$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa File: f411f7e3-a030-33c6-a8e2-d381a9731d20.roa (raw, json) Hash identifier: ftgt0odkxCgNfYqnfHgDWihVDWb+jgK6342osQoEKxw= Subject key identifier: 94:46:23:52:8F:19:42:84:D9:7C:8F:21:A9:E4:46:4E:0F:75:87:82 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D9E501B5114270074475AAC80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 4213 IP address blocks: 74.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1b:51:14:27:00:74:47:5a:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=fed9bb56-9493-4235-bd46-70ce0e4f984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:33:9a:bf:d1:ab:f5:41:f3:9e:e2:9b:a1: c5:82:45:82:8a:7c:bf:7e:51:f2:41:78:f5:94:04: c2:3a:fc:92:90:79:51:8d:e2:a6:7b:53:e9:7f:66: ae:cf:66:a0:ff:37:c8:ed:d7:44:93:f4:ec:32:ab: 8c:44:f0:18:ad:7f:b9:d6:29:ba:ac:3d:d1:4b:c7: f2:e5:78:e5:54:1f:0d:ff:c9:ef:3d:c8:e1:22:db: 14:6e:98:d3:0c:7e:e3:b7:e1:82:be:37:ab:d6:56: 83:b6:ad:e8:a8:0f:e2:6e:b5:b5:f3:e3:2e:87:65: 10:01:4e:a1:30:e9:d3:55:3e:3b:ab:4b:49:d8:f3: 55:25:9d:88:4c:ad:71:26:dc:ed:42:8f:31:8c:21: 1f:40:cf:c6:dc:e3:b8:14:58:2a:f9:77:da:28:76: de:4d:0e:10:9e:a3:5b:65:a6:97:d1:0d:64:3c:c9: 71:7f:95:91:44:90:e7:d2:d9:da:c8:70:f2:64:4b: 33:41:07:bc:9d:0b:31:66:97:f9:9c:c9:58:14:6a: 4a:07:bd:ef:5d:af:4e:2e:8a:ee:e1:f5:d4:a8:55: 9c:ce:bd:6d:c3:df:08:df:64:de:ab:82:f0:ca:48: 5c:a8:f0:3c:ad:30:a6:df:f6:da:a3:ab:8a:bd:7d: 07:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:23:52:8F:19:42:84:D9:7C:8F:21:A9:E4:46:4E:0F:75:87:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:04:f3:32:00:7b:fb:c2:e1:1f:49:12:2d:9c:94:72:0b:72: 0d:cd:68:5d:03:67:de:89:90:26:83:bc:c0:e5:dd:2e:0a:8f: 37:dc:96:55:79:59:05:af:79:1a:86:9f:5f:43:f5:5e:4a:b1: 3a:4b:34:ef:9d:3e:8f:ee:47:61:32:38:e4:9a:f7:40:ce:a8: ac:95:36:93:b1:70:4a:87:55:d8:ce:3b:2a:36:4a:78:78:5c: 30:62:df:65:c6:6d:48:c9:5f:fc:38:0b:3d:71:af:22:c8:62: 78:c9:8a:e2:f3:dc:d3:dd:a1:0e:f0:3f:61:63:ca:b1:48:93: bb:a4:7c:38:a0:2c:02:87:3a:43:0f:dc:ef:34:33:73:98:5c: 4f:ef:c7:0c:c9:a4:7c:86:33:8c:12:18:73:01:d2:91:44:54: 58:58:21:cd:52:07:86:bb:49:c1:2f:10:7f:25:01:12:72:58: 01:3e:18:82:54:7d:6b:1f:10:c5:e6:1d:43:6c:71:4b:df:17: 11:60:2d:82:9b:fa:d3:2b:41:34:80:9e:05:bf:74:d2:db:ee: 64:e2:51:52:5c:98:47:32:8c:ea:72:4c:4b:9a:42:37:e9:af: d7:dc:85:45:d4:bf:cb:f2:1a:77:7b:86:ed:ce:07:a2:bb:93: 21:2c:5b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBtRFCcAdEdarIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmVkOWJiNTYtOTQ5My00MjM1LWJkNDYtNzBjZTBlNGY5ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIQzmr/Rq/VB857im6HFgkWCiny/flHyQXj1 lATCOvySkHlRjeKme1Ppf2auz2ag/zfI7ddEk/TsMquMRPAYrX+51im6rD3RS8fy 5XjlVB8N/8nvPcjhItsUbpjTDH7jt+GCvjer1laDtq3oqA/ibrW18+Muh2UQAU6h MOnTVT47q0tJ2PNVJZ2ITK1xJtztQo8xjCEfQM/G3OO4FFgq+XfaKHbeTQ4QnqNb ZaaX0Q1kPMlxf5WRRJDn0tnayHDyZEszQQe8nQsxZpf5nMlYFGpKB73vXa9OLoru 4fXUqFWczr1tw98I32Teq4LwykhcqPA8rTCm3/bao6uKvX0HfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRGI1KPGUKE2XyPIankRk4PdYeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjQxMWY3ZTMtYTAzMC0z M2M2LWE4ZTItZDM4MWE5NzMxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4E8zIAe/vC4R9JEi2clHILcg3NaF0DZ96JkCaDvMDl3S4KjzfcllV5 WQWveRqGn19D9V5KsTpLNO+dPo/uR2EyOOSa90DOqKyVNpOxcEqHVdjOOyo2Snh4 XDBi32XGbUjJX/w4Cz1xryLIYnjJiuLz3NPdoQ7wP2FjyrFIk7ukfDigLAKHOkMP 3O80M3OYXE/vxwzJpHyGM4wSGHMB0pFEVFhYIc1SB4a7ScEvEH8lARJyWAE+GIJU fWsfEMXmHUNscUvfFxFgLYKb+tMrQTSAngW/dNLb7mTiUVJcmEcyjOpyTEuaQjfp r9fchUXUv8vyGnd7hu3OB6K7kyEsW8U= -----END CERTIFICATE-----Generated at Wed May 13 04:30:32 2026 by rpki-client