$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa File: bfbeda47-5352-36b9-9050-ef69094c1c65.roa (raw, json) Hash identifier: +v90LsYGCOUBijW1Q506O+OR5VSC2iM5BIN1jLDXVEw= Subject key identifier: 4D:9F:41:C9:81:C8:43:9F:55:7F:62:E1:3E:1F:BB:A2:37:C2:DD:18 Certificate issuer: /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe Certificate serial: 010D0C9F4328584D07ACFC9B0D5D8F5C2A660584 Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 400387 IP address blocks: 64.25.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fc:9b:0d:5d:8f:5c:2a:66:05:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=ae5a5887-5026-4c91-b33b-0f48e99986ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:c5:d0:2d:96:48:6c:63:87:be:e4:4a:94: f5:6a:ed:01:c8:fd:4a:2b:90:bc:b7:e4:9d:84:f0: f5:d9:7c:f4:c7:7b:3b:dc:3f:2a:c8:86:91:cd:ca: 3b:eb:46:bc:37:51:bd:54:04:24:ee:cc:34:db:44: 22:c2:c1:0a:ab:50:15:26:c2:9e:80:fe:dc:03:0b: a6:d8:a0:42:23:a4:3d:25:69:bd:19:f4:5b:08:e8: a6:b7:ec:ed:2b:cf:1f:3b:26:a7:3a:b4:e8:de:fe: 93:2e:ec:cb:83:7a:12:ed:1a:61:3b:a7:85:a0:b0: 97:0b:68:31:79:74:c1:74:4d:1f:be:b2:4f:25:f6: e8:da:ab:50:02:c2:c0:bf:c6:59:3c:53:04:d7:ce: 1c:2c:52:2a:de:b2:bf:b1:74:e4:d5:9e:b4:b5:32: d4:9c:e7:9d:5c:4d:3b:2a:91:c3:09:41:2c:fa:c1: 40:82:34:47:76:93:d9:42:f8:ad:ab:53:66:22:c1: 99:11:84:27:a3:66:e4:ec:25:fa:86:eb:b0:34:5c: 91:1d:19:bd:84:bb:43:bd:70:db:29:1f:b2:e2:5e: f7:11:2c:5d:4d:37:3d:1b:d4:5b:3e:e6:f3:62:da: bb:5f:ce:a1:d2:c2:5f:ed:6c:9c:c4:77:5b:ff:1b: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9F:41:C9:81:C8:43:9F:55:7F:62:E1:3E:1F:BB:A2:37:C2:DD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl X509v3 Authority Key Identifier: keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer sbgp-ipAddrBlock: critical IPv4: 64.25.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:32:1a:02:86:fd:5a:e7:68:3a:b5:d3:32:cc:e6:de:c2:2a: 1d:14:96:28:6a:3b:7c:ba:ad:79:7e:04:ce:73:e3:b2:de:9f: 2e:80:89:60:1a:aa:e7:26:ea:77:9f:94:a2:63:0e:39:1d:02: 22:13:c3:33:df:16:c6:6a:cf:4b:27:ff:d0:81:81:b3:f7:d6: 3b:e9:e2:e1:00:04:7e:05:96:7c:d9:07:f9:60:10:3c:b4:88: b1:93:86:1d:29:d7:9b:de:8c:9e:3b:fc:17:0f:9c:81:f5:4e: 38:1a:3e:8f:c4:08:c8:de:c6:fc:5f:d5:d6:ac:67:cd:a1:8c: c0:c4:5d:64:82:0f:c7:c2:e0:5b:cd:55:14:d9:08:58:b1:7e: 7e:5c:2b:e0:f0:d8:cb:44:34:25:4b:8a:8b:d1:f5:7b:9c:50: 13:4e:cd:46:28:8d:9a:a7:4c:c3:61:0a:0a:d7:ce:02:c1:6f: f7:e3:0c:8a:cc:e8:37:d6:03:6d:20:0d:9a:29:3c:12:d7:e2: 24:90:1d:e2:2c:dc:ef:3d:69:5d:27:8b:7e:da:cf:f4:45:6a: 4c:64:f1:88:dc:2f:a9:a0:ff:ec:e3:23:51:5a:e3:9e:a4:05: eb:7f:10:55:28:e6:26:b7:ed:7e:20:b6:71:73:a0:07:f8:58: ef:4d:e6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPybDV2PXCpmBYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2YjJkYmItZTdkYi00YjYwLWIxZDktOTQ5ZDJlZGJh NmZlMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YWU1YTU4ODctNTAyNi00YzkxLWIzM2ItMGY0OGU5OTk4NmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrbF0C2WSGxjh77kSpT1au0ByP1KK5C8t+Sd hPD12Xz0x3s73D8qyIaRzco760a8N1G9VAQk7sw020QiwsEKq1AVJsKegP7cAwum 2KBCI6Q9JWm9GfRbCOimt+ztK88fOyanOrTo3v6TLuzLg3oS7RphO6eFoLCXC2gx eXTBdE0fvrJPJfbo2qtQAsLAv8ZZPFME184cLFIq3rK/sXTk1Z60tTLUnOedXE07 KpHDCUEs+sFAgjRHdpPZQvitq1NmIsGZEYQno2bk7CX6huuwNFyRHRm9hLtDvXDb KR+y4l73ESxdTTc9G9RbPubzYtq7X86h0sJf7WycxHdb/xvTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2fQcmByEOfVX9i4T4fu6I3wt0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZi MmRiYi1lN2RiLTRiNjAtYjFkOS05NDlkMmVkYmE2ZmUvYmZiZWRhNDctNTM1Mi0z NmI5LTkwNTAtZWY2OTA5NGMxYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDM2YjJkYmItZTdkYi00YjYwLWIx ZDktOTQ5ZDJlZGJhNmZlLzAzNmIyZGJiLWU3ZGItNGI2MC1iMWQ5LTk0OWQyZWRi YTZmZS5jcmwwHwYDVR0jBBgwFoAUTxBMP5Rf2+ujYdsZ237a7ZZpkekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZiMmRiYi1lN2RiLTRiNjAtYjFkOS05NDlk MmVkYmE2ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkyGgKG/VrnaDq10zLM5t7CKh0UlihqO3y6rXl+BM5z47Leny6AiWAa qucm6neflKJjDjkdAiITwzPfFsZqz0sn/9CBgbP31jvp4uEABH4FlnzZB/lgEDy0 iLGThh0p15vejJ47/BcPnIH1TjgaPo/ECMjexvxf1dasZ82hjMDEXWSCD8fC4FvN VRTZCFixfn5cK+Dw2MtENCVLiovR9XucUBNOzUYojZqnTMNhCgrXzgLBb/fjDIrM 6DfWA20gDZopPBLX4iSQHeIs3O89aV0ni37az/RFakxk8YjcL6mg/+zjI1Fa456k Bet/EFUo5ia37X4gtnFzoAf4WO9N5ss= -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:32 2026 by rpki-client