$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: NY5O65QgOwokR7ed3horL8VKtb5vx6gBRmOdJ/l2f6w= Subject key identifier: A6:CE:FD:22:61:C6:B6:0B:CE:B1:D7:77:E9:AB:B0:1E:E9:9C:E6:4D Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584DD0905350C17129034E354380 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:53:50:c1:71:29:03:4e:35:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=868566fb-3d58-40d1-bc4f-4e2415a182a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:6d:9c:79:74:75:ee:e4:83:92:d5:65:60: 86:d7:aa:2a:c1:91:da:ae:f5:24:df:48:32:17:cf: 98:a7:9e:62:ab:3f:5a:0d:74:6e:fe:1c:de:39:86: 6e:d2:ec:fe:64:8f:c3:f2:3f:6c:1e:c3:d6:90:ea: ca:11:ba:16:8f:2d:e7:fa:d6:e6:e8:c3:ae:5b:b5: f9:1f:a4:d6:ed:6d:03:4c:50:a6:c5:5d:eb:be:28: 72:14:7e:7c:fc:82:fd:a2:78:f5:ed:f1:32:a4:69: 13:cc:ea:44:b0:88:d7:ff:17:1d:48:e1:35:89:c9: c4:92:4d:08:18:1d:18:82:e0:e0:a9:3b:90:b1:ce: 5c:61:38:06:5d:19:3f:89:c4:ab:e0:0c:a8:b7:d9: ed:17:54:c7:8e:76:04:a3:76:d7:28:3b:96:56:c0: eb:c1:f6:fa:7f:a4:4a:29:8c:be:95:bb:41:a9:fa: 4f:fa:90:b2:4e:1b:fe:37:ff:51:70:72:97:e6:63: fb:46:ac:57:d7:17:49:4b:91:d0:63:4b:b3:87:25: 90:ed:74:6f:57:f0:44:27:7d:d6:77:20:62:95:b4: 17:d4:c2:d5:fe:ac:67:30:a7:2c:3b:7c:a1:a0:10: d5:8e:b2:0f:25:9b:06:4a:8a:43:60:20:5c:83:90: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CE:FD:22:61:C6:B6:0B:CE:B1:D7:77:E9:AB:B0:1E:E9:9C:E6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:80:06:cf:b9:b1:d9:af:4a:06:81:5f:84:84:3d:d5:d3:d4: 57:c6:37:e1:c4:4f:9f:73:81:c1:03:37:1e:6f:d9:35:7e:58: a6:b0:cb:02:7b:37:f2:b7:d9:ab:9b:61:6f:c7:8a:f6:79:30: e0:bf:3b:a9:cc:86:07:47:19:9e:f3:8e:a2:46:41:32:06:bc: 74:ae:0b:12:df:e5:67:ec:98:47:9e:62:03:1d:a4:98:c0:35: d2:65:01:ff:88:e8:f1:40:90:cb:f3:38:0f:35:04:dd:c4:77: c8:4f:87:68:88:83:47:16:3d:8e:06:dc:bd:f0:7b:1e:34:23: 37:53:f8:a8:00:56:bd:71:fb:9c:b2:58:c9:2b:73:f8:6c:98: 45:b7:33:4b:ee:8e:30:7d:41:cc:ac:c9:c0:bd:d7:7e:86:07: d5:82:2c:02:79:c5:4b:7d:11:80:cf:25:65:5a:2e:5f:fc:ed: e0:0b:2a:1c:40:36:73:2d:5c:62:85:14:27:fc:27:e7:90:d0: b8:ff:0b:ff:90:1e:e8:25:42:00:15:ff:ea:65:ec:18:e7:d1: 79:41:82:33:d0:14:7e:a8:f9:1b:83:11:77:49:1a:18:57:5c: 6a:72:75:16:da:a2:c2:44:49:09:d8:88:bb:15:79:d0:e2:df: d8:96:67:3b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE3QkFNQwXEpA041Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODY4NTY2ZmItM2Q1OC00MGQxLWJjNGYtNGUyNDE1YTE4MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQFtnHl0de7kg5LVZWCG16oqwZHarvUk30gy F8+Yp55iqz9aDXRu/hzeOYZu0uz+ZI/D8j9sHsPWkOrKEboWjy3n+tbm6MOuW7X5 H6TW7W0DTFCmxV3rvihyFH58/IL9onj17fEypGkTzOpEsIjX/xcdSOE1icnEkk0I GB0YguDgqTuQsc5cYTgGXRk/icSr4Ayot9ntF1THjnYEo3bXKDuWVsDrwfb6f6RK KYy+lbtBqfpP+pCyThv+N/9RcHKX5mP7RqxX1xdJS5HQY0uzhyWQ7XRvV/BEJ33W dyBilbQX1MLV/qxnMKcsO3yhoBDVjrIPJZsGSopDYCBcg5DETQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKbO/SJhxrYLzrHXd+mrsB7pnOZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFaABs+5sdmvSgaBX4SEPdXT1FfGN+HET59zgcED Nx5v2TV+WKawywJ7N/K32aubYW/HivZ5MOC/O6nMhgdHGZ7zjqJGQTIGvHSuCxLf 5WfsmEeeYgMdpJjANdJlAf+I6PFAkMvzOA81BN3Ed8hPh2iIg0cWPY4G3L3wex40 IzdT+KgAVr1x+5yyWMkrc/hsmEW3M0vujjB9QcysycC9136GB9WCLAJ5xUt9EYDP JWVaLl/87eALKhxANnMtXGKFFCf8J+eQ0Lj/C/+QHuglQgAV/+pl7Bjn0XlBgjPQ FH6o+RuDEXdJGhhXXGpydRbaosJESQnYiLsVedDi39iWZzs= -----END CERTIFICATE-----Generated at Wed May 13 19:10:11 2026 by rpki-client