$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa File: bcf62835-8319-39c6-80fb-960ad2427989.roa (raw, json) Hash identifier: 691BIPE6RY0GToOrF7V2mwk0YdwAqetC9PEhQmQ7+gw= Subject key identifier: 4F:40:52:5F:DE:E5:1C:3F:43:27:F1:51:96:54:4C:CF:AE:1D:E1:EE Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584DD8F07711B9805F0D9CE61580 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 14537 IP address blocks: 67.211.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:77:11:b9:80:5f:0d:9c:e6:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=2efa9c14-cdf8-45db-8bfb-e26afebcae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:97:c5:38:0d:45:80:3c:a2:cf:05:f4:5b: a0:4d:69:23:07:ef:bc:13:4d:30:54:48:9b:7a:25: a3:e0:b8:1a:33:97:90:02:63:2d:bf:90:13:46:d7: 3a:f8:b6:6f:65:29:e7:0b:03:27:58:87:5d:67:08: 28:12:bb:1c:b4:af:a1:eb:13:6c:d6:07:d0:d5:99: 61:ad:60:5c:0f:27:a2:90:17:b9:c7:01:66:f3:e3: 67:18:56:c3:61:e6:ef:22:27:49:15:39:55:ab:38: 68:42:9f:f3:9f:a9:ca:57:3f:82:db:1b:5b:1e:93: b4:d3:a3:03:ab:84:13:33:d4:d4:78:0b:f2:3e:c8: ae:20:a5:d0:28:e4:5b:8e:66:35:13:6b:ad:f2:d7: 74:f0:17:18:ca:8e:b7:6d:15:67:c7:95:87:25:3c: f0:b3:a5:44:17:b2:78:c2:ac:fe:7f:07:b0:b3:1e: fe:e3:95:77:15:d9:75:92:4a:1b:70:4e:0a:b4:f1: 06:b6:23:cf:a9:b9:2c:5e:c5:ea:b4:35:80:ab:71: 60:70:6d:2a:b5:47:78:ec:6e:d2:f7:f1:12:49:8a: f4:0a:1b:f7:ad:a2:cb:50:2c:eb:eb:45:ac:ab:c9: 08:e6:ab:05:ce:d8:1a:12:fc:89:bd:24:cf:45:d5: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:40:52:5F:DE:E5:1C:3F:43:27:F1:51:96:54:4C:CF:AE:1D:E1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 67.211.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:15:fb:9c:8b:e3:fe:04:68:58:8a:c7:63:ba:32:3a:25:08: b8:a2:a0:c3:9f:77:90:a1:63:12:ea:f0:ce:4a:fc:38:f4:40: 6b:48:78:51:e1:f7:bf:57:67:bd:a7:68:2d:e0:b8:e8:1a:5b: 11:af:da:3e:27:d9:f6:64:57:7d:87:ed:41:4f:f0:79:ef:76: 06:78:20:b1:da:d9:53:a3:9a:33:1f:08:5a:cd:d8:2f:35:4d: a8:9e:d5:e0:e1:42:5b:51:43:3f:dd:f6:21:40:69:05:ca:89: c0:31:76:ff:42:88:34:9e:14:30:68:21:1c:4c:42:4d:99:d7: 65:80:b5:66:56:45:09:b3:31:41:4e:81:de:37:49:dc:ec:d8: 3f:de:e9:e9:29:85:38:23:cf:af:f5:79:dc:3c:c3:46:db:d4: a1:c8:64:8f:25:8a:04:1b:9e:f6:09:52:b9:01:64:ec:43:e3: bd:88:6f:58:ae:23:17:99:9d:59:04:c7:92:07:3f:27:ab:28: 9f:32:3a:6a:40:a1:46:5f:d2:f2:7d:8b:f2:8a:ff:5c:f4:95: 7d:1e:3a:31:5f:df:ce:0d:43:09:10:75:98:4a:2e:5d:6a:59: 00:26:10:cb:8f:b4:b0:b1:b1:7f:ff:e2:48:9d:38:8e:bd:14: 7c:e5:1e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HcRuYBfDZzmFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk MmVmYTljMTQtY2RmOC00NWRiLThiZmItZTI2YWZlYmNhZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb6XxTgNRYA8os8F9FugTWkjB++8E00wVEib eiWj4LgaM5eQAmMtv5ATRtc6+LZvZSnnCwMnWIddZwgoErsctK+h6xNs1gfQ1Zlh rWBcDyeikBe5xwFm8+NnGFbDYebvIidJFTlVqzhoQp/zn6nKVz+C2xtbHpO006MD q4QTM9TUeAvyPsiuIKXQKORbjmY1E2ut8td08BcYyo63bRVnx5WHJTzws6VEF7J4 wqz+fwewsx7+45V3Fdl1kkobcE4KtPEGtiPPqbksXsXqtDWAq3FgcG0qtUd47G7S 9/ESSYr0Chv3raLLUCzr60Wsq8kI5qsFztgaEvyJvSTPRdXvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9AUl/e5Rw/QyfxUZZUTM+uHeHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvYmNmNjI4MzUtODMxOS0z OWM2LTgwZmItOTYwYWQyNDI3OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkV+5yL4/4EaFiKx2O6MjolCLiioMOfd5ChYxLq8M5K/Dj0QGtIeFHh 979XZ72naC3guOgaWxGv2j4n2fZkV32H7UFP8HnvdgZ4ILHa2VOjmjMfCFrN2C81 Taie1eDhQltRQz/d9iFAaQXKicAxdv9CiDSeFDBoIRxMQk2Z12WAtWZWRQmzMUFO gd43Sdzs2D/e6ekphTgjz6/1edw8w0bb1KHIZI8ligQbnvYJUrkBZOxD472Ib1iu IxeZnVkEx5IHPyerKJ8yOmpAoUZf0vJ9i/KK/1z0lX0eOjFf384NQwkQdZhKLl1q WQAmEMuPtLCxsX//4kidOI69FHzlHsY= -----END CERTIFICATE-----Generated at Sat Jun 13 19:11:24 2026 by rpki-client