$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: mGkxFv6fdods+flkFA0gd5AUMu3VpSM7Ja/5SIhut4I= Subject key identifier: 22:06:08:E0:50:55:5F:53:CA:4F:BF:1B:BF:40:09:5C:C8:D3:D1:56 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584CD407689757D235BCAA03FE20 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:68:97:57:d2:35:bc:aa:03:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=59199b3a-334a-4487-80a5-2eee3f34e575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:1e:9e:8c:03:37:45:d5:27:d3:65:52:26: b6:65:c2:bb:2b:0a:0d:68:d5:bd:b7:00:64:c1:09: e7:97:60:71:e2:05:7b:f6:67:6a:73:f0:ac:b9:e5: fc:94:b2:de:11:3c:1d:f3:eb:4f:60:e7:52:10:42: c6:ee:be:a9:3e:ab:54:e1:24:cc:ae:6c:d3:7a:d3: eb:9d:80:73:53:6f:2e:c9:37:5b:58:5b:1f:f5:8f: b4:08:ea:d6:a0:2a:06:8c:83:2f:a6:e4:1a:c9:cf: 7d:ca:f5:bf:0a:fa:cb:7c:c6:29:b5:4d:01:f5:7c: c0:61:e6:6f:ce:b3:0e:da:d9:34:d9:0f:8a:a4:b2: 10:f0:91:d7:5e:9c:11:1a:e0:15:3d:62:db:e9:c0: 0a:a1:b7:9d:d2:f1:c8:77:89:73:39:9e:4c:92:0e: 17:e9:d7:e9:9f:97:e9:d5:34:cb:4b:02:89:05:03: 68:cf:5c:b2:af:90:d0:13:5b:31:88:54:7c:f5:8e: db:81:09:29:27:54:d4:db:50:2a:df:68:ca:2d:1d: ac:38:e1:de:f7:2e:5f:98:ba:9e:8b:83:27:1e:b6: ab:2e:8b:56:94:57:07:66:13:d8:27:0f:05:af:d8: 4c:74:a9:98:37:3b:df:fb:e8:81:db:e9:92:d5:9b: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:06:08:E0:50:55:5F:53:CA:4F:BF:1B:BF:40:09:5C:C8:D3:D1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:af:41:02:aa:0a:8f:01:34:66:6a:d7:e4:71:c6:26:ce:73: 3b:dc:79:85:fb:1d:05:b2:22:39:a8:55:72:42:66:8f:f8:b5: f2:4d:10:48:b4:b3:36:05:c0:4f:e0:83:e6:9d:c9:87:9b:d8: c1:03:66:9e:93:50:80:11:e5:2c:3a:df:50:a1:cc:04:a2:d9: 6b:3f:51:17:ad:83:d9:d2:ab:e7:76:23:d7:89:ff:3f:7d:8b: d7:1d:a2:06:79:5c:0c:17:74:64:78:e5:c7:44:00:17:d7:c9: 8b:7f:97:13:e7:01:9e:c9:a1:fb:f9:a7:ca:7d:c0:56:90:1e: 63:9b:a6:0f:c3:da:c4:24:9e:90:31:bf:4a:0a:ac:08:e9:96: ce:15:12:5c:6c:09:84:18:0f:23:0f:ee:43:0e:c5:1b:e3:1c: 82:43:aa:fd:c3:4a:7e:0c:df:2d:d6:a3:4e:1d:50:3e:15:ab: d8:38:21:96:2c:13:c2:da:51:95:55:1b:b6:b2:6f:ad:7a:77: cd:1b:24:d2:9e:d5:42:a6:05:55:9c:14:dd:c4:81:7d:ee:4c: 6a:2c:a0:36:da:12:0f:e6:e9:7c:6c:c3:b8:65:4b:2a:ff:d5: 18:3d:c2:8f:a0:c6:ec:4b:0c:f7:04:a8:4c:5a:10:c7:21:b2: 7e:cb:f7:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2iXV9I1vKoD/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk NTkxOTliM2EtMzM0YS00NDg3LTgwYTUtMmVlZTNmMzRlNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL8enowDN0XVJ9NlUia2ZcK7KwoNaNW9twBk wQnnl2Bx4gV79mdqc/CsueX8lLLeETwd8+tPYOdSEELG7r6pPqtU4STMrmzTetPr nYBzU28uyTdbWFsf9Y+0COrWoCoGjIMvpuQayc99yvW/CvrLfMYptU0B9XzAYeZv zrMO2tk02Q+KpLIQ8JHXXpwRGuAVPWLb6cAKobed0vHId4lzOZ5Mkg4X6dfpn5fp 1TTLSwKJBQNoz1yyr5DQE1sxiFR89Y7bgQkpJ1TU21Aq32jKLR2sOOHe9y5fmLqe i4MnHrarLotWlFcHZhPYJw8Fr9hMdKmYNzvf++iB2+mS1ZsKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIGCOBQVV9Tyk+/G79ACVzI09FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImvQQKqCo8BNGZq1+RxxibOczvceYX7HQWyIjmoVXJCZo/4tfJNEEi0 szYFwE/gg+adyYeb2MEDZp6TUIAR5Sw631ChzASi2Ws/URetg9nSq+d2I9eJ/z99 i9cdogZ5XAwXdGR45cdEABfXyYt/lxPnAZ7Jofv5p8p9wFaQHmObpg/D2sQknpAx v0oKrAjpls4VElxsCYQYDyMP7kMOxRvjHIJDqv3DSn4M3y3Wo04dUD4Vq9g4IZYs E8LaUZVVG7ayb616d80bJNKe1UKmBVWcFN3EgX3uTGosoDbaEg/m6Xxsw7hlSyr/ 1Rg9wo+gxuxLDPcEqExaEMchsn7L97o= -----END CERTIFICATE-----Generated at Mon Mar 2 04:14:23 2026 by rpki-client