$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5cf71617-5356-312a-8677-43dbf302c838.roa File: 5cf71617-5356-312a-8677-43dbf302c838.roa (raw, json) Hash identifier: 72p+So0KbZGl8lGJ9tD2cdAKnuqhZ8qQ4d/KJVHUmk8= Subject key identifier: F7:69:D3:97:DF:F4:2F:42:B2:56:CE:DA:2F:59:32:7E:F2:FF:EB:B2 Certificate issuer: /CN=bf895287-fee6-4682-8ac4-732f64947fe4 Certificate serial: 010D0C9F4328584D95C0B3F52D58C5FC87711680 Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5cf71617-5356-312a-8677-43dbf302c838.roa Signing time: Tue 21 Apr 2026 23:25:17 +0000 ROA not before: Tue 21 Apr 2026 23:25:17 +0000 ROA not after: Mon 20 Jul 2026 23:25:17 +0000 asID: 20295 IP address blocks: 208.98.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:c0:b3:f5:2d:58:c5:fc:87:71:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Validity Not Before: Apr 21 23:25:17 2026 GMT Not After : Jul 20 23:25:17 2026 GMT Subject: CN=6a530904-2bf8-479d-a88f-8c8b04993843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:55:38:6b:24:7d:98:15:bd:0f:63:54:52: 91:c4:32:17:7a:ed:43:fc:9b:d5:91:0f:b0:81:37: f3:10:0b:ea:4d:74:69:94:3e:8a:87:34:df:a5:96: 7f:61:93:a0:1e:2d:37:c3:fd:8b:5c:0a:1d:6f:df: fa:64:86:2e:f3:52:8d:40:97:7c:76:9a:fd:12:d4: 6e:90:72:b0:71:aa:5f:aa:4e:c8:50:96:d1:a1:49: 74:4f:64:c9:81:e2:c1:33:9f:b5:50:0f:44:a9:13: 66:7c:23:9d:52:44:e0:cd:4d:e3:7a:70:46:73:2c: 37:30:2d:34:18:1d:7f:09:3b:9a:3c:80:6e:af:2b: 38:94:dc:b3:00:ee:ab:b5:ce:ad:26:ec:e2:53:76: 5c:52:28:d0:b6:68:e9:33:51:e1:cc:e1:65:e3:76: 9b:37:2f:7f:95:bf:64:60:de:63:0b:f3:fe:16:02: 48:f9:3c:af:23:ec:37:a3:ca:43:1a:42:1f:b6:3e: fa:37:59:07:6a:7c:8c:54:6f:79:5b:0f:2c:f8:7a: 8a:4a:3b:f7:58:a7:bd:c0:a1:10:eb:7c:72:4a:4e: 72:6b:e2:29:c1:6b:31:85:54:26:16:02:ba:cd:a2: d9:e7:3e:6c:0e:fc:f6:fd:41:61:3f:ba:72:69:54: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:D3:97:DF:F4:2F:42:B2:56:CE:DA:2F:59:32:7E:F2:FF:EB:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5cf71617-5356-312a-8677-43dbf302c838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl X509v3 Authority Key Identifier: keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer sbgp-ipAddrBlock: critical IPv4: 208.98.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b7:3a:4d:55:97:64:44:25:2c:34:10:af:63:0e:81:02:f7: 0a:f5:ec:67:62:8c:8d:e2:d2:34:3e:f9:c1:49:cc:0d:3e:52: e8:f7:73:bc:e5:75:2e:5a:04:c1:f7:34:39:e8:c5:c0:a8:be: 8f:4a:55:f5:f1:47:7e:1b:5d:ae:9e:69:86:e2:87:ae:83:69: 25:76:c5:b9:e4:8f:de:f1:09:f2:b2:07:e8:93:b3:63:82:bd: 8a:44:07:a8:6b:14:90:b9:54:9a:54:fd:1b:85:e6:5b:64:6d: cd:68:07:2b:2e:80:a2:63:a1:ed:52:18:ea:71:1d:06:7f:1e: 65:22:30:48:e6:5c:b4:44:7c:5b:71:8a:cf:7b:83:d7:d0:59: fe:16:e4:3e:14:90:9a:59:31:f1:2e:b2:fc:79:b6:49:36:d8: be:bc:0b:6c:c0:ba:b3:d6:79:04:05:ca:eb:51:94:e0:b9:fa: 13:95:cf:ea:74:84:a8:21:8b:f4:db:5f:a3:73:4c:65:63:c3: e5:d7:d3:82:db:03:f2:eb:6f:df:51:11:5e:13:df:b0:2a:27: 14:69:67:95:d8:07:11:0b:a9:2b:54:af:f1:c4:7a:93:fe:46: c3:37:a0:00:3b:20:eb:b4:ff:1a:79:3a:80:df:40:9f:ad:87: 3e:89:ed:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VwLP1LVjF/IdxFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3 ZmU0MB4XDTI2MDQyMTIzMjUxN1oXDTI2MDcyMDIzMjUxN1owLzEtMCsGA1UEAxMk NmE1MzA5MDQtMmJmOC00NzlkLWE4OGYtOGM4YjA0OTkzODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU5VOGskfZgVvQ9jVFKRxDIXeu1D/JvVkQ+w gTfzEAvqTXRplD6KhzTfpZZ/YZOgHi03w/2LXAodb9/6ZIYu81KNQJd8dpr9EtRu kHKwcapfqk7IUJbRoUl0T2TJgeLBM5+1UA9EqRNmfCOdUkTgzU3jenBGcyw3MC00 GB1/CTuaPIBurys4lNyzAO6rtc6tJuziU3ZcUijQtmjpM1HhzOFl43abNy9/lb9k YN5jC/P+FgJI+TyvI+w3o8pDGkIftj76N1kHanyMVG95Ww8s+HqKSjv3WKe9wKEQ 63xySk5ya+IpwWsxhVQmFgK6zaLZ5z5sDvz2/UFhP7pyaVSgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdp05ff9C9CslbO2i9ZMn7y/+uyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5 NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvNWNmNzE2MTctNTM1Ni0z MTJhLTg2NzctNDNkYmYzMDJjODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0 N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy3Ok1Vl2REJSw0EK9jDoEC9wr17GdijI3i0jQ++cFJzA0+Uuj3c7zl dS5aBMH3NDnoxcCovo9KVfXxR34bXa6eaYbih66DaSV2xbnkj97xCfKyB+iTs2OC vYpEB6hrFJC5VJpU/RuF5ltkbc1oBysugKJjoe1SGOpxHQZ/HmUiMEjmXLREfFtx is97g9fQWf4W5D4UkJpZMfEusvx5tkk22L68C2zAurPWeQQFyutRlOC5+hOVz+p0 hKghi/TbX6NzTGVjw+XX04LbA/Lrb99REV4T37AqJxRpZ5XYBxELqStUr/HEepP+ RsM3oAA7IOu0/xp5OoDfQJ+thz6J7UM= -----END CERTIFICATE-----Generated at Wed May 13 05:55:33 2026 by rpki-client