$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/a432c58a-f6b5-361c-8978-3954c0e8d944.roa File: a432c58a-f6b5-361c-8978-3954c0e8d944.roa (raw, json) Hash identifier: qg0r5tBs8PuYCzJ/j13rAahySU//zd+OGCTQuuJbQ8I= Subject key identifier: D2:F1:11:21:1E:0E:59:45:5A:80:7A:F6:F7:1A:B8:70:94:32:0F:50 Certificate issuer: /CN=bfb929b2-4b54-4ef0-b768-f91fca64bd63 Certificate serial: 010D0C9F4328584D6E6A1F25BA1280FA6AD92B40 Authority key identifier: D2:6E:28:DA:B0:97:CC:70:46:27:4F:DE:75:36:6A:C1:52:48:D4:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/a432c58a-f6b5-361c-8978-3954c0e8d944.roa Signing time: Tue 07 Apr 2026 21:14:19 +0000 ROA not before: Tue 07 Apr 2026 21:14:19 +0000 ROA not after: Mon 06 Jul 2026 21:14:19 +0000 asID: 3503 IP address blocks: 192.225.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:6a:1f:25:ba:12:80:fa:6a:d9:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb929b2-4b54-4ef0-b768-f91fca64bd63 Validity Not Before: Apr 7 21:14:19 2026 GMT Not After : Jul 6 21:14:19 2026 GMT Subject: CN=a5279548-30ea-4268-b857-cbfbde96a0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cd:10:82:6a:b9:fc:62:37:1a:c4:28:9e:27: 39:9e:4e:8a:82:da:e8:8b:55:26:f6:01:f0:2b:d6: 66:22:b0:9b:ab:c5:2b:21:a8:02:f3:be:b5:38:86: d5:96:ca:8e:3a:18:91:0c:1c:60:66:b2:9c:0b:72: 76:d5:b4:eb:80:d5:10:a8:13:27:2a:88:a0:67:29: 6f:a8:93:51:ae:7f:2d:47:cc:2d:e0:2c:a8:03:6b: 0a:e5:79:fb:bc:80:ce:16:d1:08:ed:f9:e9:66:0c: 49:e3:50:48:b4:a5:44:40:5a:91:5c:fe:32:d1:b8: 57:54:cc:dd:6a:be:31:68:7f:ef:08:8d:92:6e:e8: cf:44:b4:64:5d:8e:6a:2a:08:72:ad:3e:50:3d:ea: 6a:0d:7a:f0:b9:78:57:17:ff:09:d0:be:e4:09:ec: fe:47:2e:cc:2e:7f:9f:19:46:cd:c1:3c:60:6d:c7: f0:3a:92:8b:37:c5:d3:94:17:6f:11:8b:3a:67:ce: e9:29:71:35:cc:3c:38:f5:b8:87:02:03:eb:ab:7f: 56:5f:bd:e8:c8:82:6d:63:20:04:b7:b8:1a:66:6d: 96:c4:8c:5b:98:c6:76:85:ec:aa:8c:ec:90:ea:de: d4:d0:41:5d:51:e3:0d:13:5e:c5:12:ca:80:06:34: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F1:11:21:1E:0E:59:45:5A:80:7A:F6:F7:1A:B8:70:94:32:0F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/a432c58a-f6b5-361c-8978-3954c0e8d944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.crl X509v3 Authority Key Identifier: keyid:D2:6E:28:DA:B0:97:CC:70:46:27:4F:DE:75:36:6A:C1:52:48:D4:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer sbgp-ipAddrBlock: critical IPv4: 192.225.