$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/d073482c-0507-3247-8a5f-0ab69e6e0375.roa File: d073482c-0507-3247-8a5f-0ab69e6e0375.roa (raw, json) Hash identifier: Tm5oqZaWVsi3AbMgEeYKEpeZjCGDNzanQyO8pyXS0oE= Subject key identifier: 57:0C:CF:93:A4:72:E4:CB:68:1A:56:9D:31:73:F3:1C:F5:42:7B:CF Certificate issuer: /CN=bf862f27-363f-42ce-ab7e-31739b3660a0 Certificate serial: 010D0C9F4328584D9A2003940CDA63D8EC9B1A80 Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/d073482c-0507-3247-8a5f-0ab69e6e0375.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 6939 IP address blocks: 199.244.88.0/22 maxlen: 22 216.38.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:03:94:0c:da:63:d8:ec:9b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=f545c180-a3d7-4d4c-abba-47a818230f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:81:77:63:66:50:72:be:da:38:12:cc:63: e9:29:e1:99:39:6d:13:be:3b:e8:70:2e:97:ed:9c: 9d:65:34:22:57:c3:24:1c:4d:20:ce:fc:7a:47:0c: 30:3a:0e:02:58:79:90:bf:ba:77:69:91:42:e9:d0: 36:93:1f:be:29:87:26:12:b3:e3:b5:30:bf:40:a1: 79:70:b5:ce:49:85:17:3d:df:d7:95:96:9f:73:29: 60:5e:31:a1:77:04:4b:5e:20:16:36:4a:00:ec:10: 7a:67:ef:e9:a4:3e:e5:74:43:d3:6f:9c:65:f0:ff: 2c:6e:ef:ac:87:7f:7f:64:ce:18:6c:81:f6:6d:0e: 0f:a4:3d:4c:86:05:8c:28:d3:58:31:5f:cc:e7:1e: ea:09:c8:5b:e0:47:39:fb:b4:54:16:23:5e:d1:67: 25:92:5b:9c:f7:47:1b:a0:90:05:87:78:8f:51:fc: fb:dd:a1:f6:44:b9:90:2a:90:ad:66:f8:7b:47:65: 7e:0f:da:c5:ed:bc:6e:1f:f4:99:9f:46:f6:8f:5f: 56:ca:89:dd:81:70:3a:3c:f9:3a:f2:ac:87:78:d3: 40:8d:a9:a8:91:10:01:ed:99:e2:1f:08:80:90:c5: 4e:99:0b:08:4f:a8:59:c2:7d:d5:d8:34:de:9f:56: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:CF:93:A4:72:E4:CB:68:1A:56:9D:31:73:F3:1C:F5:42:7B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/d073482c-0507-3247-8a5f-0ab69e6e0375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl X509v3 Authority Key Identifier: keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer sbgp-ipAddrBlock: critical IPv4: 199.244.88.0/22 216.38.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0d:38:49:de:38:08:29:89:14:66:af:03:41:27:44:60:f0: ae:5c:a4:1b:1e:b1:2c:f4:23:04:85:b0:26:dc:93:ef:5d:2f: 9c:99:f6:b9:66:2c:f6:42:ea:09:2c:4a:4a:55:f2:86:15:0f: 9b:52:b4:f8:8c:2c:a5:17:20:35:35:15:e4:93:c6:15:78:00: c5:62:4f:eb:b8:39:e3:55:9f:70:27:80:af:76:5f:26:8a:a5: 55:0b:b5:bd:55:13:07:e3:c9:8e:31:d8:0e:08:64:55:0f:a7: 24:fe:66:bb:dc:25:84:6f:b9:ae:47:46:65:d9:83:45:9c:9f: df:6b:31:09:d4:33:58:15:41:3d:8b:3d:12:2b:48:66:12:e2: dc:cb:6c:36:6e:7a:09:a3:97:8f:f5:c6:c0:5a:08:c1:7a:27: ed:fc:a6:62:a6:6d:1c:e4:5b:52:23:2c:a3:ee:a8:41:ad:84: c7:23:bf:a0:45:30:b6:d7:b6:5d:19:a1:19:c0:6d:cc:41:ac: 29:16:a6:bb:da:fd:d8:8a:28:8f:c1:92:57:5c:e0:f0:67:9d: 94:3b:0c:79:59:a0:9b:26:78:9e:b8:e7:c9:49:e4:b7:f9:bf: cf:39:40:dd:fa:12:3b:34:69:c6:92:87:66:b5:e5:77:93:13: 74:55:cb:21 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2aIAOUDNpj2OybGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4NjJmMjctMzYzZi00MmNlLWFiN2UtMzE3MzliMzY2 MGEwMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZjU0NWMxODAtYTNkNy00ZDRjLWFiYmEtNDdhODE4MjMwZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzCBd2NmUHK+2jgSzGPpKeGZOW0TvjvocC6X 7ZydZTQiV8MkHE0gzvx6RwwwOg4CWHmQv7p3aZFC6dA2kx++KYcmErPjtTC/QKF5 cLXOSYUXPd/XlZafcylgXjGhdwRLXiAWNkoA7BB6Z+/ppD7ldEPTb5xl8P8sbu+s h39/ZM4YbIH2bQ4PpD1MhgWMKNNYMV/M5x7qCchb4Ec5+7RUFiNe0Wclkluc90cb oJAFh3iPUfz73aH2RLmQKpCtZvh7R2V+D9rF7bxuH/SZn0b2j19WyondgXA6PPk6 8qyHeNNAjamokRAB7ZniHwiAkMVOmQsIT6hZwn3V2DTen1ZVfQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFcMz5OkcuTLaBpWnTFz8xz1QnvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2 MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTczOWIzNjYwYTAvZDA3MzQ4MmMtMDUwNy0z MjQ3LThhNWYtMGFiNjllNmUwMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmY4NjJmMjctMzYzZi00MmNlLWFi N2UtMzE3MzliMzY2MGEwL2JmODYyZjI3LTM2M2YtNDJjZS1hYjdlLTMxNzM5YjM2 NjBhMC5jcmwwHwYDVR0jBBgwFoAU/Mn+2ixOINbiezYnXAE0YqRk2m8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTcz OWIzNjYwYTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx/RYAwQC 2CbkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC4NOEneOAgpiRRmrwNBJ0Rg8K5cpBsesSz0IwSFsCbck+9d L5yZ9rlmLPZC6gksSkpV8oYVD5tStPiMLKUXIDU1FeSTxhV4AMViT+u4OeNVn3An gK92XyaKpVULtb1VEwfjyY4x2A4IZFUPpyT+ZrvcJYRvua5HRmXZg0Wcn99rMQnU M1gVQT2LPRIrSGYS4tzLbDZuegmjl4/1xsBaCMF6J+38pmKmbRzkW1IjLKPuqEGt hMcjv6BFMLbXtl0ZoRnAbcxBrCkWprva/diKKI/Bkldc4PBnnZQ7DHlZoJsmeJ64 58lJ5Lf5v885QN36Ejs0acaSh2a15XeTE3RVyyE= -----END CERTIFICATE-----Generated at Wed May 13 15:18:50 2026 by rpki-client