$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa File: b818da63-b5bf-3282-a0d6-062f6b347687.roa (raw, json) Hash identifier: G9Fdmb3VHwzSXy6br1sa007E3WkQX9qvkO/fKs5XbYI= Subject key identifier: 2A:A8:19:F7:B9:70:AD:4F:E0:4C:F8:DD:9F:E6:BB:74:0E:4C:5C:26 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D8C2A9FA70B8B2C2F9E75F180 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 35908 IP address blocks: 174.139.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9f:a7:0b:8b:2c:2f:9e:75:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=a16cd0f1-2f57-4754-9b65-483efb70dc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:d0:cd:52:a4:5c:88:8b:e9:ad:cd:d4:ad: 4a:b9:39:65:16:96:1b:b3:11:c0:6f:06:b5:2a:ca: db:e2:41:15:fc:9d:b3:db:76:77:1b:53:2f:3e:3a: 7f:1a:c6:4e:bf:62:03:01:04:3d:26:6e:3d:6f:87: 26:ff:34:45:9f:47:22:28:8d:7b:60:39:ee:1b:f0: d2:06:14:1f:6b:ed:f4:c2:4a:ab:7b:62:16:d8:5c: 98:9b:8a:98:02:7a:2c:3c:18:5f:56:d8:51:09:67: 9c:48:35:29:2a:bc:49:55:76:29:2a:9c:52:f5:b2: 67:f5:43:f9:f6:d5:19:c2:7a:45:cc:ba:0c:db:65: ed:e6:f6:89:b4:cd:1a:9c:33:b5:33:23:ea:5a:50: fa:b2:6b:13:8c:e9:07:c9:f7:52:7a:dd:c8:00:78: 9e:14:b0:a7:23:cf:f1:8c:85:5d:7f:34:26:25:7d: 65:88:a0:4d:84:b3:b9:2a:b5:f4:05:37:46:ab:e5: 99:2b:83:2a:55:1b:01:23:c6:f3:22:34:b6:34:0b: a7:51:0e:f7:52:8e:dc:e6:45:5d:ea:53:c8:2d:d8: 15:cf:3c:c8:ef:40:1e:f6:eb:9e:7e:7e:f2:57:d5: 96:9c:60:d2:7b:c9:a4:cd:85:b9:63:b9:93:38:c3: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A8:19:F7:B9:70:AD:4F:E0:4C:F8:DD:9F:E6:BB:74:0E:4C:5C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c7:1c:09:ee:24:4f:4a:82:f3:11:e9:21:52:26:81:8f:9d: 12:8e:d6:ad:dd:0d:bd:90:7d:ab:d6:cc:a5:c5:71:6a:38:a1: 36:67:54:80:40:77:62:a9:59:83:6a:10:8b:a1:f8:f0:36:9e: ed:5a:bc:d5:bd:a4:ad:57:18:1c:53:15:65:43:b4:74:2a:eb: f7:52:8d:91:e5:00:2c:3f:da:d7:55:82:d5:02:09:fc:90:1d: a9:6b:92:5d:fe:25:fc:09:7d:bf:99:4a:15:6e:3c:29:9c:38: 24:0f:ab:53:b5:6d:6e:88:93:79:4b:f8:97:2d:ab:2a:d4:5f: 61:9d:b0:74:b4:e1:21:cd:39:7c:02:93:41:45:ee:7f:eb:fb: 71:9e:73:b4:0f:f9:40:19:c8:bf:ac:50:9d:44:dd:fd:8c:e6: 07:26:a2:41:4f:aa:5d:cf:1b:2b:8e:9b:92:41:d7:6b:45:41: ae:e4:ac:1b:d6:fe:bd:be:fe:dc:78:3c:34:55:99:8c:1a:96: 2d:81:23:bc:ee:af:4f:9f:b2:d5:b5:a4:cb:2f:fc:22:8f:36: 86:60:75:44:72:42:08:95:83:6e:9d:49:cf:39:a9:59:03:ff: 38:d4:f7:2c:0f:d5:20:4e:4f:27:c9:14:3a:92:56:8f:90:8e: c2:b6:70:e3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2MKp+nC4ssL5518YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk YTE2Y2QwZjEtMmY1Ny00NzU0LTliNjUtNDgzZWZiNzBkYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKjQzVKkXIiL6a3N1K1KuTllFpYbsxHAbwa1 Ksrb4kEV/J2z23Z3G1MvPjp/GsZOv2IDAQQ9Jm49b4cm/zRFn0ciKI17YDnuG/DS BhQfa+30wkqre2IW2FyYm4qYAnosPBhfVthRCWecSDUpKrxJVXYpKpxS9bJn9UP5 9tUZwnpFzLoM22Xt5vaJtM0anDO1MyPqWlD6smsTjOkHyfdSet3IAHieFLCnI8/x jIVdfzQmJX1liKBNhLO5KrX0BTdGq+WZK4MqVRsBI8bzIjS2NAunUQ73Uo7c5kVd 6lPILdgVzzzI70Ae9uuefn7yV9WWnGDSe8mkzYW5Y7mTOMNfTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCqoGfe5cK1P4Ez43Z/mu3QOTFwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYjgxOGRhNjMtYjViZi0z MjgyLWEwZDYtMDYyZjZiMzQ3Njg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAroswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPsccCe4kT0qC8xHpIVImgY+dEo7Wrd0NvZB9q9bMpcVxajihNmdUgEB3 YqlZg2oQi6H48Dae7Vq81b2krVcYHFMVZUO0dCrr91KNkeUALD/a11WC1QIJ/JAd qWuSXf4l/Al9v5lKFW48KZw4JA+rU7VtboiTeUv4ly2rKtRfYZ2wdLThIc05fAKT QUXuf+v7cZ5ztA/5QBnIv6xQnUTd/YzmByaiQU+qXc8bK46bkkHXa0VBruSsG9b+ vb7+3Hg8NFWZjBqWLYEjvO6vT5+y1bWkyy/8Io82hmB1RHJCCJWDbp1JzzmpWQP/ ONT3LA/VIE5PJ8kUOpJWj5COwrZw4w== -----END CERTIFICATE-----Generated at Wed May 13 07:06:12 2026 by rpki-client