$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa File: df882eef-1faf-3541-8255-366c9e2451b2.roa (raw, json) Hash identifier: V6vwBjjz6HIVN0bZK5FQCvtd0sfKechjJBJRcr1dtX4= Subject key identifier: 3D:32:C1:84:CA:13:23:3F:3E:99:51:11:89:79:C0:66:25:3A:52:65 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D8C2A9F8FB1CB96AFB2C53260 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 4213 IP address blocks: 174.139.126.0/23 maxlen: 24 174.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9f:8f:b1:cb:96:af:b2:c5:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=f0cf2f3e-03af-4e1c-b45a-cda914a641ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:93:ab:09:77:6c:ef:2b:84:74:f9:c2:e0: 2c:51:60:b2:65:19:df:f3:2e:04:75:2a:57:aa:04: f4:b5:d5:85:2d:0a:8c:84:42:b4:15:50:31:b0:d4: 77:c7:5e:ce:c8:ac:ad:ec:44:a5:63:c7:a7:56:22: 40:3e:e6:9b:cc:67:c5:7c:1c:c0:2f:e2:40:0b:a2: 4d:0a:5d:25:75:1b:7f:36:62:4d:90:c1:b0:b4:51: d6:a1:64:a7:b4:58:5c:b7:9c:13:23:44:ec:50:d8: 53:c1:0c:f5:78:86:a0:47:19:2e:d2:ac:de:75:ec: 11:06:78:9f:69:b0:3e:1b:09:17:f2:9b:99:f8:72: 1e:10:98:57:73:fc:14:fe:6e:12:1e:99:c7:8a:98: fb:7b:d7:7a:8e:04:4f:b4:40:ad:50:c7:39:11:62: 4d:23:91:c7:64:5d:c6:fa:24:00:b4:a4:65:65:96: 7b:28:98:64:8f:9c:41:28:83:4b:d1:f4:2d:93:d9: 8e:ea:b4:5a:bf:ed:fb:5b:9b:8f:ad:2f:06:27:3a: ff:84:6c:96:7a:15:b2:e2:b1:c7:5f:c7:3c:78:4a: 90:10:93:7d:0c:67:b9:bf:31:93:e8:65:f2:ab:31: 49:95:cf:03:d5:2e:3e:82:24:61:e5:d1:d3:0e:e8: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:32:C1:84:CA:13:23:3F:3E:99:51:11:89:79:C0:66:25:3A:52:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.126.0/23 174.139.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:61:9c:08:3f:82:8f:5e:f0:b1:08:e9:9c:48:2f:1a:d4:65: 8c:86:4c:50:eb:8c:0c:0d:ad:94:bc:de:7e:e2:49:4e:68:57: 94:55:f5:ac:c2:58:4e:67:29:b4:38:9d:e0:4a:2b:70:5b:18: f6:f5:af:89:70:a1:0f:66:c3:d9:4f:e1:86:be:3b:be:6a:00: 4a:cd:68:e0:d8:3f:6a:19:63:d5:f0:54:9a:38:7e:df:2e:84: 12:4d:18:0b:5a:85:51:ee:fa:72:1e:1c:2d:32:35:86:f6:0c: b2:e4:a1:a9:a8:78:3f:2d:17:fe:cb:d8:28:04:05:4f:1a:25: b1:f0:0e:6c:4c:bb:45:39:1c:c8:3d:bb:84:a1:d6:0d:b0:16: 82:e5:98:e6:c9:43:c2:b7:ab:c5:fa:df:46:4d:7a:dd:a5:ba: 66:09:3e:a2:c2:c9:67:a7:24:42:06:b8:73:94:42:bd:aa:2f: 5a:b3:13:c2:a2:a8:7f:2f:da:94:3b:5d:10:d3:ba:27:a9:68: 09:a8:3d:de:6c:3b:4e:75:eb:40:db:ac:7f:c8:90:e6:16:92: ce:ee:0e:86:18:00:5c:dd:f1:31:5f:34:1a:93:f3:1e:56:64: 8d:22:a6:dc:f4:0b:99:d7:e4:9b:6e:c2:c7:66:88:47:a0:e7: 56:2a:15:88 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2MKp+PscuWr7LFMmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ZjBjZjJmM2UtMDNhZi00ZTFjLWI0NWEtY2RhOTE0YTY0MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ6Tqwl3bO8rhHT5wuAsUWCyZRnf8y4EdSpX qgT0tdWFLQqMhEK0FVAxsNR3x17OyKyt7ESlY8enViJAPuabzGfFfBzAL+JAC6JN Cl0ldRt/NmJNkMGwtFHWoWSntFhct5wTI0TsUNhTwQz1eIagRxku0qzedewRBnif abA+GwkX8puZ+HIeEJhXc/wU/m4SHpnHipj7e9d6jgRPtECtUMc5EWJNI5HHZF3G +iQAtKRlZZZ7KJhkj5xBKINL0fQtk9mO6rRav+37W5uPrS8GJzr/hGyWehWy4rHH X8c8eEqQEJN9DGe5vzGT6GXyqzFJlc8D1S4+giRh5dHTDuh2OwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD0ywYTKEyM/PplREYl5wGYlOlJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZGY4ODJlZWYtMWZhZi0z NTQxLTgyNTUtMzY2YzllMjQ1MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrot+AwQA rouJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEphnAg/go9e8LEI6ZxILxrUZYyGTFDrjAwNrZS83n7iSU5o V5RV9azCWE5nKbQ4neBKK3BbGPb1r4lwoQ9mw9lP4Ya+O75qAErNaODYP2oZY9Xw VJo4ft8uhBJNGAtahVHu+nIeHC0yNYb2DLLkoamoeD8tF/7L2CgEBU8aJbHwDmxM u0U5HMg9u4Sh1g2wFoLlmObJQ8K3q8X630ZNet2lumYJPqLCyWenJEIGuHOUQr2q L1qzE8KiqH8v2pQ7XRDTuiepaAmoPd5sO05160DbrH/IkOYWks7uDoYYAFzd8TFf NBqT8x5WZI0iptz0C5nX5JtuwsdmiEeg51YqFYg= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:36 2026 by rpki-client