$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa File: bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa (raw, json) Hash identifier: +hBdHOv78pSOGNsuvsTxe50LDhhFGBpf+uKK7glZCV8= Subject key identifier: 46:0B:90:6C:09:AD:40:15:51:14:06:FE:57:30:B2:65:58:F8:6F:00 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584EA5AA674E8CF0BDD94635DE80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 21949 IP address blocks: 167.254.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:67:4e:8c:f0:bd:d9:46:35:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=12033d99-bcd8-47bc-99e8-670bfe898374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:eb:a4:b1:68:ca:e8:03:57:d6:37:5d:34: e8:d3:d9:90:50:0a:d4:44:03:d9:27:b3:cb:e7:83: e3:f1:8b:1b:1d:47:cc:a0:17:6a:0e:97:96:d8:19: e2:15:c1:e4:11:e6:0c:77:40:23:28:ad:3a:16:cb: 0f:02:71:b0:38:52:77:21:0e:f8:69:f2:e2:7d:79: 60:bd:fb:03:76:fe:be:49:57:b3:2c:1a:10:3a:c7: 76:2c:e9:45:1d:3b:34:95:13:d4:37:0d:3d:25:12: a3:da:09:ef:43:05:4c:55:40:79:7d:5f:02:c2:6b: f8:d7:c0:64:0c:14:cb:84:95:f5:14:75:d6:e4:f4: dd:ed:68:b2:07:ab:c2:e6:ca:98:23:41:c1:fa:f7: ae:92:33:d4:cd:b6:3a:df:3b:63:1b:47:ec:f8:46: 53:3f:94:73:0f:c3:c9:53:eb:54:56:b1:4d:f2:6c: d4:9d:aa:64:92:07:d2:ae:44:65:56:a8:73:8b:a8: 2d:9b:51:3b:aa:f7:25:5d:c4:10:ec:b7:6d:bd:6b: 87:41:b7:7d:a9:80:4d:52:12:cb:dd:fe:58:67:17: 99:18:5a:17:93:9f:2c:25:4e:93:93:21:30:35:31: c7:7b:0f:31:c2:19:93:a1:e5:71:4a:5f:a9:72:93: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:90:6C:09:AD:40:15:51:14:06:FE:57:30:B2:65:58:F8:6F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 167.254.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d5:67:8b:93:87:c1:e2:d3:5e:b7:cf:4b:62:4b:c5:e6:b8: 64:86:5b:c5:83:a0:de:40:d7:4b:7b:af:5e:4f:73:0b:97:35: 2d:26:f7:02:09:24:be:81:16:81:4e:64:98:a5:cb:9f:d6:a7: 3d:7f:ea:aa:e6:9c:4a:6a:6b:0f:47:84:f7:32:02:88:45:a1: d3:f0:6e:fa:1c:9f:57:9e:3e:71:64:ab:18:67:35:a7:70:60: 0c:70:9d:e6:da:09:f0:91:06:d2:10:d0:23:e4:a0:48:78:d8: 27:43:28:14:e0:48:1d:db:3c:42:e5:b8:48:e9:9d:45:ea:02: 30:71:06:40:b5:46:35:f9:73:30:c1:e4:41:79:ef:d9:3c:1f: af:f9:1b:0f:d0:70:3d:91:2c:3e:e2:e6:94:0c:17:93:e1:ec: 3d:da:05:16:14:77:e6:7b:85:23:d2:b7:98:6a:76:fe:d9:d7: 78:9a:c5:a5:94:0b:2a:74:8a:5b:d4:15:82:4c:90:81:21:d4: ff:d5:72:5c:f5:50:a9:6d:8e:70:98:18:a6:f3:80:f3:4a:81: 9a:b9:6c:54:61:12:ef:07:72:51:b5:23:d3:de:49:c9:1f:49: 2c:ee:85:4f:07:7a:7f:00:8c:c0:7b:f5:eb:c2:06:26:93:61: ad:53:0e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmdOjPC92UY13oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MTIwMzNkOTktYmNkOC00N2JjLTk5ZTgtNjcwYmZlODk4Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYTrpLFoyugDV9Y3XTTo09mQUArURAPZJ7PL 54Pj8YsbHUfMoBdqDpeW2BniFcHkEeYMd0AjKK06FssPAnGwOFJ3IQ74afLifXlg vfsDdv6+SVezLBoQOsd2LOlFHTs0lRPUNw09JRKj2gnvQwVMVUB5fV8Cwmv418Bk DBTLhJX1FHXW5PTd7WiyB6vC5sqYI0HB+veukjPUzbY63ztjG0fs+EZTP5RzD8PJ U+tUVrFN8mzUnapkkgfSrkRlVqhzi6gtm1E7qvclXcQQ7LdtvWuHQbd9qYBNUhLL 3f5YZxeZGFoXk58sJU6TkyEwNTHHew8xwhmToeVxSl+pcpNozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYLkGwJrUAVURQG/lcwsmVY+G8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYmRjM2YzYmYtMTFiOS0z NmNkLTlmYzktODEzZDVjZDI2Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp/6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILVZ4uTh8Hi0163z0tiS8XmuGSGW8WDoN5A10t7r15PcwuXNS0m9wIJ JL6BFoFOZJily5/Wpz1/6qrmnEpqaw9HhPcyAohFodPwbvocn1eePnFkqxhnNadw YAxwnebaCfCRBtIQ0CPkoEh42CdDKBTgSB3bPELluEjpnUXqAjBxBkC1RjX5czDB 5EF579k8H6/5Gw/QcD2RLD7i5pQMF5Ph7D3aBRYUd+Z7hSPSt5hqdv7Z13iaxaWU Cyp0ilvUFYJMkIEh1P/Vclz1UKltjnCYGKbzgPNKgZq5bFRhEu8HclG1I9PeSckf SSzuhU8Hen8AjMB79evCBiaTYa1TDiI= -----END CERTIFICATE-----Generated at Tue Jul 28 22:52:57 2026 by rpki-client