$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa File: bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa (raw, json) Hash identifier: BBhwlRKWSgMrAco0QQLJ89uXhh1WFXF1iqWST+qEmcA= Subject key identifier: 5E:1D:55:DE:17:1A:CA:21:57:A1:CB:C6:99:54:F9:CE:71:94:56:66 Certificate issuer: /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Certificate serial: 010D0C9F4328584CED27905BE61E67777736FF70 Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 15296 IP address blocks: 204.209.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:90:5b:e6:1e:67:77:77:36:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=27b55d9a-b95c-49b1-ace4-d432016af007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:d7:31:6c:92:c2:92:fc:02:2a:9b:08:9e: 47:b5:12:eb:26:09:7f:ae:76:cd:ad:35:df:3c:58: 58:87:fa:ea:56:49:63:b0:a7:a1:e5:87:a3:cd:5f: 23:ad:ff:f7:e8:af:13:7c:ff:04:ee:80:29:f0:71: 01:3e:fe:de:47:e5:65:80:43:bb:9c:9e:10:64:75: c7:bf:d0:0a:d1:57:fa:c1:47:f4:5d:86:d6:ce:a9: bc:b8:62:4a:61:44:07:df:3c:2c:75:e4:a2:c5:ac: 77:4a:ac:e2:e0:d3:0e:c1:7f:f0:83:9f:56:a9:ca: 72:9d:b9:65:78:f4:00:ac:bf:c5:80:fc:17:02:42: 7b:d1:27:0a:1b:40:ad:35:ed:12:33:61:af:ed:51: f6:22:10:62:ab:8f:32:42:9f:89:d8:50:fe:61:db: 0b:2e:a8:03:bb:29:8f:3f:03:a8:8b:43:4d:cb:83: 47:cb:d9:19:de:97:ad:5d:dc:42:90:d0:23:a3:98: bd:9e:2d:d1:d4:65:0a:a1:08:26:aa:56:86:72:9f: f0:16:5e:a7:42:17:d6:4a:f0:9b:da:99:21:a6:c0: 8f:bd:77:c9:c9:1c:ba:6f:7c:2f:c9:f4:91:9c:b6: ff:d0:ec:11:0a:a4:78:36:7e:58:77:21:96:2d:33: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1D:55:DE:17:1A:CA:21:57:A1:CB:C6:99:54:F9:CE:71:94:56:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl X509v3 Authority Key Identifier: keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer sbgp-ipAddrBlock: critical IPv4: 204.209.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6c:26:1a:f2:a7:b4:03:dc:39:7f:4b:c5:84:2e:1b:8f:a7: ca:9f:fc:13:f8:7d:1f:33:01:62:1e:ed:f2:a4:8e:85:6a:eb: 99:b9:4c:36:07:1c:82:fc:b0:c3:d2:1e:3c:2b:0b:2c:a6:77: d3:09:d2:59:a4:a0:30:e9:3b:5e:72:72:51:0d:79:be:d8:4b: 51:3b:dc:58:9a:59:f0:17:69:3d:d7:95:0d:91:bf:6d:4d:2d: ef:b5:3c:7e:fe:e8:d7:74:65:7a:a0:0d:fa:e8:9f:7f:56:8a: bd:e4:8e:4a:8d:c5:86:11:65:ec:c4:e1:01:66:10:95:83:55: d7:e7:69:71:4b:cf:aa:9f:8a:60:7c:54:ec:16:15:e2:0a:b1: 04:47:b4:95:e8:21:40:61:fe:d6:d5:cf:53:be:ea:f4:d9:f6: e4:96:de:ec:3f:06:93:2a:a3:9e:3c:62:49:8d:a5:8b:be:42: 35:00:8d:b5:53:2c:b6:dc:74:ad:b3:45:04:ec:8c:33:b7:59: e0:33:e4:4e:67:4b:b3:5c:c7:14:48:74:ea:a5:a1:d5:98:b4: a3:d3:6f:e5:b3:e7:a9:7e:4b:74:ee:3c:43:94:ea:8d:91:21: 57:eb:67:d4:d0:b7:ed:4b:49:55:ff:dc:1a:8d:ba:37:66:6f: d5:88:cc:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ5Bb5h5nd3c2/3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzZiN2EtYjhmNS00MTA5LWI3YWYtODk3NWUyNDQ0 ZDc1MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk MjdiNTVkOWEtYjk1Yy00OWIxLWFjZTQtZDQzMjAxNmFmMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksnXMWySwpL8AiqbCJ5HtRLrJgl/rnbNrTXf PFhYh/rqVkljsKeh5YejzV8jrf/36K8TfP8E7oAp8HEBPv7eR+VlgEO7nJ4QZHXH v9AK0Vf6wUf0XYbWzqm8uGJKYUQH3zwsdeSixax3Sqzi4NMOwX/wg59Wqcpynbll ePQArL/FgPwXAkJ70ScKG0CtNe0SM2Gv7VH2IhBiq48yQp+J2FD+YdsLLqgDuymP PwOoi0NNy4NHy9kZ3petXdxCkNAjo5i9ni3R1GUKoQgmqlaGcp/wFl6nQhfWSvCb 2pkhpsCPvXfJyRy6b3wvyfSRnLb/0OwRCqR4Nn5YdyGWLTNtfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4dVd4XGsohV6HLxplU+c5xlFZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJj NmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0NDRkNzUvYmZhZTM4YTctZWM3OS0z OGYxLTgyNTctOGIxYjNjMTBhYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJiYzZiN2EtYjhmNS00MTA5LWI3 YWYtODk3NWUyNDQ0ZDc1L2YyYmM2YjdhLWI4ZjUtNDEwOS1iN2FmLTg5NzVlMjQ0 NGQ3NS5jcmwwHwYDVR0jBBgwFoAUWHSg1z9c9nzq4DaQRxYHuAFb+KUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1 ZTI0NDRkNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5sJhryp7QD3Dl/S8WELhuPp8qf/BP4fR8zAWIe7fKkjoVq65m5TDYH HIL8sMPSHjwrCyymd9MJ0lmkoDDpO15yclENeb7YS1E73FiaWfAXaT3XlQ2Rv21N Le+1PH7+6Nd0ZXqgDfron39Wir3kjkqNxYYRZezE4QFmEJWDVdfnaXFLz6qfimB8 VOwWFeIKsQRHtJXoIUBh/tbVz1O+6vTZ9uSW3uw/BpMqo548YkmNpYu+QjUAjbVT LLbcdK2zRQTsjDO3WeAz5E5nS7NcxxRIdOqlodWYtKPTb+Wz56l+S3TuPEOU6o2R IVfrZ9TQt+1LSVX/3BqNujdmb9WIzE8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:16 2026 by rpki-client