$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa File: 58bb2d1c-10b2-3954-b73d-a493764205ed.roa (raw, json) Hash identifier: 4JcQZRN5JSuIH0Yf68RPZNPmzDmLrv9zYu7g+Z5fxAo= Subject key identifier: 4D:ED:E6:D4:B8:D1:4A:45:97:EC:38:31:73:4B:B6:61:90:3C:05:FE Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D9E5013D771FCDE53C30751C0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 35908 IP address blocks: 67.198.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:13:d7:71:fc:de:53:c3:07:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=177b27ad-59aa-4689-935c-ceaaefc0da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:8b:06:68:f5:11:f7:2b:57:23:a4:12:2c: 7d:a7:3a:92:04:f0:6d:2f:f5:47:f8:56:cb:0a:2d: 06:d3:99:f1:71:b3:a6:82:90:7c:74:b6:0a:7f:34: 1e:a0:9d:0d:a2:c1:2c:d6:fe:08:15:16:52:48:e9: 6c:d5:e5:4c:b5:6f:6e:69:fd:d6:6e:53:1f:23:89: 2c:6a:00:32:50:92:3f:02:ed:14:fa:e9:84:5d:1c: 6e:36:36:30:85:4b:0d:e8:c4:93:4b:09:f7:68:88: cd:72:0b:1b:32:20:5b:d7:fd:01:f0:bc:03:80:c0: 33:11:8c:fd:49:c7:26:f6:08:6a:e8:19:19:3a:87: f0:fd:b3:96:97:ab:37:3d:fc:2b:74:56:5c:c8:7b: 6a:38:7c:f3:cc:de:72:84:99:58:11:5a:3d:47:86: eb:1b:d8:b6:67:81:83:d0:b3:b1:74:8c:3a:19:65: 8d:54:eb:34:86:33:d4:f0:5f:4e:f1:78:e0:e8:bb: ba:e6:1d:eb:ec:ae:bd:10:5c:ee:c2:0b:70:cd:a6: 9f:71:ae:3b:f1:1f:8f:3d:a0:32:e1:b4:11:0f:23: 08:63:eb:4d:9e:fe:6b:1f:a1:95:d0:3a:3e:5d:1b: 38:0f:18:47:eb:fe:51:fb:0e:d0:c3:52:dc:70:88: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:ED:E6:D4:B8:D1:4A:45:97:EC:38:31:73:4B:B6:61:90:3C:05:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a7:e9:d7:87:23:e9:f9:89:1b:a8:52:e8:e8:55:11:a9:6f: a2:d1:32:65:c0:86:ea:26:f0:06:a8:55:7d:cf:c5:e9:57:c2: 7e:45:31:c2:d0:a3:f8:81:2c:34:e1:e8:74:26:61:b9:7d:cc: 8b:3f:4a:57:5d:2c:d0:76:94:18:26:05:2f:b3:64:74:ca:56: 34:46:e0:5d:32:67:2d:ea:18:d4:ed:54:89:02:6f:3c:31:42: 9c:fa:ee:43:d3:b4:fe:16:4b:0c:05:2a:6e:fa:df:9e:e8:36: ed:e8:d1:08:f3:fd:d6:bb:14:24:01:e7:e2:03:23:aa:ca:30: ba:4b:db:5b:3b:90:64:57:29:85:0b:be:16:1f:b7:d8:a2:c9: fd:7f:51:a2:cf:a6:42:5f:f0:63:ab:ba:e3:8f:db:79:3f:9e: 56:8c:eb:2e:e1:b7:02:7b:39:0c:80:b9:49:91:a7:e1:c9:a1: af:95:86:d9:e7:9e:57:8e:15:75:1f:1e:aa:33:94:be:b0:6c: 13:e7:a4:8e:7b:2c:bc:b1:22:8e:6b:75:4a:71:36:38:ba:9c: b4:1f:58:96:fe:20:50:3e:91:93:5f:b7:7e:97:de:b5:53:42: 88:a7:11:07:62:c7:4a:7e:0d:95:84:03:47:00:ff:66:5d:60: 40:6d:81:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBPXcfzeU8MHUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MTc3YjI3YWQtNTlhYS00Njg5LTkzNWMtY2VhYWVmYzBkYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H+LBmj1EfcrVyOkEix9pzqSBPBtL/VH+FbL Ci0G05nxcbOmgpB8dLYKfzQeoJ0NosEs1v4IFRZSSOls1eVMtW9uaf3WblMfI4ks agAyUJI/Au0U+umEXRxuNjYwhUsN6MSTSwn3aIjNcgsbMiBb1/0B8LwDgMAzEYz9 Sccm9ghq6BkZOofw/bOWl6s3PfwrdFZcyHtqOHzzzN5yhJlYEVo9R4brG9i2Z4GD 0LOxdIw6GWWNVOs0hjPU8F9O8Xjg6Lu65h3r7K69EFzuwgtwzaafca478R+PPaAy 4bQRDyMIY+tNnv5rH6GV0Do+XRs4DxhH6/5R+w7Qw1LccIj4ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3t5tS40UpFl+w4MXNLtmGQPAX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNThiYjJkMWMtMTBiMi0z OTU0LWI3M2QtYTQ5Mzc2NDIwNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ8aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGn6deHI+n5iRuoUujoVRGpb6LRMmXAhuom8AaoVX3PxelXwn5FMcLQ o/iBLDTh6HQmYbl9zIs/SlddLNB2lBgmBS+zZHTKVjRG4F0yZy3qGNTtVIkCbzwx Qpz67kPTtP4WSwwFKm76357oNu3o0Qjz/da7FCQB5+IDI6rKMLpL21s7kGRXKYUL vhYft9iiyf1/UaLPpkJf8GOruuOP23k/nlaM6y7htwJ7OQyAuUmRp+HJoa+Vhtnn nleOFXUfHqozlL6wbBPnpI57LLyxIo5rdUpxNji6nLQfWJb+IFA+kZNft36X3rVT QoinEQdix0p+DZWEA0cA/2ZdYEBtgZU= -----END CERTIFICATE-----Generated at Wed May 13 05:18:27 2026 by rpki-client