$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa File: bcf63ce9-7252-3eb7-86a9-be391198cc94.roa (raw, json) Hash identifier: PUrF+hiIb2C3Z/kBpKLF/p2xz53GhqBiitU1544zCAk= Subject key identifier: 9E:B1:90:B2:F5:49:B3:54:64:07:CD:FA:A5:1C:4E:21:37:0E:9A:47 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D67DFBC964EC3204E8D4FC200 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 396982 IP address blocks: 198.135.124.0/23 maxlen: 23 199.19.248.0/21 maxlen: 21 199.116.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:bc:96:4e:c3:20:4e:8d:4f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=8dda2ef0-a75b-4c68-9350-974c8e985aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:9f:c7:5a:31:74:1b:f8:94:0f:f9:99:6f: aa:f2:75:c1:cf:20:d1:56:a3:66:5d:f2:9b:a8:fe: 1b:ee:78:ca:97:47:6a:ec:69:fa:05:3e:6e:81:a1: 28:5c:69:d7:c6:f6:55:eb:bf:f6:1e:01:75:25:9b: 8d:c5:97:04:c5:95:0d:42:26:a8:3f:5e:35:5d:45: 8b:21:2a:37:81:54:00:b4:53:e5:63:f4:59:0b:c7: 27:c4:e8:c3:fd:ef:31:51:63:54:6f:04:85:fb:e5: 8d:d8:e0:44:75:6e:af:2b:07:59:cf:39:9b:aa:66: e8:93:a5:e8:6c:0c:2d:57:76:35:c6:a9:b7:1c:f0: b4:ef:3e:46:53:85:bd:31:6c:9b:f8:df:6a:90:b6: 14:b3:d0:ec:7f:df:bf:10:18:35:55:74:f1:e7:0e: 49:48:4f:a1:f9:b7:73:59:41:9f:43:28:59:72:e2: 9c:bb:9a:6d:82:ed:94:79:c7:35:48:84:0c:82:20: 4a:b8:15:59:a4:dc:59:a0:19:01:b9:00:08:c3:41: 21:a6:00:ca:bd:ff:69:ce:82:d1:1e:1e:db:3d:c8: 44:3a:f4:c5:1b:db:18:a9:60:ea:ec:fa:ea:0a:b5: 43:2f:ed:af:f0:43:59:ad:11:d7:96:f5:e4:f3:6b: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:90:B2:F5:49:B3:54:64:07:CD:FA:A5:1C:4E:21:37:0E:9A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 198.135.124.0/23 199.19.248.0/21 199.116.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:86:9c:bd:7d:2b:d5:70:57:75:fd:de:50:55:02:80:d8:4b: 88:ef:5e:94:f1:e6:6d:da:73:7c:b6:d1:7b:01:60:a2:79:52: 69:4c:3d:8a:17:04:eb:d5:42:65:34:4f:a4:06:15:85:c6:27: df:97:75:db:87:31:be:21:bc:12:cb:9b:57:ff:11:7b:57:a4: 27:77:6e:76:b4:2a:67:8e:16:91:ee:eb:02:c5:46:94:3c:dd: bc:ba:a3:f9:f6:7c:33:3a:7e:37:fb:8d:0d:95:4b:3c:51:99: 1f:9c:7f:26:4b:f1:f7:54:26:7a:d0:38:4d:22:e6:fe:1c:cd: e1:49:6d:03:c6:70:82:b2:53:e7:12:60:6e:a9:33:52:1f:b0: 0a:1d:f7:46:20:4e:83:1f:bc:87:06:19:4c:bb:ce:7c:8f:fa: 81:8f:66:9c:3e:5f:c6:4e:d8:92:8a:5b:d0:b3:82:30:f4:e9: c8:5c:f2:db:e2:30:ac:a0:6b:62:e2:65:11:10:94:c3:9c:2f: fa:2f:92:3c:7d:5b:44:dd:31:0a:76:78:71:5f:ee:63:6b:3d: 94:bf:9a:38:13:9d:60:32:ed:89:bb:3a:5b:ce:f5:17:57:8d: 78:09:cd:fa:b7:e3:6c:02:7b:05:e8:d0:6d:e6:69:96:db:c5: 9d:2a:c4:e0 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1n37yWTsMgTo1PwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OGRkYTJlZjAtYTc1Yi00YzY4LTkzNTAtOTc0YzhlOTg1YWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdufx1oxdBv4lA/5mW+q8nXBzyDRVqNmXfKb qP4b7njKl0dq7Gn6BT5ugaEoXGnXxvZV67/2HgF1JZuNxZcExZUNQiaoP141XUWL ISo3gVQAtFPlY/RZC8cnxOjD/e8xUWNUbwSF++WN2OBEdW6vKwdZzzmbqmbok6Xo bAwtV3Y1xqm3HPC07z5GU4W9MWyb+N9qkLYUs9Dsf9+/EBg1VXTx5w5JSE+h+bdz WUGfQyhZcuKcu5ptgu2Uecc1SIQMgiBKuBVZpNxZoBkBuQAIw0EhpgDKvf9pzoLR Hh7bPchEOvTFG9sYqWDq7PrqCrVDL+2v8ENZrRHXlvXk82tA8QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJ6xkLL1SbNUZAfN+qUcTiE3DppHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYmNmNjNjZTktNzI1Mi0z ZWI3LTg2YTktYmUzOTExOThjYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBxod8AwQD xxP4AwQDx3SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFeGnL19K9VwV3X93lBVAoDYS4jvXpTx5m3ac3y2 0XsBYKJ5UmlMPYoXBOvVQmU0T6QGFYXGJ9+XdduHMb4hvBLLm1f/EXtXpCd3bna0 KmeOFpHu6wLFRpQ83by6o/n2fDM6fjf7jQ2VSzxRmR+cfyZL8fdUJnrQOE0i5v4c zeFJbQPGcIKyU+cSYG6pM1IfsAod90YgToMfvIcGGUy7znyP+oGPZpw+X8ZO2JKK W9CzgjD06chc8tviMKyga2LiZREQlMOcL/ovkjx9W0TdMQp2eHFf7mNrPZS/mjgT nWAy7Ym7OlvO9RdXjXgJzfq342wCewXo0G3maZbbxZ0qxOA= -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:56 2026 by rpki-client