$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf767ad3-83d7-36d7-90a5-e13b69b5a587.roa File: bf767ad3-83d7-36d7-90a5-e13b69b5a587.roa (raw, json) Hash identifier: yTESzF4KA5t5xN/px160jcPeZ5rYP0VPEQ0TRqPonhA= Subject key identifier: ED:30:31:A5:6B:D7:6E:3E:AA:16:CE:91:4B:FE:B7:70:C3:3C:F5:16 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D2BD9FDB0E0819683FACAA040 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf767ad3-83d7-36d7-90a5-e13b69b5a587.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 400317 IP address blocks: 204.119.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d9:fd:b0:e0:81:96:83:fa:ca:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=7c8676bf-d671-4eeb-b2a1-55d7e6bc1d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:c2:1d:59:95:f9:13:33:a5:1a:00:a1:17: bd:71:07:f1:54:c1:23:85:23:1b:9b:48:7b:b8:b5: 5e:09:42:84:06:e0:60:21:7d:49:49:19:f8:b5:b5: a7:1b:f8:36:02:4e:b7:fe:a1:76:40:30:0d:b2:a0: 80:fb:4b:1b:3b:df:e0:2e:c5:67:ac:77:e3:6c:18: 4d:2c:d1:37:d2:62:b0:5a:16:73:14:ce:b7:2a:89: d4:66:8e:22:a8:ec:fa:b9:a5:1a:ad:cf:40:97:e2: 4a:a0:e4:36:3e:f1:01:e8:cc:b5:62:e3:a0:02:d7: f0:19:c4:5d:f3:f2:a5:0a:4b:e3:5a:c8:b5:4d:17: 1e:81:ba:55:81:a7:77:76:60:d4:60:55:57:a4:31: 9d:ba:2f:5a:7e:5d:14:34:3b:50:fa:06:89:f3:09: e5:c9:60:aa:c3:b2:1b:5f:ba:f0:d3:2e:86:e5:5b: be:51:58:72:36:14:ac:d4:1b:a9:e9:1a:af:b3:a3: 44:da:4e:54:48:eb:d9:85:5a:d5:bb:1a:38:bb:73: 39:e2:33:4c:d8:5e:eb:06:18:2c:b9:f1:6e:2d:4c: 1a:4b:1b:cb:06:2c:ae:82:e4:e4:47:77:f0:2b:37: d6:ad:02:a2:d2:cb:73:d8:2d:28:a1:fa:e8:56:d4: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:31:A5:6B:D7:6E:3E:AA:16:CE:91:4B:FE:B7:70:C3:3C:F5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf767ad3-83d7-36d7-90a5-e13b69b5a587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 204.119.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:97:b1:32:a6:a7:18:c8:c8:4d:1e:0f:fd:5c:54:0a:68:01: 5f:75:fe:b0:5b:fc:8e:a7:0f:68:35:77:a4:8c:18:ca:bd:cb: 61:53:ef:82:a2:74:ca:1a:a4:76:40:aa:60:9e:f8:54:68:d0: 8f:66:e8:0d:88:a0:fa:d0:52:6a:61:36:8c:7d:46:56:f4:f7: 8c:ef:af:68:37:a9:35:74:cb:16:3a:31:db:fe:f0:1f:8e:ef: 37:c4:cc:40:06:84:ab:fe:df:5d:6e:85:92:e4:48:e9:0f:a9: ec:e7:9e:e8:73:f5:d9:02:99:d7:b7:ef:4f:ab:7c:ec:4f:d9: eb:d5:77:cf:b2:26:23:41:0b:ab:a8:8a:be:8a:b5:39:d2:9d: e3:e4:25:e4:e6:04:85:f3:ab:34:16:2c:37:b9:ff:bc:25:e7: 7d:b9:19:d0:b8:20:d6:81:81:35:e9:a2:b3:18:99:2a:94:ba: d6:78:e4:49:26:37:5d:e5:26:32:b5:e1:29:1b:27:ac:c5:59: 67:25:4f:7c:a5:b3:6a:0c:18:db:1b:4f:d1:c4:c6:96:bc:0f: d8:ec:f9:5a:f6:b0:29:b2:67:97:7f:a9:18:f8:88:55:4f:d0: 20:3b:f2:f0:51:fd:07:de:ea:f0:52:01:3b:4c:31:75:53:57: 84:97:e1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2f2w4IGWg/rKoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk N2M4Njc2YmYtZDY3MS00ZWViLWIyYTEtNTVkN2U2YmMxZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwnCHVmV+RMzpRoAoRe9cQfxVMEjhSMbm0h7 uLVeCUKEBuBgIX1JSRn4tbWnG/g2Ak63/qF2QDANsqCA+0sbO9/gLsVnrHfjbBhN LNE30mKwWhZzFM63KonUZo4iqOz6uaUarc9Al+JKoOQ2PvEB6My1YuOgAtfwGcRd 8/KlCkvjWsi1TRcegbpVgad3dmDUYFVXpDGdui9afl0UNDtQ+gaJ8wnlyWCqw7Ib X7rw0y6G5Vu+UVhyNhSs1Bup6Rqvs6NE2k5USOvZhVrVuxo4u3M54jNM2F7rBhgs ufFuLUwaSxvLBiyuguTkR3fwKzfWrQKi0stz2C0oofroVtRQMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0wMaVr124+qhbOkUv+t3DDPPUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmY3NjdhZDMtODNkNy0z NmQ3LTkwYTUtZTEzYjY5YjVhNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCXsTKmpxjIyE0eD/1cVApoAV91/rBb/I6nD2g1d6SMGMq9y2FT74Ki dMoapHZAqmCe+FRo0I9m6A2IoPrQUmphNox9Rlb094zvr2g3qTV0yxY6Mdv+8B+O 7zfEzEAGhKv+311uhZLkSOkPqeznnuhz9dkCmde370+rfOxP2evVd8+yJiNBC6uo ir6KtTnSnePkJeTmBIXzqzQWLDe5/7wl5325GdC4INaBgTXporMYmSqUutZ45Ekm N13lJjK14SkbJ6zFWWclT3yls2oMGNsbT9HExpa8D9js+Vr2sCmyZ5d/qRj4iFVP 0CA78vBR/Qfe6vBSATtMMXVTV4SX4cA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:28 2026 by rpki-client