$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa File: d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa (raw, json) Hash identifier: UYVWEs46RnBt//+LzwFmSHYqBwkZnZjWrVl/JEtZ398= Subject key identifier: 1A:01:2D:9A:D9:E4:46:4F:D7:C1:8F:9C:28:0A:BB:0F:31:59:AA:94 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D9E501BA3FCE107B7D412EA78 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 35908 IP address blocks: 209.11.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1b:a3:fc:e1:07:b7:d4:12:ea:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=cf4ddea8-1266-4fa9-a5b6-f8dbbd6a92a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:a0:e9:59:c7:36:1b:8a:29:8a:c9:bf:13: 5c:78:e6:fe:a5:a5:ce:d3:4a:dc:b8:54:30:8c:c8: cc:7e:f6:96:6b:f9:64:3c:0e:de:85:87:ff:2e:8e: 6e:f4:40:c3:fa:f1:c1:e1:06:b9:15:9c:4b:c0:20: 7c:a4:27:ad:8c:e8:7a:a9:36:f0:35:3f:6d:68:e5: e9:ab:a1:e7:a8:e4:88:23:f1:28:24:e7:49:ce:28: 27:00:07:10:2a:35:a3:95:fb:07:1b:1c:5b:3e:bd: 7a:b5:3a:13:e4:52:a2:44:4f:98:8d:89:6f:59:93: 72:c2:10:83:88:95:48:ca:9f:a4:d2:eb:25:21:26: fa:25:75:5c:a6:b0:1e:24:61:3a:d5:4f:46:b0:e9: ca:43:a4:28:15:17:33:7d:d2:23:c8:f1:8e:98:18: e6:57:84:46:bf:6d:3c:3d:86:b9:5b:c0:a9:46:32: 2b:10:f9:29:38:eb:36:17:c5:4e:50:d1:59:7c:ee: 8c:78:12:ae:48:66:9b:b5:d0:63:b9:c8:3b:c5:fa: 20:1c:95:77:59:0b:ce:bc:5f:40:ac:dc:54:fb:9e: 44:39:19:83:0e:51:4b:04:1a:24:3a:b1:22:d5:b4: 6c:a4:ae:fe:72:38:7e:e5:5a:7f:fc:cd:de:f0:7e: fe:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:01:2D:9A:D9:E4:46:4F:D7:C1:8F:9C:28:0A:BB:0F:31:59:AA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6e:c2:52:46:46:04:20:0d:07:e6:f1:dd:e1:db:94:2f:5b: c5:62:43:0b:fc:57:ab:24:d5:70:25:82:ec:30:c3:d3:3a:73: d2:a1:43:42:f9:f6:d3:36:98:28:0c:f6:a2:33:e0:78:9d:eb: cc:d7:5d:65:7f:25:52:82:c5:3d:20:3d:40:ae:fd:0a:91:59: 0a:80:4e:1f:8a:97:03:23:e2:e4:d3:ef:5c:99:f1:8a:aa:dd: 5a:ae:d7:92:f1:9a:d2:fe:61:00:e5:fe:07:52:de:4e:7c:0f: 97:42:38:06:aa:73:0a:34:22:a6:e7:a5:36:b5:54:49:08:be: 79:1e:58:fb:7f:5d:21:0d:ec:3e:c9:86:d7:c6:dc:e5:4f:2e: 85:4d:0d:c2:bf:41:bd:ac:d7:74:0e:d6:1e:ab:e9:46:ff:32: b0:16:e6:58:23:fd:6e:7a:fd:49:0f:1a:08:27:85:4f:08:08: 7f:cc:22:eb:8a:f9:d8:4b:88:72:fa:6a:fd:fc:9d:74:f4:dc: e7:b9:e4:b6:4a:3d:e9:e9:30:5f:d7:ad:d5:66:a7:4a:b0:ea: 48:cd:71:5f:cf:77:55:a0:fd:e4:c6:f7:2a:fb:97:5e:c4:2f: 0c:30:f0:7d:08:c5:1f:25:df:75:3e:b0:27:1c:50:3e:72:29: 6b:01:23:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBuj/OEHt9QS6ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Y2Y0ZGRlYTgtMTI2Ni00ZmE5LWE1YjYtZjhkYmJkNmE5MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aeg6VnHNhuKKYrJvxNceOb+paXO00rcuFQw jMjMfvaWa/lkPA7ehYf/Lo5u9EDD+vHB4Qa5FZxLwCB8pCetjOh6qTbwNT9taOXp q6HnqOSII/EoJOdJzignAAcQKjWjlfsHGxxbPr16tToT5FKiRE+YjYlvWZNywhCD iJVIyp+k0uslISb6JXVcprAeJGE61U9GsOnKQ6QoFRczfdIjyPGOmBjmV4RGv208 PYa5W8CpRjIrEPkpOOs2F8VOUNFZfO6MeBKuSGabtdBjucg7xfogHJV3WQvOvF9A rNxU+55EORmDDlFLBBokOrEi1bRspK7+cjh+5Vp//M3e8H7+GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoBLZrZ5EZP18GPnCgKuw8xWaqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZDZiNTBkYTEtZjAwYy0z OGUxLTkyYzQtYjk3YTRhODBmMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhuwlJGRgQgDQfm8d3h25QvW8ViQwv8V6sk1XAlguwww9M6c9KhQ0L5 9tM2mCgM9qIz4Hid68zXXWV/JVKCxT0gPUCu/QqRWQqATh+KlwMj4uTT71yZ8Yqq 3Vqu15LxmtL+YQDl/gdS3k58D5dCOAaqcwo0IqbnpTa1VEkIvnkeWPt/XSEN7D7J htfG3OVPLoVNDcK/Qb2s13QO1h6r6Ub/MrAW5lgj/W56/UkPGggnhU8ICH/MIuuK +dhLiHL6av38nXT03Oe55LZKPenpMF/XrdVmp0qw6kjNcV/Pd1Wg/eTG9yr7l17E Lwww8H0IxR8l33U+sCccUD5yKWsBI8c= -----END CERTIFICATE-----Generated at Wed May 13 06:20:26 2026 by rpki-client