$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa File: 868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa (raw, json) Hash identifier: wPqaXrjmunTkzIVbK9MBwzuFgLz1tXawvpJ/cFJW7uU= Subject key identifier: BB:8D:10:14:0D:6C:AE:94:B7:8D:77:E2:4E:31:48:80:35:43:7A:03 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584E4AEF3F0DDEA3D22FF0E6DE00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 22606 IP address blocks: 13.111.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:3f:0d:de:a3:d2:2f:f0:e6:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=12450a3c-4b79-4349-94a3-aed822de4a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:b6:47:4b:9b:aa:ea:ef:c6:18:86:cf:e6: c3:99:46:8a:b9:ea:4c:19:1a:75:49:8d:90:31:70: 68:05:a4:c7:55:80:9e:77:74:ab:b3:b9:76:67:b1: de:fc:40:4a:8a:3c:71:f5:b1:85:dc:02:30:ac:b3: 73:5c:74:40:0b:9b:12:ff:eb:59:7a:4c:11:3a:57: 7b:5f:7e:6e:b4:ce:1a:60:fe:50:d9:c1:3a:0e:24: 79:d6:b8:6f:e1:3d:c7:31:7f:cc:52:7c:d6:71:3b: 69:da:5e:3b:de:1c:00:c2:7c:fd:47:a8:b4:e5:c9: b5:ed:51:21:4f:fd:02:a0:3d:df:7d:d4:6f:22:6a: 1f:fc:14:f6:88:f8:de:c9:1e:0d:07:4e:7d:d7:65: 14:f0:41:a4:3b:8f:93:ad:08:a2:31:54:53:25:5c: 2e:1f:50:ab:44:73:95:6e:82:24:8c:de:c4:57:b7: 45:e0:52:03:12:de:ab:8e:a3:3b:99:6f:61:fc:d0: 16:2d:d2:b9:c9:1f:98:81:bc:ac:f8:12:6b:87:90: 8e:e3:9c:dc:9e:db:b6:76:0b:20:ca:d6:d9:4c:bb: 29:22:05:cd:e5:71:65:d1:31:3f:b7:de:58:08:7e: 22:fa:4b:28:48:46:10:4c:68:10:93:c6:06:81:0e: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:10:14:0D:6C:AE:94:B7:8D:77:E2:4E:31:48:80:35:43:7A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:cc:56:56:11:e8:f5:d7:a1:a6:87:16:c7:e6:2f:8f:c8:0c: f0:c2:f1:33:3f:f8:cf:69:a9:8b:d2:cb:de:ae:7c:b5:27:cb: 33:ac:7b:17:f2:18:de:00:4d:7a:ae:56:69:6b:bd:e8:64:a6: ca:bc:7a:87:bc:b3:5b:1f:9b:52:3e:0e:77:92:1c:2a:0b:b3: c9:7b:cb:bc:32:33:22:81:c8:51:bb:d6:73:e3:1f:26:fd:b8: 61:db:0f:65:c1:ab:d2:e1:3d:08:b3:0e:c5:4b:0e:fb:29:bb: 24:00:93:16:bc:bd:c1:ec:60:b3:ff:a2:f3:5e:2c:33:f5:bb: 91:f1:d6:3b:9c:bd:c8:59:17:0b:a0:5c:d5:1d:ba:8e:00:c8: b1:6c:2e:ba:2b:6b:47:03:84:15:01:60:a0:4e:40:f1:45:f5: 16:64:67:0f:7e:53:28:62:d1:8d:04:1e:5e:cf:3a:70:7a:38: c7:a5:28:35:a8:bd:38:cb:01:d7:c9:4a:b1:8e:a8:58:f0:59: c5:4d:54:57:b9:97:a5:75:b4:9e:e0:93:41:75:c4:c5:45:0e: cf:e8:93:eb:74:da:bf:64:49:fe:79:e4:6e:5d:c5:ec:a3:39: ba:3c:ac:84:79:39:a2:37:04:07:7c:42:63:d1:3b:b0:cd:c1: c9:3f:aa:ce -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5K7z8N3qPSL/Dm3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTI0NTBhM2MtNGI3OS00MzQ5LTk0YTMtYWVkODIyZGU0YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrK2R0ubqurvxhiGz+bDmUaKuepMGRp1SY2Q MXBoBaTHVYCed3Srs7l2Z7He/EBKijxx9bGF3AIwrLNzXHRAC5sS/+tZekwROld7 X35utM4aYP5Q2cE6DiR51rhv4T3HMX/MUnzWcTtp2l473hwAwnz9R6i05cm17VEh T/0CoD3ffdRvImof/BT2iPjeyR4NB05912UU8EGkO4+TrQiiMVRTJVwuH1CrRHOV boIkjN7EV7dF4FIDEt6rjqM7mW9h/NAWLdK5yR+Ygbys+BJrh5CO45zcntu2dgsg ytbZTLspIgXN5XFl0TE/t95YCH4i+ksoSEYQTGgQk8YGgQ5xxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLuNEBQNbK6Ut4134k4xSIA1Q3oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvODY4YTZkMzktYmFkOS0z NDI4LWFlMDctM2E4YzU0YWNiM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMADW8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA1MxWVhHo9dehpocWx+Yvj8gM8MLxMz/4z2mpi9LL3q58tSfLM6x7F/IY 3gBNeq5WaWu96GSmyrx6h7yzWx+bUj4Od5IcKguzyXvLvDIzIoHIUbvWc+MfJv24 YdsPZcGr0uE9CLMOxUsO+ym7JACTFry9wexgs/+i814sM/W7kfHWO5y9yFkXC6Bc 1R26jgDIsWwuuitrRwOEFQFgoE5A8UX1FmRnD35TKGLRjQQeXs86cHo4x6UoNai9 OMsB18lKsY6oWPBZxU1UV7mXpXW0nuCTQXXExUUOz+iT63Tav2RJ/nnkbl3F7KM5 ujyshHk5ojcEB3xCY9E7sM3ByT+qzg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:38:43 2026 by rpki-client