$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa15586-c307-3365-891b-1732536c563e.roa File: bfa15586-c307-3365-891b-1732536c563e.roa (raw, json) Hash identifier: saDmFznHDQVvxQjjzthXJ4CnUjd7GIiVE/4AwT1O/YA= Subject key identifier: 1F:ED:22:9E:4B:7C:7C:94:16:38:90:F7:BB:AF:CA:5A:CA:B8:86:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D037D363BBB86E8D71138E080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa15586-c307-3365-891b-1732536c563e.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 23.195.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:36:3b:bb:86:e8:d7:11:38:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=b8961255-c5c3-4629-b27d-d3570dcb1600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:15:23:75:a0:b6:f9:d3:7d:4f:1c:59:ea: 5b:bd:e4:1b:31:e2:f6:62:b8:76:c6:01:8a:37:3d: 87:b9:b5:00:a3:60:67:d4:a8:15:c1:a9:fc:9e:62: 72:18:20:4c:b9:de:9a:53:9c:c0:14:c3:4e:95:15: 46:d5:d8:f4:b5:17:ed:b9:fb:fe:e1:f7:3b:5c:ef: 04:73:b6:81:a1:9e:a0:8e:42:75:1d:66:5d:2e:c8: 39:dc:83:94:25:8d:c0:f7:80:53:1e:df:32:c7:35: 0f:c3:90:a6:25:19:31:fb:e1:68:bc:e7:7e:ae:b2: 93:bf:26:d7:d9:82:47:c5:08:35:d4:1f:0f:9a:e2: 6b:35:33:eb:d8:c2:4e:69:2d:bd:1e:41:b1:dc:73: 65:23:12:cd:bb:f5:3c:61:8f:56:ff:d2:39:da:94: 06:1f:d5:0e:da:b5:45:b0:54:cd:c2:43:1a:4f:2a: c7:08:7d:a4:a5:33:37:df:40:aa:79:bd:81:6c:00: f5:4b:87:2b:96:00:7b:7c:cc:68:99:ba:ba:45:be: 8b:47:67:4e:e2:36:ee:06:8a:bf:86:f8:ff:03:3d: da:a3:a0:92:c2:9c:2d:ce:7d:2c:4f:61:4c:f1:32: bc:20:81:b6:62:c7:8c:81:22:9c:7b:51:f7:b0:5f: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:ED:22:9E:4B:7C:7C:94:16:38:90:F7:BB:AF:CA:5A:CA:B8:86:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa15586-c307-3365-891b-1732536c563e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f3:00:07:33:62:b3:34:ad:db:91:a9:11:a0:46:61:b5:49: 48:f7:d7:7e:fa:cb:97:a3:e2:9f:bb:7e:86:0b:c6:91:54:65: 0d:74:16:d6:47:32:a9:65:e3:33:70:12:d8:c7:88:c5:25:bb: 66:a2:1d:a6:fd:6d:d4:8b:ab:8e:72:be:0b:2a:21:90:ea:c4: a4:d1:94:8c:3d:aa:e0:89:b5:a4:0d:28:b2:1c:fc:e2:af:c2: a9:43:c2:29:e7:4c:32:c3:6d:2b:49:25:d4:86:45:31:c4:dd: bd:ea:1a:aa:3e:46:20:95:24:b7:5a:a5:6c:5d:00:8f:62:de: 7a:58:8b:48:71:75:e1:80:ac:29:2a:25:c4:04:8f:5a:a0:19: fc:7e:65:21:3b:40:74:05:b1:ca:48:fc:32:42:2b:3c:48:f0: 38:bb:d6:20:54:9d:98:70:d3:c3:5e:b7:55:0f:a1:3b:40:89: ec:9c:c0:e2:a2:79:1f:7d:14:12:e6:26:b9:ca:ca:73:88:e1: ce:8c:00:db:89:5e:ab:95:10:44:86:94:4e:6b:32:5a:19:30: 7b:b8:c9:d4:5d:9a:57:2c:fe:9e:6d:dc:aa:e8:fd:af:ab:68: 0d:e0:06:70:cc:57:3a:ef:52:cb:9c:56:15:87:18:80:e9:cf: 21:11:b4:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTY7u4bo1xE44IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk Yjg5NjEyNTUtYzVjMy00NjI5LWIyN2QtZDM1NzBkY2IxNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRcVI3WgtvnTfU8cWepbveQbMeL2Yrh2xgGK Nz2HubUAo2Bn1KgVwan8nmJyGCBMud6aU5zAFMNOlRVG1dj0tRftufv+4fc7XO8E c7aBoZ6gjkJ1HWZdLsg53IOUJY3A94BTHt8yxzUPw5CmJRkx++FovOd+rrKTvybX 2YJHxQg11B8PmuJrNTPr2MJOaS29HkGx3HNlIxLNu/U8YY9W/9I52pQGH9UO2rVF sFTNwkMaTyrHCH2kpTM330Cqeb2BbAD1S4crlgB7fMxombq6Rb6LR2dO4jbuBoq/ hvj/Az3ao6CSwpwtzn0sT2FM8TK8IIG2YseMgSKce1H3sF87YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/tIp5LfHyUFjiQ97uvylrKuIYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZhMTU1ODYtYzMwNy0z MzY1LTg5MWItMTczMjUzNmM1NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8NiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPzAAczYrM0rduRqRGgRmG1SUj31376y5ej4p+7foYLxpFUZQ10FtZH Mqll4zNwEtjHiMUlu2aiHab9bdSLq45yvgsqIZDqxKTRlIw9quCJtaQNKLIc/OKv wqlDwinnTDLDbStJJdSGRTHE3b3qGqo+RiCVJLdapWxdAI9i3npYi0hxdeGArCkq JcQEj1qgGfx+ZSE7QHQFscpI/DJCKzxI8Di71iBUnZhw08Net1UPoTtAieycwOKi eR99FBLmJrnKynOI4c6MANuJXquVEESGlE5rMloZMHu4ydRdmlcs/p5t3Kro/a+r aA3gBnDMVzrvUsucVhWHGIDpzyERtAo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:53 2026 by rpki-client