$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa File: bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa (raw, json) Hash identifier: PqPhKwrVG/sY/+nt+nMSA3oHt8kcbiQqTcjT0u6qEdE= Subject key identifier: A0:24:89:58:74:71:AD:37:61:51:B6:50:18:20:DE:F2:3F:2C:24:D8 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584D6D7512ADA160E9E1B1DBDB80 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 22987 IP address blocks: 68.209.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:12:ad:a1:60:e9:e1:b1:db:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=8f6a8461-027a-4cac-a6aa-7e95d2d8a443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:bd:41:9c:6e:df:09:71:c9:9d:dd:b7:e4: 8e:e7:b2:7b:02:9c:4b:59:48:1f:9c:08:aa:a8:0c: df:94:8d:83:a0:99:c7:c7:34:9f:c0:a0:47:e4:e7: ee:c0:62:98:54:96:9e:ea:db:a1:da:70:81:b3:4d: 65:78:16:a2:81:3e:19:6e:b7:65:be:84:35:b4:c7: 33:31:73:5c:1c:fc:c0:1b:75:3f:d8:6a:89:00:e3: 1c:69:a5:bf:40:cd:9b:a7:0d:b7:c2:d8:6b:50:c7: 89:dc:84:d8:0a:bf:2e:f9:5b:82:47:36:2f:26:e7: 71:97:f0:6b:56:4e:30:f1:9c:e3:72:e5:4c:fd:8a: 8a:f9:5b:61:22:2d:b5:58:03:e9:10:48:8c:d9:6f: e7:96:3c:43:90:04:82:d5:24:f4:31:29:c9:99:f9: 8b:13:b3:d6:4d:56:c9:f7:78:55:a8:cc:ec:50:86: 95:e8:3c:3f:e1:32:05:a4:6e:07:40:f6:87:8e:cd: c7:0f:96:25:4a:a1:b6:8e:21:f6:cc:40:1a:c9:16: fe:d6:12:72:a8:d1:96:05:ac:64:c4:95:0b:ca:99: 5c:50:bc:40:17:a3:64:60:81:45:60:31:a1:2e:b4: dc:13:78:3c:36:d8:48:4c:2f:be:34:d4:b6:5c:9f: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:24:89:58:74:71:AD:37:61:51:B6:50:18:20:DE:F2:3F:2C:24:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 68.209.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:aa:a2:2c:83:05:b4:b7:1e:87:f1:a6:45:8a:9d:ad:a5:0b: e0:18:56:07:a6:d3:75:4c:8a:e3:73:2d:01:c1:27:d1:a6:c5: 91:91:66:e0:02:47:e1:5e:3c:92:ce:3d:d2:86:53:65:6e:02: 9b:0b:7a:1b:52:e9:9e:47:52:08:a0:93:65:29:7f:e1:ba:43: d8:3f:c3:60:74:72:f6:43:2b:0a:db:3e:be:c7:88:dd:a3:b2: 74:bb:38:57:6f:68:ff:ba:a1:db:d8:f1:73:66:11:ef:d2:9e: b9:5a:06:0e:93:96:96:28:93:57:6e:da:0a:87:3f:45:5c:0c: e6:e3:f5:b5:5c:bb:a8:fb:c0:f8:b9:42:5d:94:a4:30:6f:69: f7:d7:b2:e2:b3:21:87:10:32:4c:17:3d:91:24:57:d6:ad:d8: 6a:d4:ee:62:e8:7b:83:e7:47:f6:6e:b9:25:13:7d:01:16:1f: 76:c1:de:91:96:ac:44:8c:1c:8c:f4:e4:61:56:f4:cb:a9:6e: fd:e9:8d:13:48:4e:dd:e6:7b:1d:f2:1f:a5:2d:0c:93:b1:ac: 65:77:f0:1f:ce:55:10:e7:58:e5:11:b6:53:61:dd:4c:c9:37: e3:df:1a:8c:49:c7:55:f9:0a:f0:b0:8d:21:68:d2:5e:f6:d5: 01:1b:43:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tdRKtoWDp4bHb24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk OGY2YTg0NjEtMDI3YS00Y2FjLWE2YWEtN2U5NWQyZDhhNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYe9QZxu3wlxyZ3dt+SO57J7ApxLWUgfnAiq qAzflI2DoJnHxzSfwKBH5OfuwGKYVJae6tuh2nCBs01leBaigT4ZbrdlvoQ1tMcz MXNcHPzAG3U/2GqJAOMcaaW/QM2bpw23wthrUMeJ3ITYCr8u+VuCRzYvJudxl/Br Vk4w8ZzjcuVM/YqK+VthIi21WAPpEEiM2W/nljxDkASC1ST0MSnJmfmLE7PWTVbJ 93hVqMzsUIaV6Dw/4TIFpG4HQPaHjs3HD5YlSqG2jiH2zEAayRb+1hJyqNGWBaxk xJULyplcULxAF6NkYIFFYDGhLrTcE3g8NthITC++NNS2XJ8RkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAkiVh0ca03YVG2UBgg3vI/LCTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvYmY4MzRmMTktMTRjOC0z NGYyLWJmOTUtYjM3OTdiZDk2ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRNGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSqoiyDBbS3HofxpkWKna2lC+AYVgem03VMiuNzLQHBJ9GmxZGRZuAC R+FePJLOPdKGU2VuApsLehtS6Z5HUgigk2Upf+G6Q9g/w2B0cvZDKwrbPr7HiN2j snS7OFdvaP+6odvY8XNmEe/SnrlaBg6TlpYok1du2gqHP0VcDObj9bVcu6j7wPi5 Ql2UpDBvaffXsuKzIYcQMkwXPZEkV9at2GrU7mLoe4PnR/ZuuSUTfQEWH3bB3pGW rESMHIz05GFW9Mupbv3pjRNITt3mex3yH6UtDJOxrGV38B/OVRDnWOURtlNh3UzJ N+PfGoxJx1X5CvCwjSFo0l721QEbQ9A= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:31 2026 by rpki-client