$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa File: bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa (raw, json) Hash identifier: ghy4igHtMxBzeG0J9zIZ7GQJETKTC5APfxqVOTRChMQ= Subject key identifier: 00:BA:64:4F:F3:EB:FB:8C:61:1A:DE:AF:64:33:06:44:1A:5A:DB:0F Certificate issuer: /CN=c1195660-b269-4bf9-a104-54a76ebf3546 Certificate serial: 010D0C9F4328584DADAAD66C80BA58E291160A50 Authority key identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 66.71.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d6:6c:80:ba:58:e2:91:16:0a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1195660-b269-4bf9-a104-54a76ebf3546 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=9fcc5a07-76b6-4b2d-bd6c-115729a2e376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:f4:51:be:ca:95:1d:e4:a0:91:7b:53:a8: e5:5d:57:56:cb:88:4c:6f:8c:74:2f:c1:ab:a3:ac: d8:15:60:46:24:bb:ed:83:0e:0c:1b:2d:49:b9:2b: a3:b2:a2:d3:db:31:c9:77:f4:ea:22:86:05:db:49: cf:40:ac:28:bd:05:b0:b4:d1:7c:14:5c:05:fd:e4: 00:23:29:12:f6:f3:4c:d2:4f:9d:6c:02:07:8d:ce: 23:c2:77:45:1b:3b:f4:90:65:8f:0f:ca:9f:fc:91: 46:be:f6:03:12:61:cb:63:0e:68:90:51:f6:e3:c0: 72:0d:53:42:46:99:0d:b3:f4:c2:5d:a6:f1:45:57: bc:0b:be:54:29:b3:e7:91:96:7a:04:70:7b:8e:1b: c0:1f:4c:63:ef:01:53:b6:7b:a2:a3:d5:e2:a6:96: d1:05:61:fd:8b:85:6d:12:92:5a:3b:3b:5e:a2:fc: c6:60:ba:5f:16:6f:07:ef:88:8a:c5:db:e1:24:12: 36:d7:5b:56:4e:5f:ea:61:c7:7c:b5:55:8f:25:d9: ca:d8:3f:84:44:8f:99:f9:be:08:83:58:4b:ae:c2: fb:e5:d4:f2:47:f2:37:60:6c:c1:9e:ec:a4:64:1d: 48:0f:0d:01:b5:4c:38:72:b7:30:8a:17:1d:77:d0: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BA:64:4F:F3:EB:FB:8C:61:1A:DE:AF:64:33:06:44:1A:5A:DB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl X509v3 Authority Key Identifier: keyid:50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer sbgp-ipAddrBlock: critical IPv4: 66.71.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:53:2b:01:84:0e:42:7a:23:7b:4a:d3:4c:8b:e7:34:6c:0c: 84:8f:cd:88:ed:71:7f:42:4a:09:a1:83:42:da:5d:90:45:71: 6d:48:21:ad:18:44:c7:4d:c6:32:55:f5:3e:13:48:0e:11:20: 73:fb:25:e3:0d:73:4d:36:08:c7:4f:f4:91:5e:10:26:8d:0e: 3d:f7:08:e0:a6:bf:1a:cf:6c:37:2a:6c:99:dc:c5:be:ee:4d: b5:f3:4b:6c:38:0e:53:f5:e7:b7:9d:a8:58:3a:45:40:dd:5a: dc:e1:84:a6:80:8d:60:d2:42:5b:e1:5b:79:d5:f5:01:b2:ca: c0:f0:59:78:25:dc:92:53:fb:86:cf:4b:b5:96:2d:42:47:d2: e6:59:63:40:90:62:01:43:9e:15:43:ca:27:a2:dd:e7:99:4f: d4:e3:8f:b9:5f:de:fc:09:92:f9:eb:c5:73:37:d2:25:3c:ec: 69:5c:5a:d6:f0:a2:c1:6a:56:bc:f0:ff:cc:6a:6b:3b:e9:69: c6:42:a8:08:87:0e:03:e3:fd:2a:f9:43:17:87:3b:f3:fd:e5: 6e:5d:d4:0c:60:72:85:c4:33:b7:2d:09:72:56:7b:ba:4a:72: da:fb:f1:51:d2:7b:d6:b8:e6:4f:1d:1e:9a:2d:77:b4:f0:ee: 22:77:73:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtZsgLpY4pEWClAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzExOTU2NjAtYjI2OS00YmY5LWExMDQtNTRhNzZlYmYz NTQ2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk OWZjYzVhMDctNzZiNi00YjJkLWJkNmMtMTE1NzI5YTJlMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0L0Ub7KlR3koJF7U6jlXVdWy4hMb4x0L8Gr o6zYFWBGJLvtgw4MGy1JuSujsqLT2zHJd/TqIoYF20nPQKwovQWwtNF8FFwF/eQA IykS9vNM0k+dbAIHjc4jwndFGzv0kGWPD8qf/JFGvvYDEmHLYw5okFH248ByDVNC RpkNs/TCXabxRVe8C75UKbPnkZZ6BHB7jhvAH0xj7wFTtnuio9XippbRBWH9i4Vt EpJaOzteovzGYLpfFm8H74iKxdvhJBI211tWTl/qYcd8tVWPJdnK2D+ERI+Z+b4I g1hLrsL75dTyR/I3YGzBnuykZB1IDw0BtUw4crcwihcdd9AmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC6ZE/z6/uMYRrer2QzBkQaWtsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5 NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmViZjM1NDYvYmZhOWUxZTItYjIwZS0z ZGIzLWExN2QtZTVjNDk0YjA4ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzExOTU2NjAtYjI2OS00YmY5LWEx MDQtNTRhNzZlYmYzNTQ2L2MxMTk1NjYwLWIyNjktNGJmOS1hMTA0LTU0YTc2ZWJm MzU0Ni5jcmwwHwYDVR0jBBgwFoAUUC23UAbI7dxt9h2UyHbML/SpZLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3 NmViZjM1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQkfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZTKwGEDkJ6I3tK00yL5zRsDISPzYjtcX9CSgmhg0LaXZBFcW1IIa0Y RMdNxjJV9T4TSA4RIHP7JeMNc002CMdP9JFeECaNDj33COCmvxrPbDcqbJncxb7u TbXzS2w4DlP157edqFg6RUDdWtzhhKaAjWDSQlvhW3nV9QGyysDwWXgl3JJT+4bP S7WWLUJH0uZZY0CQYgFDnhVDyiei3eeZT9Tjj7lf3vwJkvnrxXM30iU87GlcWtbw osFqVrzw/8xqazvpacZCqAiHDgPj/Sr5QxeHO/P95W5d1AxgcoXEM7ctCXJWe7pK ctr78VHSe9a45k8dHpotd7Tw7iJ3c5A= -----END CERTIFICATE-----Generated at Wed May 13 00:37:20 2026 by rpki-client