$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa File: 0bf8b83b-53a3-3a18-9359-38a07be7967b.roa (raw, json) Hash identifier: JDx734rBNGQrS7PKBMFj5D+4SaPmlhegRiq0Gnb3zkI= Subject key identifier: 12:BC:6E:D1:1D:3D:80:4D:77:5D:B8:CD:FD:3D:62:05:05:5B:61:08 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584D9CEAAEABE8A6BD733046EC80 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa Signing time: Fri 24 Apr 2026 13:00:31 +0000 ROA not before: Fri 24 Apr 2026 13:00:31 +0000 ROA not after: Thu 23 Jul 2026 13:00:31 +0000 asID: 394708 IP address blocks: 199.38.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:ea:ae:ab:e8:a6:bd:73:30:46:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Apr 24 13:00:31 2026 GMT Not After : Jul 23 13:00:31 2026 GMT Subject: CN=e6a9b8f2-b926-4ecb-a48a-a28928234adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:e1:7a:d7:f7:a6:af:c0:74:17:3b:f8:34: 85:f6:f0:40:40:55:34:a4:81:37:48:6e:9e:e0:7e: e0:a4:8b:5d:9b:d6:47:10:4a:a0:6e:8c:bc:05:05: 16:5d:99:9f:17:4a:25:dd:54:98:cb:e4:96:32:53: 46:49:5a:f8:d1:23:c8:74:2a:cc:0c:e7:2e:27:cc: da:8d:de:2e:84:07:26:1a:ef:90:b1:70:19:fb:51: 15:9d:a1:80:45:b1:92:fb:c5:ea:83:d6:12:01:4d: a0:ef:05:8c:3a:33:a1:69:02:9a:1a:dc:5f:db:73: f9:05:16:9a:c7:5e:b6:f6:ca:6d:c0:bb:f4:15:30: a5:b0:35:ba:6e:d3:c6:f7:b9:b7:d7:f5:47:5c:a3: 05:8f:00:13:c3:a5:dd:31:ba:3f:2d:71:ce:70:d1: 0c:59:80:e4:a3:91:34:39:c9:8d:24:e1:60:b8:62: 25:47:db:9a:15:d7:91:2c:c0:43:ca:3a:8e:eb:54: 79:76:a3:8e:5a:fa:c8:eb:5a:25:9f:93:13:e7:18: 70:73:65:3f:c7:f6:90:ba:fd:8e:02:ae:0d:fc:da: a7:74:79:e0:8b:36:27:d3:0b:e2:54:f9:b6:02:31: 81:3f:4e:a3:16:2e:61:48:40:8d:20:a0:ec:aa:32: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BC:6E:D1:1D:3D:80:4D:77:5D:B8:CD:FD:3D:62:05:05:5B:61:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:28:35:cf:57:64:3f:2f:28:bd:12:cb:1a:1e:cb:eb:78:bb: 91:ff:3b:39:81:a2:63:54:8a:3e:8a:93:fc:5f:db:b5:bd:79: 38:eb:3f:fd:0f:62:81:3f:ee:1c:b0:5f:d3:3a:8e:6c:ae:6a: 6c:8d:cd:ad:9c:8e:74:e9:1f:c5:5b:cd:a9:19:07:92:b3:57: 4d:7e:a6:c8:ba:e9:10:3b:63:61:1a:77:10:ec:13:a8:3b:94: 81:d6:f1:d7:7f:08:f2:58:54:e8:2b:41:1d:4f:d5:65:35:5d: 48:f3:a1:8e:9c:fb:5b:34:bd:a0:9f:b6:07:d7:31:0b:91:aa: f5:22:c0:ce:e0:b9:21:2f:d1:3a:00:c3:6f:c5:27:0f:ff:c5: 2a:6d:81:30:f6:3d:e5:9e:4e:d9:5d:de:6c:1f:d4:e5:45:2e: be:59:5d:5a:98:c8:78:b8:3b:d6:d1:45:c0:93:ef:e9:9b:8e: b6:3b:63:a6:ef:34:c4:97:e9:2e:8f:34:cd:70:07:f7:69:5e: 28:55:e6:8a:49:ea:28:26:3e:54:f1:93:6d:db:5a:ea:42:26: 3c:dd:26:24:38:8e:70:91:23:ff:a7:b9:66:d5:19:3c:2b:d5: e0:44:7f:fa:41:17:84:3b:77:d1:a9:e5:b1:db:52:e2:b8:d9: 3d:1b:9a:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2c6q6r6Ka9czBG7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk ZTZhOWI4ZjItYjkyNi00ZWNiLWE0OGEtYTI4OTI4MjM0YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfhetf3pq/AdBc7+DSF9vBAQFU0pIE3SG6e 4H7gpItdm9ZHEEqgboy8BQUWXZmfF0ol3VSYy+SWMlNGSVr40SPIdCrMDOcuJ8za jd4uhAcmGu+QsXAZ+1EVnaGARbGS+8Xqg9YSAU2g7wWMOjOhaQKaGtxf23P5BRaa x1629sptwLv0FTClsDW6btPG97m31/VHXKMFjwATw6XdMbo/LXHOcNEMWYDko5E0 OcmNJOFguGIlR9uaFdeRLMBDyjqO61R5dqOOWvrI61oln5MT5xhwc2U/x/aQuv2O Aq4N/NqndHngizYn0wviVPm2AjGBP06jFi5hSECNIKDsqjKLFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK8btEdPYBNd124zf09YgUFW2EIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMGJmOGI4M2ItNTNhMy0z YTE4LTkzNTktMzhhMDdiZTc5NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIoNc9XZD8vKL0Syxoey+t4u5H/OzmBomNUij6Kk/xf27W9eTjrP/0P YoE/7hywX9M6jmyuamyNza2cjnTpH8VbzakZB5KzV01+psi66RA7Y2EadxDsE6g7 lIHW8dd/CPJYVOgrQR1P1WU1XUjzoY6c+1s0vaCftgfXMQuRqvUiwM7guSEv0ToA w2/FJw//xSptgTD2PeWeTtld3mwf1OVFLr5ZXVqYyHi4O9bRRcCT7+mbjrY7Y6bv NMSX6S6PNM1wB/dpXihV5opJ6igmPlTxk23bWupCJjzdJiQ4jnCRI/+nuWbVGTwr 1eBEf/pBF4Q7d9Gp5bHbUuK42T0bmuM= -----END CERTIFICATE-----Generated at Wed May 13 03:49:38 2026 by rpki-client