$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa File: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (raw, json) Hash identifier: I7GVWLvWZ8STKa2tFR2Fhbz1X1hz63/Dv3dChczatJQ= Subject key identifier: 71:80:53:AC:C0:82:CB:F0:37:6D:B4:D4:93:97:26:94:FA:99:B5:30 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584D86954C4147711B5A0A0B0D00 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14860 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4c:41:47:71:1b:5a:0a:0b:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=26ff7b20-fcfc-40de-a41c-de6dc9f501b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:a3:5b:a9:c0:9c:bf:fa:48:f8:77:06:a8: d8:53:7f:a3:c0:d9:70:f6:75:7f:7a:f8:47:b5:38: 78:b5:9c:78:d3:ce:aa:4c:e3:0b:3b:3c:d4:9c:9c: ae:03:53:3b:6c:a3:b6:dd:5e:e7:49:e5:61:ce:22: 09:9f:a6:88:b7:76:b7:41:cc:ee:2f:68:07:ec:51: 85:38:f3:fb:05:ab:21:4b:d2:1a:48:b7:96:21:04: 3b:4f:2e:bb:f5:7e:06:92:fc:49:e2:8c:92:5e:46: be:6a:a3:3f:16:79:1e:50:40:c6:20:c9:1d:73:96: 1f:49:7e:bb:cf:a2:43:9c:5d:71:bd:d2:3a:ff:52: 3e:99:51:a8:ee:94:22:0f:18:64:ec:b1:71:ad:08: e1:ba:95:29:fa:d3:50:13:2d:40:29:5a:e0:ef:61: 91:42:c0:26:a6:08:a9:2f:3c:17:a3:9e:d6:86:97: 00:05:d8:0b:28:d3:08:e8:69:7a:18:a1:e5:79:a7: 05:04:fe:a3:68:fe:aa:04:d5:79:49:7c:14:cf:f3: 2a:85:90:ef:7a:ba:39:dd:a1:c1:56:b6:3c:24:ce: c7:6e:8b:84:20:cc:86:8d:02:fe:f5:45:72:f4:33: 88:7b:cb:3f:7d:07:f0:5d:17:d1:73:1c:32:fc:04: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:80:53:AC:C0:82:CB:F0:37:6D:B4:D4:93:97:26:94:FA:99:B5:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d3:30:18:b2:38:94:d4:7a:fa:0f:d9:e4:0f:c7:3b:a7:1c: 72:6f:ce:8d:1f:90:37:e5:0d:95:8e:92:55:e9:79:2f:84:b0: bd:5f:60:6a:44:7d:18:a8:f3:9e:bd:8b:36:11:6a:22:a0:55: 51:2f:6b:b3:dd:ea:c0:65:a6:04:e0:7d:ea:15:d9:61:70:9b: 82:ad:d9:cd:71:af:84:f7:88:3a:8f:25:25:3d:ce:0d:96:59: 72:0e:03:a4:91:87:c0:64:e7:a7:78:fa:54:c7:63:3d:39:70: 97:c4:b4:32:07:73:61:b5:53:e4:b1:bb:1d:fe:4a:fb:93:cf: de:35:1f:d6:74:e9:f7:b8:ed:7a:4a:06:75:ae:c9:12:58:d7: c5:27:4d:96:56:5f:58:62:a9:51:ec:02:8b:61:c5:85:28:f4: 56:95:e3:4d:88:ee:22:47:73:09:3f:2e:52:8b:78:67:19:88: c8:a1:fa:a5:e3:a3:fe:53:a1:ed:8e:1b:45:9d:82:f6:0a:bc: c3:18:2d:48:1d:2b:19:cf:2a:3b:07:1b:40:06:f8:4e:00:be: 16:4c:20:c9:63:b6:e9:2e:cd:79:b9:35:9e:74:f8:4a:ba:2e: dc:b2:2a:ce:96:a7:95:d7:64:7f:e3:11:82:7c:ed:46:e2:5d: 5c:f4:84:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUxBR3EbWgoLDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MjZmZjdiMjAtZmNmYy00MGRlLWE0MWMtZGU2ZGM5ZjUwMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sOjW6nAnL/6SPh3BqjYU3+jwNlw9nV/evhH tTh4tZx4086qTOMLOzzUnJyuA1M7bKO23V7nSeVhziIJn6aIt3a3QczuL2gH7FGF OPP7BashS9IaSLeWIQQ7Ty679X4GkvxJ4oySXka+aqM/FnkeUEDGIMkdc5YfSX67 z6JDnF1xvdI6/1I+mVGo7pQiDxhk7LFxrQjhupUp+tNQEy1AKVrg72GRQsAmpgip LzwXo57WhpcABdgLKNMI6Gl6GKHleacFBP6jaP6qBNV5SXwUz/MqhZDvero53aHB VrY8JM7HbouEIMyGjQL+9UVy9DOIe8s/fQfwXRfRcxwy/ARn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGAU6zAgsvwN2201JOXJpT6mbUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvZjJhZDczZjMtMGY4MC0z Y2MyLTkzOTktODgxYTkxMDEwNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfTMBiyOJTUevoP2eQPxzunHHJvzo0fkDflDZWOklXpeS+EsL1fYGpE fRio8569izYRaiKgVVEva7Pd6sBlpgTgfeoV2WFwm4Kt2c1xr4T3iDqPJSU9zg2W WXIOA6SRh8Bk56d4+lTHYz05cJfEtDIHc2G1U+Sxux3+SvuTz941H9Z06fe47XpK BnWuyRJY18UnTZZWX1hiqVHsAothxYUo9FaV402I7iJHcwk/LlKLeGcZiMih+qXj o/5Toe2OG0WdgvYKvMMYLUgdKxnPKjsHG0AG+E4AvhZMIMljtukuzXm5NZ50+Eq6 LtyyKs6Wp5XXZH/jEYJ87UbiXVz0hC8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:22:39 2026 by rpki-client