$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa File: bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa (raw, json) Hash identifier: YEEAXsy7Z6CIuC6HieyCH8nsDQjKLieToUBQ+yIO4q0= Subject key identifier: 80:1C:E4:A8:FD:07:9A:CA:DC:CE:A0:84:06:EB:55:8C:0F:DD:A0:85 Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584DBD05E3144FAC182912C60D00 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 11808 IP address blocks: 129.101.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:e3:14:4f:ac:18:29:12:c6:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=c93db9f6-af80-4146-8600-30cb417baab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:20:b9:40:f6:45:68:a3:58:45:36:c5:9b: 1d:2c:6a:3d:26:92:a8:10:f2:c4:5b:1f:71:dc:87: aa:3a:80:7b:c9:cc:32:9a:9c:0a:50:7d:c5:a3:61: 9b:07:aa:91:96:40:df:c1:2c:69:25:ac:9b:db:02: 9e:a6:38:a3:bb:8c:9c:2e:d5:c4:04:8e:3b:e6:87: c2:d2:1c:b5:60:a7:87:eb:53:ef:9f:cc:be:ee:05: 7a:16:ab:55:54:1e:34:a8:26:3b:5c:b0:d3:36:a1: a9:0d:a8:9c:db:0f:4c:35:eb:cf:01:19:ea:43:12: 64:bd:55:2c:76:85:ca:2e:69:cc:30:49:97:d6:f1: 44:a7:31:c6:12:af:bd:51:72:9b:b0:41:24:f2:e5: ac:25:a8:66:df:08:44:4a:3a:97:91:91:2e:de:b5: c4:d6:5f:94:6f:7e:88:4e:05:4c:f5:2d:ad:4f:bb: bc:60:aa:1e:56:0c:06:7a:b6:5d:da:01:e1:41:95: 6c:b7:ce:f1:2a:35:12:2e:03:a6:95:e8:04:04:cd: 3e:24:7b:8b:8c:60:d0:70:d3:09:e7:3f:a0:be:aa: 24:3f:d0:cd:32:94:6d:97:10:14:b1:41:0f:44:ae: 78:2f:db:91:88:db:79:50:47:76:18:4b:e4:70:cc: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:E4:A8:FD:07:9A:CA:DC:CE:A0:84:06:EB:55:8C:0F:DD:A0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:59:ea:46:b0:6c:b6:ca:52:d0:59:2e:f0:aa:89:84:fd:93: 4e:6c:19:16:9d:f9:4a:9f:77:b8:41:ee:b8:36:6a:c9:1b:de: 5f:76:38:ba:94:43:ef:57:e7:e6:21:13:d2:dc:57:17:47:9c: 68:ac:6f:83:3e:8a:e2:ba:06:72:f5:be:36:54:a7:23:1d:d6: 5f:b0:f9:c1:a6:e7:6f:d1:24:f0:02:53:ae:74:8f:c7:67:10: e6:70:34:c1:8e:19:de:c8:1c:6c:69:2d:76:a2:de:d9:20:38: f0:17:8c:c6:93:77:41:f4:22:c8:83:e6:62:8f:0b:28:9e:a4: b4:e9:04:fa:81:3a:5c:52:a4:73:6b:f2:14:61:f8:a2:eb:fa: 56:fe:b8:c2:d6:72:eb:e2:f8:34:0a:69:5c:4d:7a:36:ed:aa: 21:21:1b:7e:45:b9:d3:de:6f:03:d6:e5:a4:ab:b7:66:b0:2e: 45:e4:35:39:35:a2:ed:47:92:22:7b:03:74:90:5e:3d:4e:f3: fd:31:e1:b8:c2:90:d6:35:51:b6:16:8e:d1:f1:d0:ea:83:6d: 77:9c:f9:2a:84:aa:9f:5e:33:7c:b6:19:fd:d9:eb:37:c8:b0: eb:08:7a:24:29:f2:bd:b4:2e:5f:d9:cc:16:8c:08:c8:0b:52: de:69:1a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BeMUT6wYKRLGDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk YzkzZGI5ZjYtYWY4MC00MTQ2LTg2MDAtMzBjYjQxN2JhYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSQguUD2RWijWEU2xZsdLGo9JpKoEPLEWx9x 3IeqOoB7ycwympwKUH3Fo2GbB6qRlkDfwSxpJayb2wKepjiju4ycLtXEBI475ofC 0hy1YKeH61Pvn8y+7gV6FqtVVB40qCY7XLDTNqGpDaic2w9MNevPARnqQxJkvVUs doXKLmnMMEmX1vFEpzHGEq+9UXKbsEEk8uWsJahm3whESjqXkZEu3rXE1l+Ub36I TgVM9S2tT7u8YKoeVgwGerZd2gHhQZVst87xKjUSLgOmlegEBM0+JHuLjGDQcNMJ 5z+gvqokP9DNMpRtlxAUsUEPRK54L9uRiNt5UEd2GEvkcMxXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAc5Kj9B5rK3M6ghAbrVYwP3aCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvYmY0NTJhYTctZjhiZi0z NDQ2LWI4OGEtYzBhOTAyNDIzYmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWXVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFZ6kawbLbKUtBZLvCqiYT9k05sGRad+Uqfd7hB7rg2askb3l92OLqU Q+9X5+YhE9LcVxdHnGisb4M+iuK6BnL1vjZUpyMd1l+w+cGm52/RJPACU650j8dn EOZwNMGOGd7IHGxpLXai3tkgOPAXjMaTd0H0IsiD5mKPCyiepLTpBPqBOlxSpHNr 8hRh+KLr+lb+uMLWcuvi+DQKaVxNejbtqiEhG35FudPebwPW5aSrt2awLkXkNTk1 ou1HkiJ7A3SQXj1O8/0x4bjCkNY1UbYWjtHx0OqDbXec+SqEqp9eM3y2Gf3Z6zfI sOsIeiQp8r20Ll/ZzBaMCMgLUt5pGsc= -----END CERTIFICATE-----Generated at Wed May 13 16:26:44 2026 by rpki-client