$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa File: bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa (raw, json) Hash identifier: 0RnQZ3J/MHrrxepmXEO4EUo3H7ii6I44D44IuJnD+YU= Subject key identifier: BB:41:00:A1:4F:2D:75:29:E6:D5:28:81:B5:E5:07:93:F1:8C:6F:6F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DAAE04FE494EB2161EE2C2BC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 274155 IP address blocks: 216.28.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:4f:e4:94:eb:21:61:ee:2c:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=ff065717-ad34-4e1a-9e8d-83b5465e0816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:a7:17:30:b5:e4:cd:47:dd:42:6c:bf:de: 7a:7d:73:6d:58:04:2e:d0:48:99:22:10:8a:42:26: 5b:52:e0:30:0e:de:31:53:b7:4c:0b:14:73:88:13: 17:e8:68:08:f8:07:83:4a:7a:27:c1:80:8b:dd:03: 62:b4:0c:46:5c:01:90:b3:36:13:5d:c1:71:9d:f5: 4d:48:46:98:a8:61:ed:44:5e:c1:3d:2e:4d:ac:06: b4:bd:3f:08:e2:10:2c:87:12:86:b7:a2:ee:95:42: 53:de:dc:6d:ad:d7:99:26:a8:0c:cd:01:79:1f:2f: 1e:15:82:82:d7:4d:6a:27:b0:7e:4c:e8:54:5d:fd: 2e:36:e4:39:3a:2d:68:f6:73:1f:6f:c8:1f:14:6d: 87:6a:95:e2:8f:e7:f7:41:40:57:d0:78:00:38:17: 05:26:c2:c7:6a:bd:5c:3a:fb:9a:13:34:96:fb:6d: 1e:99:c4:fb:6c:02:ae:2b:73:04:da:64:d6:7d:cd: 1f:62:93:49:01:0a:5c:d4:9d:70:b5:03:53:8c:23: 90:e3:52:cd:66:ed:a3:09:96:40:5a:a7:71:10:0a: fa:ce:c8:c4:a1:02:d4:29:d3:3a:78:bf:ab:b6:3b: d2:49:93:b0:d6:0e:4d:f4:1c:3f:fb:e9:48:2f:e4: 50:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:41:00:A1:4F:2D:75:29:E6:D5:28:81:B5:E5:07:93:F1:8C:6F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ed:75:b5:7b:d5:20:4f:22:dd:fa:9c:63:c7:31:c6:8c:83: ce:71:7a:37:f5:b2:59:bc:16:a4:77:09:50:a0:b9:6d:3c:fc: 2d:93:03:d3:34:80:5f:fc:86:a7:7c:4a:21:81:aa:c2:31:35: 72:bc:e1:99:8e:17:a2:c3:35:23:be:5a:64:4c:d5:26:ec:09: fd:e1:d4:02:ab:f3:24:b6:5f:be:9e:b1:2a:fa:0a:f9:5b:7f: a9:bb:04:e6:29:43:9f:7e:b5:ac:54:95:23:c3:f8:a2:62:19: db:68:7d:84:5d:3a:4c:fe:47:a3:8e:c0:93:70:2a:2b:de:47: d3:1f:51:be:c0:3d:3f:4a:78:ae:52:37:c3:ad:93:f0:d9:e8: 97:d2:e6:d5:0f:cc:1e:96:17:8f:7f:87:0f:b9:d9:bf:ba:b4: 33:36:3c:c7:56:14:d8:2c:39:fc:ed:4e:34:70:e0:40:2b:8c: 56:21:7e:95:e9:7f:4d:21:3c:3c:74:7b:51:8f:8b:b7:aa:0d: 95:ec:3a:f7:f2:d1:62:6a:57:a5:b4:70:55:8e:32:50:7b:5d: 9e:8b:b9:8c:dc:5f:82:24:fc:2d:27:1a:27:cd:72:e9:48:db: dd:b1:73:ba:b2:31:75:85:2a:fc:ee:94:3a:d4:fe:71:08:9d: 86:97:0f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4E/klOshYe4sK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZmYwNjU3MTctYWQzNC00ZTFhLTllOGQtODNiNTQ2NWUwODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4SnFzC15M1H3UJsv956fXNtWAQu0EiZIhCK QiZbUuAwDt4xU7dMCxRziBMX6GgI+AeDSnonwYCL3QNitAxGXAGQszYTXcFxnfVN SEaYqGHtRF7BPS5NrAa0vT8I4hAshxKGt6LulUJT3txtrdeZJqgMzQF5Hy8eFYKC 101qJ7B+TOhUXf0uNuQ5Oi1o9nMfb8gfFG2HapXij+f3QUBX0HgAOBcFJsLHar1c OvuaEzSW+20emcT7bAKuK3ME2mTWfc0fYpNJAQpc1J1wtQNTjCOQ41LNZu2jCZZA WqdxEAr6zsjEoQLUKdM6eL+rtjvSSZOw1g5N9Bw/++lIL+RQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtBAKFPLXUp5tUogbXlB5PxjG9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmYzNGQ4MmQtNWMzMS0z OTA0LWJjMTctY2U5MDcwZGM2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3tdbV71SBPIt36nGPHMcaMg85xejf1slm8FqR3CVCguW08/C2TA9M0 gF/8hqd8SiGBqsIxNXK84ZmOF6LDNSO+WmRM1SbsCf3h1AKr8yS2X76esSr6Cvlb f6m7BOYpQ59+taxUlSPD+KJiGdtofYRdOkz+R6OOwJNwKiveR9MfUb7APT9KeK5S N8Otk/DZ6JfS5tUPzB6WF49/hw+52b+6tDM2PMdWFNgsOfztTjRw4EArjFYhfpXp f00hPDx0e1GPi7eqDZXsOvfy0WJqV6W0cFWOMlB7XZ6LuYzcX4Ik/C0nGifNculI 292xc7qyMXWFKvzulDrU/nEInYaXD2I= -----END CERTIFICATE-----Generated at Wed May 13 09:01:19 2026 by rpki-client