$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa File: 6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa (raw, json) Hash identifier: +THQHxBkC7NIE0czkKNL23zgIok92FWRvHyZ4tVuzU0= Subject key identifier: 20:F6:0E:C8:FE:E4:0D:6B:B2:C6:63:D8:24:A4:65:36:B1:98:33:54 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D9E5013CB009CAB772BDFA000 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 4213 IP address blocks: 67.198.230.0/23 maxlen: 24 67.198.232.0/23 maxlen: 24 67.198.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:13:cb:00:9c:ab:77:2b:df:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=87fb929d-a51b-44fb-8496-92427e1cef24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:29:23:47:14:d9:d6:3d:eb:18:e7:68:7c: 2d:b6:18:2d:c6:c0:34:f1:1c:7b:aa:0d:94:d4:f5: 20:f9:96:a7:3d:9f:42:ca:85:88:c9:de:c3:18:88: 76:18:2b:e7:1a:23:5e:dd:b4:ad:5b:ed:7b:cb:9a: b2:9e:3a:23:c3:d7:7d:31:4e:56:ce:67:1d:82:cb: 1f:5d:9c:ac:19:b4:e2:48:d4:96:e5:9e:fa:35:55: 42:d9:28:81:0e:c0:8d:b4:4f:8c:e8:9b:ed:0c:12: b9:6e:9d:ef:d1:c4:48:7d:cd:e9:12:31:25:e9:5b: bb:b4:37:37:82:d6:5b:5b:98:1b:85:f2:4a:0c:da: 0e:f7:8a:2d:6f:e1:50:f3:91:d8:54:d6:57:bc:18: 33:46:55:c0:c1:20:73:69:1d:e2:97:41:db:67:f7: 21:3b:32:3e:21:20:ab:ba:d5:bf:93:7a:db:63:0e: fb:ae:a6:bf:57:5b:e9:ad:17:3f:8c:cf:0a:dd:05: 88:1f:4a:fe:0c:56:52:73:69:54:3d:3f:fc:88:67: e7:f1:2b:9b:9b:6a:e6:e5:27:ce:17:98:fe:21:db: 16:fe:cd:68:d3:24:83:4b:2a:9f:f3:25:fd:a6:f8: 99:37:4b:ce:52:da:69:79:ed:48:4d:99:37:31:ff: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:0E:C8:FE:E4:0D:6B:B2:C6:63:D8:24:A4:65:36:B1:98:33:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.230.0-67.198.233.255 67.198.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ea:b2:fd:21:1c:62:ac:5c:74:0d:71:a8:50:e0:6e:96:90: 9c:8d:c9:bc:da:ba:be:d5:cc:ac:8a:37:73:e2:cc:c0:ff:40: f1:e4:dd:6a:8b:9c:41:cd:a5:69:31:50:82:d1:2a:54:b2:75: 27:6b:62:42:0e:03:25:0f:37:4e:72:57:9b:e4:a6:a8:6a:87: bd:28:76:f6:5f:ef:72:c9:3d:c5:a7:70:3c:6b:36:50:eb:d7: 5c:9a:11:cc:4b:e5:e5:9f:6b:41:c9:98:94:cc:1d:47:54:8f: 94:bf:13:7d:6e:28:78:ab:89:9d:06:57:a6:19:45:c1:70:51: 6f:06:4b:df:44:45:5b:ea:0f:9a:f9:ac:2b:19:8c:ae:4a:99: 0b:83:2c:13:cd:83:74:e3:75:4b:df:12:f7:52:02:7e:fb:14: f1:e5:53:c6:46:a4:aa:e8:df:6e:f3:72:17:5a:1d:f5:39:15: 22:d4:b6:2e:06:ef:f8:a9:c5:8e:22:85:80:8f:29:52:47:74: dc:f2:a7:53:6a:44:f1:3b:10:9e:a4:74:74:45:5c:23:fa:7e: b8:f2:55:74:2e:5a:cb:74:eb:d1:e4:e1:2f:a2:f6:62:09:3e: 51:9e:88:b3:fd:26:6a:1c:f8:5c:7a:95:7a:fd:d4:dd:81:b5: d9:85:bb:cd -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE2eUBPLAJyrdyvfoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ODdmYjkyOWQtYTUxYi00NGZiLTg0OTYtOTI0MjdlMWNlZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0pI0cU2dY96xjnaHwtthgtxsA08Rx7qg2U 1PUg+ZanPZ9CyoWIyd7DGIh2GCvnGiNe3bStW+17y5qynjojw9d9MU5Wzmcdgssf XZysGbTiSNSW5Z76NVVC2SiBDsCNtE+M6JvtDBK5bp3v0cRIfc3pEjEl6Vu7tDc3 gtZbW5gbhfJKDNoO94otb+FQ85HYVNZXvBgzRlXAwSBzaR3il0HbZ/chOzI+ISCr utW/k3rbYw77rqa/V1vprRc/jM8K3QWIH0r+DFZSc2lUPT/8iGfn8Subm2rm5SfO F5j+IdsW/s1o0ySDSyqf8yX9pviZN0vOUtppee1ITZk3Mf8c7wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFCD2Dsj+5A1rssZj2CSkZTaxmDNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNjA4MmM0NzAtZGU0Yi0z ZGE4LWEyZTQtYzBiMWU5YTllZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFDxuYD BAFDxugDBABDxvAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAEuqy/SEcYqxcdA1xqFDgbpaQnI3JvNq6vtXM rIo3c+LMwP9A8eTdaoucQc2laTFQgtEqVLJ1J2tiQg4DJQ83TnJXm+SmqGqHvSh2 9l/vcsk9xadwPGs2UOvXXJoRzEvl5Z9rQcmYlMwdR1SPlL8TfW4oeKuJnQZXphlF wXBRbwZL30RFW+oPmvmsKxmMrkqZC4MsE82DdON1S98S91ICfvsU8eVTxkakqujf bvNyF1od9TkVItS2Lgbv+KnFjiKFgI8pUkd03PKnU2pE8TsQnqR0dEVcI/p+uPJV dC5ay3Tr0eThL6L2Ygk+UZ6Is/0mahz4XHqVev3U3YG12YW7zQ== -----END CERTIFICATE-----Generated at Wed May 13 05:07:24 2026 by rpki-client