 by rpki-client