$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa File: bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa (raw, json) Hash identifier: qtK96tCqaeho8HwMGJhszRaeyifj5WiR0NAH7D6n19A= Subject key identifier: 58:67:70:B8:D1:D4:D8:43:24:D8:A1:D3:FE:C5:89:DC:0E:2D:60:72 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584DC565C1A5BF8465FA47B4C680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 21949 IP address blocks: 167.254.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:c1:a5:bf:84:65:fa:47:b4:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=a31a4d25-f266-44b8-8cc5-30911ab0ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:c0:c4:2e:23:6d:3a:21:d1:f5:7e:ad:c3: 3d:44:a9:01:5a:fd:dc:a3:27:68:7c:63:b1:ca:1d: ad:ca:93:33:8e:ac:f4:23:5b:ae:a7:46:12:e5:02: ec:4e:75:53:77:f1:84:b2:78:cc:d6:4a:38:e7:2d: c6:cd:2b:8f:72:07:d2:c8:6d:a8:25:ab:0f:38:51: 54:28:96:a3:02:6d:47:26:e1:4c:3a:87:3f:13:a5: fb:e7:2e:4c:d6:07:7a:cd:74:39:9a:f5:89:ee:04: 69:09:08:22:cd:44:3d:22:c3:ac:f9:c7:87:f7:9e: fb:77:f5:88:cd:11:9f:aa:8a:73:5f:22:a0:0d:f9: b9:5e:25:8b:8e:65:3f:65:19:27:60:5e:d1:de:9a: da:75:0b:57:e5:e1:92:7d:04:07:16:e9:d8:e8:ed: 9b:c9:5b:74:ec:2d:16:b7:26:fd:9f:03:bf:d6:9c: 36:af:29:e2:71:aa:a3:b0:63:db:2a:59:1c:6b:39: fc:15:34:bc:b5:45:cd:23:ff:f0:b8:12:3f:f6:7a: ee:f8:11:f7:b6:5e:15:6d:75:0c:94:4e:40:bd:26: 14:c8:f7:6a:f7:86:f1:9f:a2:ed:6e:fe:58:dc:e0: 1f:36:38:09:1f:94:06:1e:72:c4:9a:13:c3:57:83: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:67:70:B8:D1:D4:D8:43:24:D8:A1:D3:FE:C5:89:DC:0E:2D:60:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/bdc3f3bf-11b9-36cd-9fc9-813d5cd26786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 167.254.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b3:cd:24:b1:5c:e8:21:18:15:41:e4:c9:98:2d:3a:29:a7: 0f:b1:eb:22:3f:10:6f:de:11:52:09:58:fb:55:f5:b7:2d:9e: c6:15:8c:51:ff:7c:96:3b:1a:3e:f0:c1:2c:78:91:b3:74:f6: b6:60:88:d1:9b:90:db:92:65:42:d0:da:51:2f:b1:f7:cb:ff: fb:d5:a9:0f:10:6e:be:d3:49:70:e0:30:38:0d:76:f7:2c:96: 21:bd:b7:8f:d5:a2:e4:c3:70:29:6a:af:01:97:65:ed:c2:9f: f9:39:0e:61:b7:4e:69:47:4b:f2:d7:cc:6d:02:a1:87:ba:af: 2d:71:02:84:ca:5e:fd:42:11:25:ee:03:03:a0:ae:b9:03:3d: af:ab:1e:b3:03:ab:cf:b8:09:32:d7:79:f8:b8:8b:e7:e7:56: c8:da:fa:17:a6:29:c6:98:7f:78:80:bf:72:23:fd:3f:90:dc: e2:59:d8:f9:61:ba:49:c7:b6:ca:94:0d:9a:24:a7:06:90:dc: 82:15:43:9a:f8:e7:01:79:a0:c6:48:6d:54:63:4f:e6:de:64: e2:5a:f4:4d:b2:f7:47:44:d3:46:a4:91:07:2a:03:11:ee:b0: 8b:c1:67:2f:9b:3a:53:bb:2e:f4:4c:48:0b:e6:7c:65:ee:0d: 72:f6:c0:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcGlv4Rl+ke0xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk YTMxYTRkMjUtZjI2Ni00NGI4LThjYzUtMzA5MTFhYjBmZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6nAxC4jbToh0fV+rcM9RKkBWv3coydofGOx yh2typMzjqz0I1uup0YS5QLsTnVTd/GEsnjM1ko45y3GzSuPcgfSyG2oJasPOFFU KJajAm1HJuFMOoc/E6X75y5M1gd6zXQ5mvWJ7gRpCQgizUQ9IsOs+ceH9577d/WI zRGfqopzXyKgDfm5XiWLjmU/ZRknYF7R3pradQtX5eGSfQQHFunY6O2byVt07C0W tyb9nwO/1pw2rynicaqjsGPbKlkcazn8FTS8tUXNI//wuBI/9nru+BH3tl4VbXUM lE5AvSYUyPdq94bxn6Ltbv5Y3OAfNjgJH5QGHnLEmhPDV4N+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhncLjR1NhDJNih0/7FidwOLWByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYmRjM2YzYmYtMTFiOS0z NmNkLTlmYzktODEzZDVjZDI2Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp/6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmzzSSxXOghGBVB5MmYLToppw+x6yI/EG/eEVIJWPtV9bctnsYVjFH/ fJY7Gj7wwSx4kbN09rZgiNGbkNuSZULQ2lEvsffL//vVqQ8Qbr7TSXDgMDgNdvcs liG9t4/VouTDcClqrwGXZe3Cn/k5DmG3TmlHS/LXzG0CoYe6ry1xAoTKXv1CESXu AwOgrrkDPa+rHrMDq8+4CTLXefi4i+fnVsja+hemKcaYf3iAv3Ij/T+Q3OJZ2Plh uknHtsqUDZokpwaQ3IIVQ5r45wF5oMZIbVRjT+beZOJa9E2y90dE00akkQcqAxHu sIvBZy+bOlO7LvRMSAvmfGXuDXL2wOk= -----END CERTIFICATE-----Generated at Wed May 13 08:13:50 2026 by rpki-client