$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa File: bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa (raw, json) Hash identifier: B4/9UPKJsT3VdcwrMterP44tw969+LbfIyZvmVEnMQw= Subject key identifier: E3:08:C9:FE:96:06:FF:C6:CC:FC:2F:DD:05:C9:54:90:10:6C:93:A1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DCC605A77E71962977AD3C380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 0 IP address blocks: 204.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:5a:77:e7:19:62:97:7a:d3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=fa5e5081-e264-4234-afc7-ad9f7f08e51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:80:8b:76:1b:7b:07:05:66:c5:5b:0d:fe: d6:da:5c:dd:c7:62:c3:46:a3:22:51:a7:5a:4f:5e: 54:04:6e:65:21:48:f9:8e:31:a1:5e:a2:ac:6d:92: 36:96:fc:3b:f5:f3:96:bc:d7:59:d1:0d:21:bb:ab: 8d:7e:c7:77:ce:37:2c:47:cf:f5:f0:fd:69:3a:10: 1a:ba:9b:ea:8c:3b:3f:4a:46:83:5e:7e:0c:27:b9: 48:43:6f:c1:57:e9:ea:73:a7:17:e9:35:da:c2:50: 47:fe:da:ce:b2:39:eb:be:a7:03:2e:33:8a:c6:20: 7d:b4:51:c5:bf:6e:80:73:69:2c:97:dd:e2:34:18: 24:00:01:ff:80:60:fc:21:d0:f6:35:d7:9d:fe:1f: bf:38:63:66:67:07:aa:26:19:54:ba:3a:37:12:db: 95:73:fa:ca:fd:0a:bb:f3:32:7a:08:71:68:e7:b2: 90:13:b3:54:94:6b:10:17:16:5b:ce:05:25:44:b3: 0c:ee:8b:04:4b:8f:1b:fc:12:f8:13:ed:ac:5b:f0: 46:02:8d:91:ad:44:f5:0f:4a:af:d0:cc:3b:66:a0: a2:ab:7a:1c:1a:46:b6:d0:f2:d2:3c:13:f0:4f:84: 40:d6:65:b9:58:cd:b3:0a:76:f8:a0:58:99:26:b6: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:08:C9:FE:96:06:FF:C6:CC:FC:2F:DD:05:C9:54:90:10:6C:93:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.254.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3e:96:a8:27:28:83:95:e5:ad:ce:2e:b0:43:f3:58:ca:7d: 0e:dc:7d:21:83:a4:f8:b3:c0:ce:18:71:8e:07:56:0f:85:43: 51:43:d9:94:f4:ed:f4:85:85:af:51:f8:49:5e:ed:c1:c5:f9: f3:04:ad:06:43:c2:08:07:25:9e:61:e4:00:e9:aa:32:c7:49: 83:f5:c2:16:a9:35:14:73:53:31:3e:7f:98:62:87:13:7c:93: 42:1f:34:33:a4:d0:83:8b:20:f2:94:3e:30:5c:29:56:7a:09: 33:26:b5:c3:28:7d:7a:61:4b:a8:21:85:fd:9d:8d:7c:ef:34: b7:e9:d3:a0:43:09:5f:90:10:63:f3:55:d9:44:69:22:bc:78: 2d:9b:32:d4:50:30:ba:45:a9:83:c2:2b:ba:e5:e3:d1:bf:49: bf:04:a0:0b:fc:6a:e9:62:94:b3:bf:61:a9:55:a3:49:f9:0f: 24:6e:9a:3f:50:47:fe:be:fc:61:81:c7:bf:64:a3:1d:2c:10: 06:d8:6d:4d:51:5d:e6:ae:88:86:94:cf:e9:92:90:e0:c3:6d: 3f:1e:c7:d1:b4:44:66:a5:6b:e6:70:6c:f4:3a:44:98:80:6c: ae:6f:0b:54:a0:e4:f2:a3:0f:89:8b:3c:4e:88:a4:83:e9:5e: be:8f:4e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYFp35xlil3rTw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZmE1ZTUwODEtZTI2NC00MjM0LWFmYzctYWQ5ZjdmMDhlNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x6Ai3YbewcFZsVbDf7W2lzdx2LDRqMiUada T15UBG5lIUj5jjGhXqKsbZI2lvw79fOWvNdZ0Q0hu6uNfsd3zjcsR8/18P1pOhAa upvqjDs/SkaDXn4MJ7lIQ2/BV+nqc6cX6TXawlBH/trOsjnrvqcDLjOKxiB9tFHF v26Ac2ksl93iNBgkAAH/gGD8IdD2Nded/h+/OGNmZweqJhlUujo3EtuVc/rK/Qq7 8zJ6CHFo57KQE7NUlGsQFxZbzgUlRLMM7osES48b/BL4E+2sW/BGAo2RrUT1D0qv 0Mw7ZqCiq3ocGka20PLSPBPwT4RA1mW5WM2zCnb4oFiZJrau3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMIyf6WBv/GzPwv3QXJVJAQbJOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmOGJlNzctMWNlNy0z NGNjLThkNTctNDRmYzZkM2E0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzP54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY+lqgnKIOV5a3OLrBD81jKfQ7cfSGDpPizwM4YcY4HVg+FQ1FD2ZT0 7fSFha9R+Ele7cHF+fMErQZDwggHJZ5h5ADpqjLHSYP1whapNRRzUzE+f5hihxN8 k0IfNDOk0IOLIPKUPjBcKVZ6CTMmtcMofXphS6ghhf2djXzvNLfp06BDCV+QEGPz VdlEaSK8eC2bMtRQMLpFqYPCK7rl49G/Sb8EoAv8aulilLO/YalVo0n5DyRumj9Q R/6+/GGBx79kox0sEAbYbU1RXeauiIaUz+mSkODDbT8ex9G0RGala+ZwbPQ6RJiA bK5vC1Sg5PKjD4mLPE6IpIPpXr6PTnE= -----END CERTIFICATE-----Generated at Wed May 13 10:17:22 2026 by rpki-client