$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: 789n5KMQ5F73p+yJr885tPbyvkCsx30CsIaW/EE1mv0= Subject key identifier: 2A:D6:24:A7:FE:D0:0D:BF:CD:E8:0D:A6:82:89:FC:93:12:2A:41:62 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584CEFF23646562FD3574E742840 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:36:46:56:2f:d3:57:4e:74:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=97b84c5d-70b0-4221-a8c1-ed5befb694b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:71:2c:94:43:e9:9e:79:e1:9a:db:08:89: b3:6c:da:df:bf:26:cb:1e:1a:8b:b5:0c:2a:96:a4: 47:6a:15:c8:06:74:54:36:cf:c7:1d:39:bd:1a:b3: e5:52:bd:e9:dc:33:e0:3c:e0:de:d7:f1:5a:fd:7b: ef:17:bc:5a:60:3d:5c:22:a2:60:e5:eb:ac:e3:f2: 29:90:e9:7c:cd:5f:ea:81:f0:27:a0:2d:8a:da:1c: 1c:0e:7a:2d:fb:08:b0:bb:db:48:40:f2:26:c7:68: 77:17:c2:42:89:72:ba:5e:8b:70:d9:85:d0:e9:1a: 22:52:8f:63:18:c2:0a:c1:17:97:23:9a:da:dc:0d: 1e:1e:a5:3a:00:8d:5a:63:e2:21:81:29:8a:5e:1c: 5d:73:71:1c:02:01:6b:87:a3:62:54:28:ba:c7:29: 26:eb:c2:99:50:e4:40:5c:8f:24:9a:b8:c0:e3:60: 15:8e:d5:a3:7f:5a:2a:92:9f:bc:c0:d2:e8:50:ec: 30:f6:82:52:8b:64:a7:7f:9d:ca:0a:fb:34:b1:84: c0:ba:29:06:2a:56:11:22:fa:b8:79:1a:4a:39:ac: 77:dd:05:7f:8b:33:f4:f6:f5:69:56:b1:f4:72:20: 96:ed:83:ed:00:0e:35:e4:d9:ef:2d:a2:96:1d:f1: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:24:A7:FE:D0:0D:BF:CD:E8:0D:A6:82:89:FC:93:12:2A:41:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:32:0f:dd:16:13:8d:5a:b7:9e:24:b4:51:3b:aa:09:08:1b: ae:e6:29:aa:e7:b1:8e:60:1a:a1:ff:ab:d4:44:37:cd:b7:cf: 90:c9:03:e4:12:75:67:53:95:26:3a:e5:bc:7f:1d:bd:bf:1f: 15:3d:b0:55:54:99:29:5d:4c:2c:ec:1c:f2:e5:0e:d2:0e:e6: b2:c3:44:19:6d:00:d6:eb:b9:e2:01:95:43:fe:66:18:a4:09: e4:b6:17:20:cb:df:f4:9e:19:cc:37:ca:e7:5d:b3:4c:49:36: 75:a5:07:e3:9a:71:63:32:00:01:11:2e:a3:f4:04:9d:2a:d9: 60:d3:75:37:32:ee:c7:8a:1e:24:f6:04:82:74:bd:95:68:02: 4c:95:5e:49:42:95:a3:2d:49:b1:2b:1d:77:9c:ca:dc:b8:02: e9:b3:a7:0f:0e:b5:56:f1:cd:8f:02:79:8e:94:9c:6a:7b:51: 42:e2:86:89:92:7a:fe:fa:2f:79:93:41:72:06:b3:bc:1c:56: d5:11:74:86:cd:90:6a:64:7b:83:e1:01:ab:a4:7a:0f:89:27: 97:d8:79:32:21:1a:e9:ad:b2:40:ed:fb:d0:75:ff:92:2b:cc: e9:b5:b0:ff:16:e3:9f:0c:dc:3d:25:f0:e6:f9:e6:c0:a1:fe: 91:f7:1b:68 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEzv8jZGVi/TV050KEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk OTdiODRjNWQtNzBiMC00MjIxLWE4YzEtZWQ1YmVmYjY5NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SxxLJRD6Z554ZrbCImzbNrfvybLHhqLtQwq lqRHahXIBnRUNs/HHTm9GrPlUr3p3DPgPODe1/Fa/XvvF7xaYD1cIqJg5eus4/Ip kOl8zV/qgfAnoC2K2hwcDnot+wiwu9tIQPImx2h3F8JCiXK6Xotw2YXQ6RoiUo9j GMIKwReXI5ra3A0eHqU6AI1aY+IhgSmKXhxdc3EcAgFrh6NiVCi6xykm68KZUORA XI8kmrjA42AVjtWjf1oqkp+8wNLoUOww9oJSi2Snf53KCvs0sYTAuikGKlYRIvq4 eRpKOax33QV/izP09vVpVrH0ciCW7YPtAA415NnvLaKWHfExZwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCrWJKf+0A2/zegNpoKJ/JMSKkFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGoyD90WE41at54ktFE7qgkIG67mKarnsY5gGqH/ q9REN823z5DJA+QSdWdTlSY65bx/Hb2/HxU9sFVUmSldTCzsHPLlDtIO5rLDRBlt ANbrueIBlUP+ZhikCeS2FyDL3/SeGcw3yudds0xJNnWlB+OacWMyAAERLqP0BJ0q 2WDTdTcy7seKHiT2BIJ0vZVoAkyVXklClaMtSbErHXecyty4Aumzpw8OtVbxzY8C eY6UnGp7UULihomSev76L3mTQXIGs7wcVtURdIbNkGpke4PhAaukeg+JJ5fYeTIh GumtskDt+9B1/5IrzOm1sP8W458M3D0l8Ob55sCh/pH3G2g= -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:16 2026 by rpki-client