$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa File: bf1bc49a-0d53-3332-893b-589cda28cf4e.roa (raw, json) Hash identifier: M36yNeeCILKpc5oxESxbhVI5CuZumrCQm/3vKEzZ3b4= Subject key identifier: 51:7B:19:7E:90:B3:CD:E7:CD:FA:E2:86:2C:3A:19:C2:6B:02:97:8C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D0D42694F7D18535434B17300 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 13536 IP address blocks: 68.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:69:4f:7d:18:53:54:34:b1:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=88df8062-4078-4ab4-8235-13004efbcfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:a2:2b:6d:65:25:38:6e:f5:e5:76:70:49: 3c:70:ef:a8:81:50:f7:dc:1d:39:f4:b0:ec:1e:d2: 4c:e2:db:d3:7e:d6:da:af:40:cc:c3:ba:8c:cd:4b: 20:66:c9:c4:ac:86:ff:72:e7:31:d7:57:14:23:f9: d5:70:15:0c:ae:ab:51:05:92:36:76:83:e2:24:94: ef:77:24:8e:b3:8b:bf:36:67:9f:0d:d9:1e:4d:0f: 0b:5c:1b:82:01:82:2b:4f:20:6f:05:9e:3d:54:ca: 11:2b:a1:42:46:08:db:87:86:3c:9c:53:37:ad:98: ed:de:ba:18:63:6f:6c:f7:96:07:bd:d8:33:da:d4: 8b:9e:03:60:1c:d7:1c:e8:49:44:80:22:7d:c4:5c: 30:1c:4c:1e:c7:ca:ff:08:21:fb:82:05:f0:7b:98: 8d:67:2b:db:67:0d:9c:e5:84:ec:f8:3b:cc:f5:3f: f2:a9:6f:f2:15:d9:e2:77:35:93:92:59:41:0b:ad: 9d:9f:72:1b:4c:2f:a4:61:a2:61:89:df:bb:d5:90: 2b:fc:3a:68:55:48:c7:61:52:14:82:b6:2f:a7:e3: eb:99:95:8f:1a:78:19:d4:04:d1:31:e5:bd:c2:57: 46:2a:f8:07:f1:38:ed:68:a6:e4:4b:0f:0f:a1:1f: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:19:7E:90:B3:CD:E7:CD:FA:E2:86:2C:3A:19:C2:6B:02:97:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 68.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ed:14:d5:95:65:ca:2f:3a:b3:b3:5f:a2:f2:f1:1e:0e:1e: d7:e6:f4:e7:2d:60:b4:2e:40:fe:84:a3:99:c3:8e:b5:25:ea: 33:9a:03:1f:db:8b:21:e2:5c:73:b7:91:30:3a:ca:eb:ec:c9: cd:83:75:93:59:40:cd:5e:d1:0f:7c:ba:2e:c3:5c:c9:79:54: 6a:ed:ae:8d:2c:57:16:3a:ff:45:65:09:ce:16:3a:e1:3a:f2: 11:9a:08:17:3d:3a:30:8e:54:62:10:4a:dc:80:e4:e0:c0:7c: c9:eb:7c:92:89:bd:66:56:c2:6c:f0:3e:3c:bb:c3:8a:a2:68: 34:af:2c:a1:af:a4:2e:ff:13:05:f7:aa:9f:8c:2d:e2:6a:b8: d7:73:42:64:51:ab:e2:ce:cc:31:71:bd:c3:15:90:2a:85:b3: 8c:a9:41:2b:3d:d6:53:06:7d:fe:9e:9d:9c:86:9f:f4:a6:9a: e3:46:ed:57:31:69:e6:3d:29:50:d3:d7:08:a3:af:8c:40:53: 70:f6:31:38:19:a4:75:a3:3b:67:c4:c6:eb:06:a6:b4:03:be: a9:c2:b2:2e:88:6c:b9:1b:9a:d6:13:ce:9e:72:a3:bf:4c:d9: 52:f5:2c:75:75:7d:a1:43:36:f3:f4:a3:e4:9b:4f:b1:2f:39: fd:ac:e6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmlPfRhTVDSxcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ODhkZjgwNjItNDA3OC00YWI0LTgyMzUtMTMwMDRlZmJjZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHmiK21lJThu9eV2cEk8cO+ogVD33B059LDs HtJM4tvTftbar0DMw7qMzUsgZsnErIb/cucx11cUI/nVcBUMrqtRBZI2doPiJJTv dySOs4u/NmefDdkeTQ8LXBuCAYIrTyBvBZ49VMoRK6FCRgjbh4Y8nFM3rZjt3roY Y29s95YHvdgz2tSLngNgHNcc6ElEgCJ9xFwwHEwex8r/CCH7ggXwe5iNZyvbZw2c 5YTs+DvM9T/yqW/yFdnidzWTkllBC62dn3IbTC+kYaJhid+71ZAr/DpoVUjHYVIU grYvp+PrmZWPGngZ1ATRMeW9wldGKvgH8TjtaKbkSw8PoR/s9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF7GX6Qs83nzfrihiw6GcJrApeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYmYxYmM0OWEtMGQ1My0z MzMyLTg5M2ItNTg5Y2RhMjhjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrtFNWVZcovOrOzX6Ly8R4OHtfm9OctYLQuQP6Eo5nDjrUl6jOaAx/b iyHiXHO3kTA6yuvsyc2DdZNZQM1e0Q98ui7DXMl5VGrtro0sVxY6/0VlCc4WOuE6 8hGaCBc9OjCOVGIQStyA5ODAfMnrfJKJvWZWwmzwPjy7w4qiaDSvLKGvpC7/EwX3 qp+MLeJquNdzQmRRq+LOzDFxvcMVkCqFs4ypQSs91lMGff6enZyGn/SmmuNG7Vcx aeY9KVDT1wijr4xAU3D2MTgZpHWjO2fExusGprQDvqnCsi6IbLkbmtYTzp5yo79M 2VL1LHV1faFDNvP0o+SbT7EvOf2s5rs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:35 2026 by rpki-client