$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa File: bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json) Hash identifier: zHDD3yMMWEdQ58YHbwnBVF7r95oqoUvPvrbTqo3OqnI= Subject key identifier: 36:17:12:81:52:50:90:D6:CE:EA:A1:25:B3:AA:F9:EA:19:CF:87:5F Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Certificate serial: 010D0C9F4328584CCD0C8EA1A4FF1F84EC4F9A80 Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 20099 IP address blocks: 192.44.70.0/24 maxlen: 24 2620:89:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:8e:a1:a4:ff:1f:84:ec:4f:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=49a64b23-e695-49d6-81a3-7d2e45db43ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:5b:19:3a:38:fe:32:48:4f:b4:27:65:c8: ab:72:62:61:e5:ea:20:32:37:c1:f5:7b:e8:ca:02: c5:65:ad:d6:33:58:a8:7a:34:42:1c:05:d4:d0:e3: e1:1f:3b:eb:d6:cb:0e:bf:58:56:06:36:8f:f8:e7: ba:6a:9f:ca:f2:1a:5d:cb:d0:67:2a:fc:30:d6:76: ae:59:15:2e:ed:6e:52:78:6f:48:53:04:6b:87:c3: 84:2e:6b:5c:02:a6:ff:fb:6d:37:f1:7d:05:81:d0: bf:94:01:f3:6e:53:b8:67:fb:10:15:a4:f2:5a:cc: 59:00:2d:de:c8:03:55:79:57:94:d4:ad:f6:c4:b1: dc:a2:b6:1e:a5:30:de:82:f3:10:61:c6:e6:71:8f: 7c:b5:a0:fa:c7:df:ee:b9:5e:af:18:3f:0c:26:2f: 26:9f:ff:26:3b:7d:48:f3:c1:3a:29:0d:01:74:26: cc:aa:01:8d:d9:5b:d3:b0:a5:b6:a9:30:cc:8c:64: a7:4a:bc:8f:1e:1b:10:8f:64:d8:ff:84:5d:61:b2: 1a:9e:27:8c:97:4f:da:25:57:df:75:14:a1:5f:c6: 3b:ed:cd:96:25:17:9d:32:08:4e:b4:6d:c4:e3:53: 25:36:96:0b:a3:02:74:4a:78:69:ad:97:5b:f1:42: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:17:12:81:52:50:90:D6:CE:EA:A1:25:B3:AA:F9:EA:19:CF:87:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl X509v3 Authority Key Identifier: keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer sbgp-ipAddrBlock: critical IPv4: 192.44.70.0/24 IPv6: 2620:89:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:86:8c:e4:b0:d0:18:e7:c8:98:61:07:7b:d0:74:19:6f:3f: 60:da:bd:79:62:97:19:53:94:d5:d2:b7:c3:65:75:17:0b:63: b4:45:bb:ac:bb:f8:38:59:ec:86:fc:e6:82:c5:87:fc:c7:12: 2a:02:ac:52:7f:12:ba:1a:28:17:b2:a0:22:cb:b1:f5:6e:7d: c0:4a:96:d7:4b:ef:23:fa:56:b9:55:e1:1a:d8:99:f6:54:3b: 59:eb:a9:ec:16:71:36:81:79:89:40:1a:e2:6d:60:34:d8:95: 0b:e7:d3:70:de:d5:c0:bc:ff:46:4f:79:95:2b:4b:f8:5e:77: 82:62:94:80:fb:91:3f:4f:00:73:79:a7:8f:04:b2:3e:01:e8: 52:d2:e6:0a:2c:c8:05:64:bb:c6:80:e8:df:d0:47:68:37:9a: ca:46:3f:57:da:8b:49:ac:ff:ea:4a:da:18:6c:e9:dc:0a:fa: ad:c2:f6:78:25:43:54:df:86:7f:2c:48:e5:26:ca:7f:a5:6b: e7:0e:0e:c1:40:a2:4b:bc:1b:d0:6b:fd:53:3a:d7:c7:b7:6d: 59:05:2b:48:84:0e:3e:69:b4:02:fb:0e:11:a6:c7:a4:8f:f9: 5c:e5:6a:b5:f8:70:73:fa:ee:3c:e5:8d:49:c7:7d:f7:26:3e: 2d:0b:da:33 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEzNDI6hpP8fhOxPmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw Nzc2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NDlhNjRiMjMtZTY5NS00OWQ2LTgxYTMtN2QyZTQ1ZGI0M2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeRbGTo4/jJIT7QnZcircmJh5eogMjfB9Xvo ygLFZa3WM1ioejRCHAXU0OPhHzvr1ssOv1hWBjaP+Oe6ap/K8hpdy9BnKvww1nau WRUu7W5SeG9IUwRrh8OELmtcAqb/+2038X0FgdC/lAHzblO4Z/sQFaTyWsxZAC3e yANVeVeU1K32xLHcorYepTDegvMQYcbmcY98taD6x9/uuV6vGD8MJi8mn/8mO31I 88E6KQ0BdCbMqgGN2VvTsKW2qTDMjGSnSryPHhsQj2TY/4RdYbIanieMl0/aJVff dRShX8Y77c2WJRedMghOtG3E41MlNpYLowJ0SnhprZdb8UKkjQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDYXEoFSUJDWzuqhJbOq+eoZz4dfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2 MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2 ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOoaM5LDQGOfImGEHe9B0GW8/YNq9eWKX GVOU1dK3w2V1FwtjtEW7rLv4OFnshvzmgsWH/McSKgKsUn8SuhooF7KgIsux9W59 wEqW10vvI/pWuVXhGtiZ9lQ7Weup7BZxNoF5iUAa4m1gNNiVC+fTcN7VwLz/Rk95 lStL+F53gmKUgPuRP08Ac3mnjwSyPgHoUtLmCizIBWS7xoDo39BHaDeaykY/V9qL Saz/6kraGGzp3Ar6rcL2eCVDVN+GfyxI5SbKf6Vr5w4OwUCiS7wb0Gv9UzrXx7dt WQUrSIQOPmm0AvsOEabHpI/5XOVqtfhwc/ruPOWNScd99yY+LQvaMw== -----END CERTIFICATE-----Generated at Mon Mar 2 23:10:18 2026 by rpki-client