$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9611be9e-b000-3cb4-9a06-a14f04291ad4.roa File: 9611be9e-b000-3cb4-9a06-a14f04291ad4.roa (raw, json) Hash identifier: +GnSkQRZkXHW3nVj9w7W7WWX7wa0euwGBf0YdW1NLQM= Subject key identifier: CB:1B:05:10:B0:E9:08:0A:F7:BD:D3:5A:CD:B0:09:6B:0E:06:2A:E5 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D300A552F7B118744652A2500 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9611be9e-b000-3cb4-9a06-a14f04291ad4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 155.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:55:2f:7b:11:87:44:65:2a:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=36ffc59a-b5a3-43e7-afc9-e633a05bf33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:32:2c:1a:bd:96:e9:4a:c7:e8:50:d0:1b: 6e:18:04:3e:3e:86:9a:1b:35:96:a9:86:33:c5:c2: ca:78:01:43:45:2e:10:58:d2:32:1f:13:d9:6d:24: 13:26:f0:c8:6a:e1:82:ef:3a:10:8c:ac:d5:30:e2: 3a:50:aa:2d:33:ce:63:0e:c3:59:53:51:97:7c:9e: af:f0:9a:84:36:90:2e:ef:d2:26:2a:34:f0:9c:97: 12:cf:3a:1f:01:8a:c2:e9:f9:97:75:54:e6:68:94: ee:72:d0:19:69:6a:b5:19:d8:2d:14:12:1c:97:e2: b7:ee:e5:ef:a4:99:8e:45:21:1d:05:8a:b3:18:c8: be:e2:6b:89:eb:dc:6e:2f:a4:43:cb:40:7f:49:d9: d7:54:46:33:57:fd:a7:2d:03:71:6c:61:a7:44:d4: d7:10:ce:22:b6:91:76:3d:74:64:33:53:c0:f1:2f: ba:43:82:3c:8d:f4:37:f7:d0:ce:87:b5:76:2d:35: 09:6f:7f:44:97:e4:5c:fd:93:f9:b6:84:45:09:4e: 1a:7e:18:a2:56:ba:73:17:3f:f4:9a:f0:de:36:2d: 09:66:6a:30:22:fb:49:fa:da:ee:fe:40:8f:d4:b2: d4:6d:e6:e8:a4:c3:07:7d:3d:1f:4a:c9:f4:8b:24: 21:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1B:05:10:B0:E9:08:0A:F7:BD:D3:5A:CD:B0:09:6B:0E:06:2A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9611be9e-b000-3cb4-9a06-a14f04291ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 155.226.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:77:a6:8a:72:e0:1e:c9:7c:51:58:9b:87:19:22:20:92:22: 84:8f:ad:da:9b:88:06:ce:ea:de:a4:2d:45:81:c7:c9:7e:b7: 03:43:7d:f8:6b:46:9e:8e:e4:18:59:c5:1f:6e:68:57:1d:62: e2:92:7c:13:92:8a:36:11:e9:70:ed:f3:dd:01:70:e7:89:d8: 7d:44:d7:c7:90:48:cb:25:19:f2:b5:93:db:7b:5a:50:08:39: 9a:37:96:09:72:91:cb:36:24:5e:d5:6d:21:59:ff:2f:f9:57: b1:93:55:34:bc:f9:ed:20:0e:ca:3d:63:a0:d2:e0:e5:2e:6d: 4d:96:a7:75:e1:81:d4:ef:a8:94:e3:bb:b7:f5:34:3f:d1:51: c3:b1:6f:9d:46:e0:dc:ec:9c:93:a2:79:53:71:e9:7d:31:11: ae:40:3c:f8:de:d4:4f:b3:cc:0d:ae:b7:a7:5c:2f:96:75:d4: 2b:67:a6:23:55:4c:b9:89:2f:48:42:b7:55:88:6e:43:b5:82: df:20:b4:d3:a7:1f:b1:ee:94:f0:02:09:fb:72:22:4a:3c:b2: 37:8c:3a:87:9c:48:6b:6f:37:06:dc:58:ff:f2:18:4d:05:42: ca:27:d5:79:9e:44:59:99:78:01:a7:c2:fb:44:e9:cf:51:e6: d3:8b:bc:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClUvexGHRGUqJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzZmZmM1OWEtYjVhMy00M2U3LWFmYzktZTYzM2EwNWJmMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga4yLBq9lulKx+hQ0BtuGAQ+PoaaGzWWqYYz xcLKeAFDRS4QWNIyHxPZbSQTJvDIauGC7zoQjKzVMOI6UKotM85jDsNZU1GXfJ6v 8JqENpAu79ImKjTwnJcSzzofAYrC6fmXdVTmaJTuctAZaWq1GdgtFBIcl+K37uXv pJmORSEdBYqzGMi+4muJ69xuL6RDy0B/SdnXVEYzV/2nLQNxbGGnRNTXEM4itpF2 PXRkM1PA8S+6Q4I8jfQ399DOh7V2LTUJb39El+Rc/ZP5toRFCU4afhiiVrpzFz/0 mvDeNi0JZmowIvtJ+tru/kCP1LLUbebopMMHfT0fSsn0iyQhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsbBRCw6QgK973TWs2wCWsOBirlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvOTYxMWJlOWUtYjAwMC0z Y2I0LTlhMDYtYTE0ZjA0MjkxYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE53popy4B7JfFFYm4cZIiCSIoSPrdqbiAbO6t6kLUWBx8l+twNDffhr Rp6O5BhZxR9uaFcdYuKSfBOSijYR6XDt890BcOeJ2H1E18eQSMslGfK1k9t7WlAI OZo3lglykcs2JF7VbSFZ/y/5V7GTVTS8+e0gDso9Y6DS4OUubU2Wp3XhgdTvqJTj u7f1ND/RUcOxb51G4NzsnJOieVNx6X0xEa5APPje1E+zzA2ut6dcL5Z11CtnpiNV TLmJL0hCt1WIbkO1gt8gtNOnH7HulPACCftyIko8sjeMOoecSGtvNwbcWP/yGE0F Qson1XmeRFmZeAGnwvtE6c9R5tOLvKk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:24 2026 by rpki-client