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:73:99:38:9e:2e:8c:d2:1b:60:ea:5e:9b:07:00:aa:d7:94: 78:72:9d:70:b9:a3:9a:2e:b3:9f:c2:f7:1f:81:f7:a5:8c:c4: 1e:0d:6b:46:64:96:2a:b7:69:93:43:2d:57:50:3c:85:0f:e3: e6:78:aa:bc:f3:9d:77:22:e9:7c:ce:4e:ca:5c:ae:03:93:ef: e0:10:54:79:3e:8a:1a:66:74:69:09:70:b8:cc:91:39:8c:9e: 04:b4:95:ae:a9:ba:56:8a:e7:12:31:bf:0f:52:06:59:85:ef: 34:62:2b:ae:db:a6:12:51:bf:07:d9:d8:88:d9:be:9f:da:b9: 28:0f:2c:8f:16:a4:7b:7e:7f:29:d5:80:7e:21:46:d9:3c:6a: c0:dc:15:69:bd:cd:6f:d4:51:e0:4a:fc:9f:e4:39:db:0a:c3: 3e:b7:2b:a8:5f:85:b8:92:06:d7:8b:83:ac:98:7e:4e:68:8c: 41:e8:0a:cb:41:90:60:db:55:ab:dc:c9:67:e1:d5:24:ec:36: 77:6d:6b:0d:84:89:85:33:7f:4f:f9:86:14:fa:e4:b5:bc:a8: 8a:2a:b1:c0:fa:0c:8f:12:10:03:4e:82:2c:f9:47:4e:7a:8a: 66:ae:e1:81:e8:ad:7d:5d:02:2d:55:9b:36:78:db:90:7e:5d: f9:70:ad:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1uah8luhKA+mrZK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiOTI5YjItNGI1NC00ZWYwLWI3NjgtZjkxZmNhNjRi ZDYzMB4XDTI2MDQwNzIxMTQxOVoXDTI2MDcwNjIxMTQxOVowLzEtMCsGA1UEAxMk YTUyNzk1NDgtMzBlYS00MjY4LWI4NTctY2JmYmRlOTZhMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c0Qgmq5/GI3GsQonic5nk6Kgtroi1Um9gHw K9ZmIrCbq8UrIagC8761OIbVlsqOOhiRDBxgZrKcC3J21bTrgNUQqBMnKoigZylv qJNRrn8tR8wt4CyoA2sK5Xn7vIDOFtEI7fnpZgxJ41BItKVEQFqRXP4y0bhXVMzd ar4xaH/vCI2SbujPRLRkXY5qKghyrT5QPepqDXrwuXhXF/8J0L7kCez+Ry7MLn+f GUbNwTxgbcfwOpKLN8XTlBdvEYs6Z87pKXE1zDw49biHAgPrq39WX73oyIJtYyAE t7gaZm2WxIxbmMZ2heyqjOyQ6t7U0EFdUeMNE17FEsqABjR8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLxESEeDllFWoB69vcauHCUMg9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmI5 MjliMi00YjU0LTRlZjAtYjc2OC1mOTFmY2E2NGJkNjMvYTQzMmM1OGEtZjZiNS0z NjFjLTg5NzgtMzk1NGMwZThkOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmZiOTI5YjItNGI1NC00ZWYwLWI3 NjgtZjkxZmNhNjRiZDYzL2JmYjkyOWIyLTRiNTQtNGVmMC1iNzY4LWY5MWZjYTY0 YmQ2My5jcmwwHwYDVR0jBBgwFoAU0m4o2rCXzHBGJ0/edTZqwVJI1GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmI5MjliMi00YjU0LTRlZjAtYjc2OC1mOTFm Y2E2NGJkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFzmTieLozSG2DqXpsHAKrXlHhynXC5o5ous5/C9x+B96WMxB4Na0Zk liq3aZNDLVdQPIUP4+Z4qrzznXci6XzOTspcrgOT7+AQVHk+ihpmdGkJcLjMkTmM ngS0la6pulaK5xIxvw9SBlmF7zRiK67bphJRvwfZ2IjZvp/auSgPLI8WpHt+fynV gH4hRtk8asDcFWm9zW/UUeBK/J/kOdsKwz63K6hfhbiSBteLg6yYfk5ojEHoCstB kGDbVavcyWfh1STsNndtaw2EiYUzf0/5hhT65LW8qIoqscD6DI8SEANOgiz5R056 imau4YHorX1dAi1VmzZ425B+XflwrcE= -----END CERTIFICATE-----Generated at Fri Apr 17 23:27:48 2026 by rpki-client