$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa File: bfa17855-802a-32e9-b629-716363d8dec0.roa (raw, json) Hash identifier: EOA2ELpZUXThppZWRgeMLePAS5zUb9EBgRygFt6kKu8= Subject key identifier: 8E:18:07:BE:DC:B1:F0:D3:01:03:78:18:E5:36:EF:69:1E:BB:0E:EE Certificate issuer: /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Certificate serial: 010D0C9F4328584D20307638981A9945C460B500 Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa Signing time: Tue 10 Mar 2026 20:45:05 +0000 ROA not before: Tue 10 Mar 2026 20:45:05 +0000 ROA not after: Mon 08 Jun 2026 20:45:05 +0000 asID: 20014 IP address blocks: 208.71.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:30:76:38:98:1a:99:45:c4:60:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Validity Not Before: Mar 10 20:45:05 2026 GMT Not After : Jun 8 20:45:05 2026 GMT Subject: CN=1fa9a5c9-ad1b-4ddb-9d7d-e60482a03ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:d7:a6:df:bb:bf:94:3a:16:d9:fa:d3:78: 78:37:3e:c4:bb:22:0e:0a:78:80:50:4d:6d:b2:1c: 50:96:ae:fb:1b:79:80:55:41:61:cc:82:76:eb:ff: b6:23:f9:15:51:19:14:e6:b9:c7:95:57:6d:a1:e4: d1:e0:36:f4:86:a2:82:1c:06:17:47:ee:0c:00:fc: ac:59:a0:a9:8c:e9:b4:b2:55:b1:35:8d:94:ba:30: 3e:94:52:0a:e6:51:8d:a1:f0:60:b4:28:1a:2b:b9: 1e:f6:20:99:11:19:f3:0c:ae:69:e5:55:9f:89:ec: ca:08:8c:5c:27:bc:39:75:af:73:d5:a4:0c:8a:b0: 9b:15:79:85:d7:dc:82:b5:1e:19:19:1d:b5:dd:41: 4c:61:63:fb:68:e3:e7:8d:c3:b6:3b:e4:e9:2f:1f: 4d:16:61:6d:11:d4:fd:55:f6:68:ac:cd:e7:cf:c2: 90:4f:12:22:06:8e:ad:96:9b:16:c7:ef:27:eb:13: eb:02:d8:00:5f:e5:7b:16:b4:05:e3:56:12:23:1e: 4c:cc:68:db:d9:d8:7d:28:ad:37:3c:54:90:4d:b5: 01:e6:f9:79:65:64:19:bc:b3:39:94:90:cb:dc:73: d3:50:f7:cf:7b:71:ea:71:be:34:e8:89:90:0f:5e: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:18:07:BE:DC:B1:F0:D3:01:03:78:18:E5:36:EF:69:1E:BB:0E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl X509v3 Authority Key Identifier: keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer sbgp-ipAddrBlock: critical IPv4: 208.71.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d8:36:0a:79:df:1e:25:03:aa:7f:17:0f:0c:0d:67:ae:b8: 2f:1c:28:79:b4:fe:74:47:33:13:4a:ea:3a:73:4d:57:91:4d: 6a:ab:5a:21:31:e2:cc:ca:7d:93:17:9c:f1:30:42:11:6d:ed: 85:18:5e:d0:7f:51:2e:79:bb:25:60:a7:e4:8f:5a:a0:4c:56: be:a6:13:fd:70:53:38:b3:7b:44:6c:5d:67:ba:f6:6e:b1:40: f1:a8:80:7f:8c:14:c5:ac:9a:10:1e:dc:64:0b:e4:16:16:d5: 0a:51:e7:8e:7b:f5:29:05:f7:0c:ef:e6:bc:21:55:f7:61:d9: 27:80:35:5d:e1:4f:6a:b1:b9:e7:ab:4e:07:98:bb:b7:f9:43: e2:cc:17:f6:98:f1:62:a9:e4:16:cc:c5:3c:16:0c:c7:87:c5: 5e:ac:86:ae:bd:a5:94:cb:87:bc:c7:cd:3e:66:b7:8e:05:5d: d6:1b:b8:57:3c:47:41:f8:1e:df:f8:10:7d:3a:a5:1f:2c:94: dd:b7:96:b7:48:0b:58:1e:c9:b7:67:b6:56:6a:89:2c:95:de: 38:e8:68:68:59:6b:bd:b3:72:32:28:83:f0:de:b6:10:cb:8f: d5:8e:ec:32:fb:19:5a:29:0a:34:ad:cc:2c:e4:ef:d3:57:0f: 06:cd:71:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gMHY4mBqZRcRgtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNi MTNlMB4XDTI2MDMxMDIwNDUwNVoXDTI2MDYwODIwNDUwNVowLzEtMCsGA1UEAxMk MWZhOWE1YzktYWQxYi00ZGRiLTlkN2QtZTYwNDgyYTAzZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LzXpt+7v5Q6Ftn603h4Nz7EuyIOCniAUE1t shxQlq77G3mAVUFhzIJ26/+2I/kVURkU5rnHlVdtoeTR4Db0hqKCHAYXR+4MAPys WaCpjOm0slWxNY2UujA+lFIK5lGNofBgtCgaK7ke9iCZERnzDK5p5VWfiezKCIxc J7w5da9z1aQMirCbFXmF19yCtR4ZGR213UFMYWP7aOPnjcO2O+TpLx9NFmFtEdT9 VfZorM3nz8KQTxIiBo6tlpsWx+8n6xPrAtgAX+V7FrQF41YSIx5MzGjb2dh9KK03 PFSQTbUB5vl5ZWQZvLM5lJDL3HPTUPfPe3Hqcb406ImQD16bOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4YB77csfDTAQN4GOU272keuw7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Nh M2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvYmZhMTc4NTUtODAyYS0z MmU5LWI2MjktNzE2MzYzZDhkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNjYTNjOWItMTE0Ny00ZTkxLTg0 ODAtMzdlZDFiZWNiMTNlLzFjY2EzYzliLTExNDctNGU5MS04NDgwLTM3ZWQxYmVj YjEzZS5jcmwwHwYDVR0jBBgwFoAU5ZSC2cRdy+EEAvK/v1php4yiLqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2Vk MWJlY2IxM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnYNgp53x4lA6p/Fw8MDWeuuC8cKHm0/nRHMxNK6jpzTVeRTWqrWiEx 4szKfZMXnPEwQhFt7YUYXtB/US55uyVgp+SPWqBMVr6mE/1wUzize0RsXWe69m6x QPGogH+MFMWsmhAe3GQL5BYW1QpR54579SkF9wzv5rwhVfdh2SeANV3hT2qxueer TgeYu7f5Q+LMF/aY8WKp5BbMxTwWDMeHxV6shq69pZTLh7zHzT5mt44FXdYbuFc8 R0H4Ht/4EH06pR8slN23lrdIC1geybdntlZqiSyV3jjoaGhZa72zcjIog/DethDL j9WO7DL7GVopCjStzCzk79NXDwbNcVk= -----END CERTIFICATE-----Generated at Thu Mar 26 23:40:53 2026 by rpki-client