$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa File: bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json) Hash identifier: x7HT/DRBwtEfbkY+u+9GaK5rkpB0QAg5ncYufBv0Q3k= Subject key identifier: 33:39:9E:19:8B:1A:C0:2F:54:12:37:7A:0D:5E:7B:D5:8F:59:7E:08 Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Certificate serial: 010D0C9F4328584DADAACF969A5F123D6BE358E0 Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 20099 IP address blocks: 192.44.70.0/24 maxlen: 24 2620:89:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:cf:96:9a:5f:12:3d:6b:e3:58:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=cf1cd526-dc56-4837-9acc-a784d57e26a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:27:64:82:2b:7c:d5:8f:c2:3f:d3:4e:86: e5:39:43:1b:cf:46:aa:a9:f4:ba:40:99:e2:47:d7: 45:45:75:a6:55:02:22:ef:cc:84:3f:89:e7:7e:bc: bc:db:ad:9c:33:b9:8d:a9:e9:1c:0e:be:66:95:1f: d2:9c:5f:f7:a2:31:73:de:89:6a:5c:9d:01:02:44: 24:b7:5b:af:bc:d0:ce:71:21:19:f3:81:4a:2c:c7: a9:54:5e:9d:ba:c1:56:15:30:42:69:98:8d:3f:e6: ea:24:b2:26:a1:40:f3:e3:e5:19:f4:64:ef:90:54: 36:81:58:99:a2:e1:10:75:64:56:82:a0:f6:89:9e: cc:51:6a:54:0f:20:39:1e:20:58:6b:1d:e4:7a:73: 77:2b:b0:4e:2a:44:67:01:2c:bf:49:38:bd:96:aa: 2e:66:0f:09:c9:90:2c:8b:ca:df:a2:bf:aa:07:6e: bd:7d:6e:46:1a:00:09:b9:9d:34:97:82:64:89:d0: 7f:a7:b4:e2:ff:03:fb:26:b5:bd:24:bc:43:62:75: 89:ee:b7:91:12:02:f2:c4:db:22:6f:44:00:de:6b: 48:ef:ec:14:b7:10:77:1d:05:7b:85:50:4c:0d:d8: 5d:f1:62:df:87:8d:74:06:16:0b:b8:c1:5b:0a:3d: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:39:9E:19:8B:1A:C0:2F:54:12:37:7A:0D:5E:7B:D5:8F:59:7E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl X509v3 Authority Key Identifier: keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer sbgp-ipAddrBlock: critical IPv4: 192.44.70.0/24 IPv6: 2620:89:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:12:98:9c:b6:88:8c:12:d7:36:f1:8c:92:7d:80:b4:9c:3f: 2a:11:39:b7:5d:9b:15:ed:3a:82:6e:4d:29:c9:02:79:0c:e6: 49:ee:ea:12:27:6d:7c:42:31:b8:ec:d4:95:d5:d6:f5:32:0e: a3:5f:c9:00:9d:06:b3:2e:cf:1d:47:a3:cc:45:01:96:98:95: ba:8e:7f:28:55:7e:13:38:e9:b2:f0:c0:2d:a3:d0:2e:1b:c5: 5e:15:55:0e:74:58:58:d1:a4:32:a1:28:32:74:7d:a9:b5:cd: c9:a3:6d:a2:cf:73:02:a6:dc:a6:92:34:fd:64:c0:f7:de:9b: 17:c9:41:3d:0e:d9:2f:56:4b:4b:89:ed:e2:c2:83:35:1a:c5: 4a:9d:a3:97:d9:40:60:06:e6:be:ba:e9:14:14:c7:01:f5:d1: 21:1f:3d:a8:71:92:af:4b:a8:88:8a:6f:60:00:6f:11:23:d0: c3:45:cf:9a:b4:ab:66:73:49:4e:2d:ce:44:6a:17:ab:53:82: d3:3d:a9:72:a9:9f:a6:f7:3a:4d:cb:91:89:62:d2:37:65:19: 53:93:d6:c0:50:fd:85:98:06:7d:68:c1:fc:ae:24:90:33:06: fa:c0:d3:86:fd:a3:e1:5c:95:80:04:ba:89:38:20:7c:76:de: 04:a1:d1:4e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2tqs+Wml8SPWvjWOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw Nzc2MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk Y2YxY2Q1MjYtZGM1Ni00ODM3LTlhY2MtYTc4NGQ1N2UyNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfInZIIrfNWPwj/TToblOUMbz0aqqfS6QJni R9dFRXWmVQIi78yEP4nnfry8262cM7mNqekcDr5mlR/SnF/3ojFz3olqXJ0BAkQk t1uvvNDOcSEZ84FKLMepVF6dusFWFTBCaZiNP+bqJLImoUDz4+UZ9GTvkFQ2gViZ ouEQdWRWgqD2iZ7MUWpUDyA5HiBYax3kenN3K7BOKkRnASy/STi9lqouZg8JyZAs i8rfor+qB269fW5GGgAJuZ00l4JkidB/p7Ti/wP7JrW9JLxDYnWJ7reREgLyxNsi b0QA3mtI7+wUtxB3HQV7hVBMDdhd8WLfh410BhYLuMFbCj2DMQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDM5nhmLGsAvVBI3eg1ee9WPWX4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2 MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2 ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkxKYnLaIjBLXNvGMkn2AtJw/KhE5t12b Fe06gm5NKckCeQzmSe7qEidtfEIxuOzUldXW9TIOo1/JAJ0Gsy7PHUejzEUBlpiV uo5/KFV+EzjpsvDALaPQLhvFXhVVDnRYWNGkMqEoMnR9qbXNyaNtos9zAqbcppI0 /WTA996bF8lBPQ7ZL1ZLS4nt4sKDNRrFSp2jl9lAYAbmvrrpFBTHAfXRIR89qHGS r0uoiIpvYABvESPQw0XPmrSrZnNJTi3ORGoXq1OC0z2pcqmfpvc6TcuRiWLSN2UZ U5PWwFD9hZgGfWjB/K4kkDMG+sDThv2j4VyVgAS6iTggfHbeBKHRTg== -----END CERTIFICATE-----Generated at Wed May 13 17:14:59 2026 by rpki-client