$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa File: bf501b39-cf10-3228-be24-2d4a79b1b202.roa (raw, json) Hash identifier: tgyh5k3ke/ye6ZX+ycdWLlg639PQyH3CYK2VJ6HXenM= Subject key identifier: 72:43:72:8E:60:45:CC:4A:7D:B9:D0:34:EF:02:CF:36:73:32:B7:5D Certificate issuer: /CN=02ad5a58-3adf-41cb-9598-b3260591398c Certificate serial: 010D0C9F4328584DCDC5A2F05B70DBA30C173E80 Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 12097 IP address blocks: 24.140.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:a2:f0:5b:70:db:a3:0c:17:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=28753fc2-9703-43c1-adce-ea36429ebdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:7e:bd:bc:31:6c:8d:29:aa:e8:68:1e:a4: 69:ec:0a:53:af:47:7e:82:65:9c:78:45:9c:6e:5d: bd:39:31:4d:2d:18:7b:15:bb:f4:95:dd:5c:cc:f6: 09:d2:02:00:89:4e:49:63:e6:33:a1:a5:65:7a:30: 58:38:7d:d7:6e:31:04:ac:68:a8:34:ea:a4:dd:43: 97:58:73:61:70:d9:a0:e9:da:ff:1d:49:06:ca:9e: 7e:d0:1c:d0:7f:9a:dd:f3:d8:3f:ed:b0:37:8b:76: 7c:b6:24:29:66:73:92:35:d9:68:ac:3b:e7:1e:02: 52:91:62:c2:ad:c4:10:68:78:66:52:f3:8f:60:1a: f9:e4:a2:fd:6e:d4:c2:24:76:a4:8c:73:2b:19:27: fa:93:df:3e:1f:83:b2:3b:37:5d:7c:9c:34:2b:cc: 01:6f:9c:56:f8:58:f3:42:24:32:48:05:06:7c:34: 71:05:bf:82:d1:ca:46:f5:82:b9:22:21:f7:67:65: 8b:ba:a2:15:e7:dd:c6:6f:9b:d1:34:42:24:5f:00: e1:57:21:cf:bb:1c:1e:63:6f:7c:57:25:ea:d2:d8: 03:24:8e:41:e6:ee:82:3c:79:4a:cc:7f:6f:f6:22: 94:bb:49:43:b4:fb:3b:ef:5c:73:c3:5f:7a:29:e5: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:43:72:8E:60:45:CC:4A:7D:B9:D0:34:EF:02:CF:36:73:32:B7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl X509v3 Authority Key Identifier: keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer sbgp-ipAddrBlock: critical IPv4: 24.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6c:6e:d2:e6:3d:81:fa:43:10:b9:6f:34:bd:ba:f5:d7:4c: bd:45:82:5b:60:1a:72:32:a3:86:9c:0d:92:03:a2:e9:03:85: 1a:c7:43:82:67:db:68:5d:49:44:75:56:bc:07:96:b4:94:71: 3f:1a:ab:d8:3a:89:5e:de:be:18:6f:df:ba:49:79:91:91:75: 6b:78:55:45:f7:ed:9e:e8:9b:be:fe:42:0c:77:8b:7e:c3:d0: 6e:a5:87:0c:9b:fc:fd:ca:e5:33:a6:a9:93:d9:cb:f8:c9:f8: aa:b5:35:97:bd:1e:bc:e1:9a:7e:23:66:8f:cb:de:df:d2:7e: 16:47:30:14:12:83:15:49:28:f8:38:95:48:9b:a9:75:3a:b5: 06:e5:c1:b2:73:17:81:49:95:b7:be:5c:cf:80:d8:ca:d4:3d: 0d:43:80:76:b4:2d:a9:7a:ba:61:08:02:dd:10:86:84:1f:de: f7:cb:0a:4d:20:aa:cb:a5:09:e3:c5:db:f0:be:66:58:fd:c8: e8:33:7d:9d:37:b9:74:db:ce:84:16:66:1f:1b:f3:33:fe:72: 90:62:8b:ff:1e:b2:ec:ad:bc:d8:da:1e:93:3d:b6:2d:ec:b1: ed:97:d7:86:81:70:56:de:dc:a5:e2:a1:d9:07:90:ae:34:3c: c5:0a:2f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxaLwW3DbowwXPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz OThjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk Mjg3NTNmYzItOTcwMy00M2MxLWFkY2UtZWEzNjQyOWViZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5h+vbwxbI0pquhoHqRp7ApTr0d+gmWceEWc bl29OTFNLRh7Fbv0ld1czPYJ0gIAiU5JY+YzoaVlejBYOH3XbjEErGioNOqk3UOX WHNhcNmg6dr/HUkGyp5+0BzQf5rd89g/7bA3i3Z8tiQpZnOSNdlorDvnHgJSkWLC rcQQaHhmUvOPYBr55KL9btTCJHakjHMrGSf6k98+H4OyOzddfJw0K8wBb5xW+Fjz QiQySAUGfDRxBb+C0cpG9YK5IiH3Z2WLuqIV593Gb5vRNEIkXwDhVyHPuxweY298 VyXq0tgDJI5B5u6CPHlKzH9v9iKUu0lDtPs771xzw196KeUkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJDco5gRcxKfbnQNO8CzzZzMrddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvYmY1MDFiMzktY2YxMC0z MjI4LWJlMjQtMmQ0YTc5YjFiMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1 OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2 MDU5MTM5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9sbtLmPYH6QxC5bzS9uvXXTL1FgltgGnIyo4acDZIDoukDhRrHQ4Jn 22hdSUR1VrwHlrSUcT8aq9g6iV7evhhv37pJeZGRdWt4VUX37Z7om77+Qgx3i37D 0G6lhwyb/P3K5TOmqZPZy/jJ+Kq1NZe9Hrzhmn4jZo/L3t/SfhZHMBQSgxVJKPg4 lUibqXU6tQblwbJzF4FJlbe+XM+A2MrUPQ1DgHa0Lal6umEIAt0QhoQf3vfLCk0g qsulCePF2/C+Zlj9yOgzfZ03uXTbzoQWZh8b8zP+cpBii/8esuytvNjaHpM9ti3s se2X14aBcFbe3KXiodkHkK40PMUKL6c= -----END CERTIFICATE-----Generated at Wed May 13 14:04:21 2026 by rpki-client