$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa File: bbbf91b9-718d-3adc-8f53-92010dd213b9.roa (raw, json) Hash identifier: xvsJ7W7LI/WV5nQNgAcY0KFw8fM3JvigCiE9p6RqwqE= Subject key identifier: 44:6D:C5:0B:F4:27:A3:7A:29:C2:09:64:25:70:8E:33:79:B3:23:36 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584D6AAA5B141E2AB19A62EC8A80 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 397423 IP address blocks: 147.124.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:5b:14:1e:2a:b1:9a:62:ec:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=d2c6a554-2da3-47b3-a0f7-118a04b499d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:1f:38:d0:a0:04:f0:f6:eb:8c:48:64:80: 8a:31:b4:d7:a3:58:14:61:42:af:94:0e:e7:4b:c8: 3d:28:6a:e7:e7:e2:43:3d:09:7e:6e:ba:e6:13:ac: 4f:2d:55:b5:b7:ac:7c:14:ee:b6:2c:78:aa:15:b2: dd:de:b8:eb:14:c7:ef:b4:cf:17:85:5d:36:be:6a: 1a:f4:13:2b:96:43:4f:a4:a8:b0:4b:3c:57:00:7b: 6a:09:a5:d2:23:7b:db:39:e7:3b:62:48:ba:2f:19: 51:30:a8:e1:22:52:4f:9f:2f:4c:3e:b6:bf:41:a3: 8d:53:0a:b3:61:c9:cd:e5:dc:4b:84:a8:d0:f9:6a: 77:1c:a1:7e:ac:5b:b6:d8:c9:67:d8:fb:01:af:00: 48:5e:c0:77:45:48:70:f0:3c:7b:ab:69:30:7c:e0: e0:13:c4:a3:7c:86:2e:b8:c4:a8:ec:45:ac:41:48: 47:68:51:c9:b9:ae:3f:6b:8e:05:62:b8:d4:3f:2a: 88:c1:79:ee:ec:ca:5d:7d:a6:70:6c:eb:3f:94:f3: c8:ee:88:ab:76:f8:80:05:f8:ee:be:f0:75:65:02: e4:3d:fc:b3:0e:2b:d5:e6:0d:78:4e:8b:f9:24:d4: c8:be:ad:df:63:8e:1f:29:ae:e1:70:02:e5:72:37: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:C5:0B:F4:27:A3:7A:29:C2:09:64:25:70:8E:33:79:B3:23:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 147.124.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9e:25:f7:49:0a:9f:fc:9d:a2:5e:87:c1:17:d4:22:2d:5a: 0b:a2:3d:de:3e:a0:f7:a5:e2:dc:f0:f1:9f:0d:1a:0b:c6:d3: 62:a3:aa:81:5b:fa:d7:ad:c5:25:07:aa:66:9b:f5:58:65:6f: 58:77:1d:40:ac:b8:d0:62:ea:94:b3:bb:39:dd:9a:24:22:da: c3:1a:41:f1:42:eb:e0:43:90:a6:dc:f1:40:52:55:fb:f4:d7: 68:50:3e:51:46:7d:2d:7a:6c:1a:f7:58:e1:b8:aa:f0:d9:ee: 7e:48:19:ee:16:12:fc:8d:90:d7:cb:dd:7d:76:42:8b:ab:3d: c3:fd:72:51:5a:99:56:26:85:15:81:85:81:73:da:9e:0c:bc: ae:d1:4a:2c:27:f5:bb:4b:d2:c0:e7:df:46:71:8b:6c:b1:9b: e4:20:d2:c1:58:81:55:f6:8e:2e:a4:73:41:98:18:5a:16:37: 82:af:dd:67:51:e3:21:41:31:33:e8:a8:c6:8b:4a:2f:26:ea: a4:72:3c:39:88:c0:40:8c:1f:a7:28:ed:51:6e:bd:ce:69:80: ad:29:06:b9:a6:f9:96:06:8e:3c:e8:26:5c:3b:df:28:f5:ce: ef:04:36:eb:9b:76:dc:18:28:81:5b:66:58:cc:f3:a7:ce:4e: 4b:38:5a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqlsUHiqxmmLsioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZDJjNmE1NTQtMmRhMy00N2IzLWEwZjctMTE4YTA0YjQ5OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbMfONCgBPD264xIZICKMbTXo1gUYUKvlA7n S8g9KGrn5+JDPQl+brrmE6xPLVW1t6x8FO62LHiqFbLd3rjrFMfvtM8XhV02vmoa 9BMrlkNPpKiwSzxXAHtqCaXSI3vbOec7Yki6LxlRMKjhIlJPny9MPra/QaONUwqz YcnN5dxLhKjQ+Wp3HKF+rFu22Mln2PsBrwBIXsB3RUhw8Dx7q2kwfODgE8SjfIYu uMSo7EWsQUhHaFHJua4/a44FYrjUPyqIwXnu7MpdfaZwbOs/lPPI7oirdviABfju vvB1ZQLkPfyzDivV5g14Tov5JNTIvq3fY44fKa7hcALlcjdYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERtxQv0J6N6KcIJZCVwjjN5syM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYmJiZjkxYjktNzE4ZC0z YWRjLThmNTMtOTIwMTBkZDIxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGieJfdJCp/8naJeh8EX1CItWguiPd4+oPel4tzw8Z8NGgvG02KjqoFb +tetxSUHqmab9Vhlb1h3HUCsuNBi6pSzuzndmiQi2sMaQfFC6+BDkKbc8UBSVfv0 12hQPlFGfS16bBr3WOG4qvDZ7n5IGe4WEvyNkNfL3X12QourPcP9clFamVYmhRWB hYFz2p4MvK7RSiwn9btL0sDn30Zxi2yxm+Qg0sFYgVX2ji6kc0GYGFoWN4Kv3WdR 4yFBMTPoqMaLSi8m6qRyPDmIwECMH6co7VFuvc5pgK0pBrmm+ZYGjjzoJlw73yj1 zu8ENuubdtwYKIFbZljM86fOTks4Wtc= -----END CERTIFICATE-----Generated at Fri Apr 17 17:10:24 2026 by rpki-client