$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa File: 02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa (raw, json) Hash identifier: CASum/Eh6mwJM5kz86OBgwmei9CRAPghgaZ4nOJbH9c= Subject key identifier: 51:ED:96:7D:D8:7A:EB:7D:8D:5D:C1:33:A8:77:F4:29:9A:71:09:B7 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584DC6CB0A51B1CF9B714D788080 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 46450 IP address blocks: 216.158.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:0a:51:b1:cf:9b:71:4d:78:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=1d25e699-1f5b-44e0-8c72-0db0c7761a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:ae:a2:5c:33:7c:6e:62:d7:26:e1:5f:61: 9b:31:f1:aa:39:33:f9:92:a6:b5:4c:5c:df:b1:14: d9:0a:16:9f:b0:06:98:44:73:c3:d0:1d:5b:8f:d9: 24:e2:a5:92:28:d3:be:80:f5:10:0b:6d:b7:3e:5e: 8c:c0:f3:1f:f9:5d:d5:e3:4b:26:1d:0d:df:18:63: 74:eb:9b:8b:b3:08:cb:1a:71:58:bd:1c:a5:aa:27: aa:13:34:61:b3:b2:d3:dc:b0:df:aa:7d:f0:1b:78: b7:86:d5:86:e8:5d:d8:48:84:39:00:af:d4:aa:73: e5:e0:e9:cf:21:19:0a:80:fc:dc:1d:0d:74:8a:cf: 81:f7:80:b6:55:59:e3:81:69:6a:33:13:9f:98:77: 96:73:1a:fb:9b:58:69:93:fe:56:3d:9f:ba:f6:2d: 04:27:5b:c0:09:e4:19:31:d8:34:60:e8:06:af:97: d0:16:67:8e:2e:3b:41:42:93:aa:ed:1f:31:11:08: b3:17:2a:96:c5:91:4d:dc:77:de:f3:8d:63:86:28: 6d:5f:cb:04:90:d5:c8:23:ff:8f:64:87:ad:31:8a: b1:a1:bc:12:57:90:f3:58:74:e7:26:50:b8:07:d7: 2b:b9:ac:29:b6:50:d7:a3:65:66:36:46:18:75:0b: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:ED:96:7D:D8:7A:EB:7D:8D:5D:C1:33:A8:77:F4:29:9A:71:09:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 216.158.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e0:23:cb:c4:d4:3d:5b:13:e8:ba:a1:70:75:15:fe:fd:5b: 86:62:2f:fa:e4:d0:5c:98:55:66:37:88:3e:59:18:e6:5d:ed: 3a:79:c8:9b:e8:e0:7e:51:24:cc:77:38:80:72:f4:63:b8:3b: 78:5f:dc:1a:a3:3b:3d:45:71:55:d8:88:52:4f:7b:30:b2:13: 82:48:fa:4e:66:37:71:40:ca:f9:af:73:2e:45:14:cf:f9:e8: 0d:49:c3:6c:67:af:50:ed:fd:d8:22:50:35:a8:ca:88:71:0c: 03:de:25:1e:ac:79:12:e6:45:bd:93:11:2a:f6:d0:34:ed:4a: e6:53:53:98:6d:d9:ec:e8:17:32:c5:ab:cf:8c:ee:1a:f6:d9: dd:a9:05:74:47:4d:92:e4:32:cb:14:32:fb:29:c7:84:d2:82: 6c:4c:97:ae:4c:c1:43:3f:27:03:46:de:19:3e:7f:7e:9c:f2: ea:00:70:b4:1a:14:5b:66:a0:83:c4:ad:53:97:89:94:4a:70: 80:86:51:a9:56:9a:89:56:76:cb:d8:8e:59:37:1c:2f:2e:cc: 63:ba:2b:0f:4d:0d:f0:28:28:83:9e:63:a6:e4:de:b6:cb:c7: cb:ee:6b:87:d5:48:24:5e:a0:a7:ed:58:cc:25:c3:84:b2:44: ac:08:8a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywpRsc+bcU14gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk MWQyNWU2OTktMWY1Yi00NGUwLThjNzItMGRiMGM3NzYxYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpOuolwzfG5i1ybhX2GbMfGqOTP5kqa1TFzf sRTZChafsAaYRHPD0B1bj9kk4qWSKNO+gPUQC223Pl6MwPMf+V3V40smHQ3fGGN0 65uLswjLGnFYvRylqieqEzRhs7LT3LDfqn3wG3i3htWG6F3YSIQ5AK/UqnPl4OnP IRkKgPzcHQ10is+B94C2VVnjgWlqMxOfmHeWcxr7m1hpk/5WPZ+69i0EJ1vACeQZ Mdg0YOgGr5fQFmeOLjtBQpOq7R8xEQizFyqWxZFN3Hfe841jhihtX8sEkNXII/+P ZIetMYqxobwSV5DzWHTnJlC4B9cruawptlDXo2VmNkYYdQuDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHtln3Yeut9jV3BM6h39CmacQm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDJjMTJjYTgtMjViMy0z MWRlLWEyYTEtMmQ0NGM5ODJmZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2J6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTgI8vE1D1bE+i6oXB1Ff79W4ZiL/rk0FyYVWY3iD5ZGOZd7Tp5yJvo 4H5RJMx3OIBy9GO4O3hf3BqjOz1FcVXYiFJPezCyE4JI+k5mN3FAyvmvcy5FFM/5 6A1Jw2xnr1Dt/dgiUDWoyohxDAPeJR6seRLmRb2TESr20DTtSuZTU5ht2ezoFzLF q8+M7hr22d2pBXRHTZLkMssUMvspx4TSgmxMl65MwUM/JwNG3hk+f36c8uoAcLQa FFtmoIPErVOXiZRKcICGUalWmolWdsvYjlk3HC8uzGO6Kw9NDfAoKIOeY6bk3rbL x8vua4fVSCReoKftWMwlw4SyRKwIimg= -----END CERTIFICATE-----Generated at Wed May 13 04:40:09 2026 by rpki-client