$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa File: dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa (raw, json) Hash identifier: FUjyzYxeBHki4S97Z61IpxVVwIZdhbnKyZpEg5OGGpQ= Subject key identifier: 4C:64:19:11:EE:B7:9C:A1:91:99:3A:08:C6:35:69:22:6F:6D:FB:E6 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D359FAB53CF9528CFE1E5C080 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 32870 IP address blocks: 136.147.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ab:53:cf:95:28:cf:e1:e5:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=2d7d7e32-40d3-4b9d-96a8-919924302247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:7f:99:d0:29:8a:80:00:b8:fa:df:b8:d5: 48:11:c5:b6:b8:b1:2e:c9:11:24:4f:20:06:04:0f: b4:0b:66:de:d8:1a:7c:45:a9:80:98:0c:81:06:82: a0:4b:54:da:b0:42:4a:62:b0:be:1a:a9:91:ed:53: be:8b:d9:e3:3d:09:cc:7c:d9:b4:92:98:40:66:95: 15:a7:93:66:9e:3d:b0:4f:1a:9f:e3:0d:bd:cb:d1: 66:4b:40:76:48:42:e2:5b:12:94:0a:69:1a:5d:81: b8:b7:36:2a:12:36:1b:98:6a:e7:3d:85:bd:d0:5e: c7:ea:3b:05:1a:c9:a9:6a:4f:0c:f8:ec:b1:63:28: 9d:02:4b:9b:67:c5:67:ff:55:aa:24:ac:1c:0e:4a: c1:1f:de:42:49:08:02:f7:a0:f6:cb:09:c9:0e:eb: 59:07:ae:ed:40:86:b2:dd:94:c3:b0:bc:4b:74:50: d6:10:19:ac:ae:4c:32:5e:9a:85:d5:f5:e3:79:8c: 4e:c7:0b:df:e1:f9:f8:6f:a4:09:65:60:17:41:08: d6:20:96:72:36:f2:b9:57:6e:a3:6a:37:57:63:b9: 3a:65:15:47:8c:39:7d:81:d9:43:3f:08:a4:9a:82: 53:48:e9:63:70:9a:7b:b1:67:99:dd:43:4b:7e:83: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:64:19:11:EE:B7:9C:A1:91:99:3A:08:C6:35:69:22:6F:6D:FB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:19:b6:02:c4:34:a3:8b:0c:f8:f1:2c:66:b8:97:64:8c:0b: 96:1c:51:5f:2b:b6:ab:53:b6:d8:fb:af:02:cc:35:a5:ec:6e: 62:a0:bf:29:a1:96:0b:e7:03:17:b5:ea:56:4c:95:78:d4:d8: 88:0e:0d:bd:cd:86:97:f9:9a:07:88:09:34:26:31:2e:1a:ca: 1f:ba:a9:51:ad:1e:0d:4c:5b:34:06:9e:fe:7b:9b:e4:df:3a: cb:e8:b7:0c:36:11:c2:fe:39:ec:db:35:9d:ae:f6:9e:a9:0e: 1d:9c:90:69:7c:bb:d3:48:e6:75:f3:59:1b:ba:c3:3a:55:8b: 09:46:f0:25:2d:ad:ec:f4:6c:38:7e:ca:37:54:8c:07:e5:27: 49:d5:73:6f:6a:72:6a:51:de:52:03:45:e1:86:b5:c2:98:f3: 41:b9:34:10:27:2c:97:48:04:23:7f:21:99:ca:9d:66:f9:fd: b9:15:47:f3:47:6d:50:fb:32:dd:08:6f:7d:0f:90:07:b0:37: b5:39:c5:43:ac:70:1c:49:c8:20:77:52:68:45:16:9d:b1:21: 2f:13:aa:88:de:71:71:e5:cc:79:14:9b:ff:a2:fb:0c:51:d7: 66:dc:f9:e5:bf:1e:8a:b6:de:6b:a0:c7:b3:b3:6c:94:7e:71: 23:49:fa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6tTz5Uoz+HlwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MmQ3ZDdlMzItNDBkMy00YjlkLTk2YTgtOTE5OTI0MzAyMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn1/mdApioAAuPrfuNVIEcW2uLEuyREkTyAG BA+0C2be2Bp8RamAmAyBBoKgS1TasEJKYrC+GqmR7VO+i9njPQnMfNm0kphAZpUV p5Nmnj2wTxqf4w29y9FmS0B2SELiWxKUCmkaXYG4tzYqEjYbmGrnPYW90F7H6jsF Gsmpak8M+OyxYyidAkubZ8Vn/1WqJKwcDkrBH95CSQgC96D2ywnJDutZB67tQIay 3ZTDsLxLdFDWEBmsrkwyXpqF1fXjeYxOxwvf4fn4b6QJZWAXQQjWIJZyNvK5V26j ajdXY7k6ZRVHjDl9gdlDPwikmoJTSOljcJp7sWeZ3UNLfoPn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExkGRHut5yhkZk6CMY1aSJvbfvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGQzNDAxZGMtMDBkOS0z MWMzLWFlYTgtNDE1MGE4N2YxZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsZtgLENKOLDPjxLGa4l2SMC5YcUV8rtqtTttj7rwLMNaXsbmKgvymh lgvnAxe16lZMlXjU2IgODb3Nhpf5mgeICTQmMS4ayh+6qVGtHg1MWzQGnv57m+Tf Osvotww2EcL+OezbNZ2u9p6pDh2ckGl8u9NI5nXzWRu6wzpViwlG8CUtrez0bDh+ yjdUjAflJ0nVc29qcmpR3lIDReGGtcKY80G5NBAnLJdIBCN/IZnKnWb5/bkVR/NH bVD7Mt0Ib30PkAewN7U5xUOscBxJyCB3UmhFFp2xIS8TqojecXHlzHkUm/+i+wxR 12bc+eW/Hoq23mugx7OzbJR+cSNJ+vY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:02 2026 by rpki-client