$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa File: bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa (raw, json) Hash identifier: zsddK+OS4ZJ8Bx+dypo7IjYCXUllBlMJMdwfxa1q1zg= Subject key identifier: D7:1E:3A:3F:82:6F:D5:31:88:D3:89:38:60:FF:FE:18:C0:96:14:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF78826A4707C0854A62080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.184.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:88:26:a4:70:7c:08:54:a6:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=31a13db2-34a8-4cb9-a571-6825eb57fa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:51:9a:c3:fb:ba:86:0d:75:4e:23:38:cb: 7e:86:3b:24:e5:13:c3:54:64:72:37:e5:68:26:c9: 72:28:7e:b4:76:60:28:86:9d:46:cc:1f:b4:15:3b: cf:1f:63:b7:4c:91:ad:c5:90:10:d9:f7:ed:9a:af: 5d:53:3d:f9:41:b1:ba:80:2a:2f:4d:9e:09:15:0f: 66:42:23:25:1f:c4:43:94:3c:29:29:93:23:f8:e6: 72:ba:45:c7:04:30:1c:13:fe:5b:96:69:30:c5:41: 80:fb:34:fb:0c:13:28:b0:5b:a6:c4:eb:27:51:a6: ef:f6:3b:ec:9e:a9:19:f0:b5:ee:9b:d7:08:b5:c0: 96:13:4d:f7:6c:de:8f:14:a8:eb:76:a4:cc:ef:cc: c4:9c:9e:28:5e:75:28:3c:37:38:82:ef:44:bf:d4: 9b:b5:46:4a:1a:03:20:d0:1b:7b:82:78:22:9e:28: 1f:d3:16:94:c9:0a:10:91:bd:24:12:ce:6f:b0:3b: bd:c3:23:c4:cb:e5:d9:5c:7d:bc:fb:0e:16:53:61: 50:b7:07:bb:d7:67:76:e4:15:af:48:13:a9:ef:d3: 4a:49:f5:aa:1a:47:20:90:76:50:62:e5:fb:f6:d9: 93:07:a9:1c:5d:29:b8:55:9b:f3:3e:76:80:e4:3e: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:3A:3F:82:6F:D5:31:88:D3:89:38:60:FF:FE:18:C0:96:14:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfdc2f61-bf96-3dca-a3a4-3695c6e62c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.184.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:49:12:e0:12:27:40:f3:3c:45:36:b6:d2:df:09:7b:6c:cd: 83:34:22:f6:08:71:26:55:02:5d:4b:21:79:02:4a:29:09:73: 75:de:6d:df:85:d3:5c:24:8d:5b:d7:53:89:d1:1c:39:df:7c: 7f:40:b9:f7:45:44:e7:99:0d:2d:3f:58:e1:25:f9:17:af:4b: b7:70:8f:a1:f9:ba:c5:32:f7:f2:e3:f7:f0:89:7f:ed:d7:8f: 6d:84:bd:8a:e3:80:79:ca:cd:b5:4a:f4:0f:e1:05:ae:31:4c: 47:56:cf:e8:d9:01:8b:0d:bd:d6:51:57:33:97:9a:68:49:1c: ea:ec:22:0d:89:2e:1b:d2:13:31:2f:fe:e0:2c:72:40:04:51: 5b:89:9e:6c:1f:e0:7c:ee:8e:69:46:f6:f1:08:54:99:4b:e6: 88:08:cd:f6:d8:65:83:61:2c:21:f9:39:87:a0:2b:86:ce:d0: c6:64:08:d0:17:31:22:6d:22:51:6e:53:43:cc:d5:98:b0:0f: f7:e3:c8:fa:89:57:ed:15:e2:cc:41:d2:26:6a:bf:46:02:20: 86:0f:47:5b:01:95:ea:4a:4c:1d:0a:a5:87:15:66:1f:67:2c: b9:56:73:b8:8e:b8:82:19:e4:b6:36:06:66:92:f4:54:13:9a: 36:7a:fa:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94gmpHB8CFSmIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzFhMTNkYjItMzRhOC00Y2I5LWE1NzEtNjgyNWViNTdmYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMhRmsP7uoYNdU4jOMt+hjsk5RPDVGRyN+Vo JslyKH60dmAohp1GzB+0FTvPH2O3TJGtxZAQ2fftmq9dUz35QbG6gCovTZ4JFQ9m QiMlH8RDlDwpKZMj+OZyukXHBDAcE/5blmkwxUGA+zT7DBMosFumxOsnUabv9jvs nqkZ8LXum9cItcCWE033bN6PFKjrdqTM78zEnJ4oXnUoPDc4gu9Ev9SbtUZKGgMg 0Bt7gnginigf0xaUyQoQkb0kEs5vsDu9wyPEy+XZXH28+w4WU2FQtwe712d25BWv SBOp79NKSfWqGkcgkHZQYuX79tmTB6kcXSm4VZvzPnaA5D5S/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNceOj+Cb9UxiNOJOGD//hjAlhQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkYzJmNjEtYmY5Ni0z ZGNhLWEzYTQtMzY5NWM2ZTYyYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZJEuASJ0DzPEU2ttLfCXtszYM0IvYIcSZVAl1LIXkCSikJc3Xebd+F 01wkjVvXU4nRHDnffH9AufdFROeZDS0/WOEl+RevS7dwj6H5usUy9/Lj9/CJf+3X j22EvYrjgHnKzbVK9A/hBa4xTEdWz+jZAYsNvdZRVzOXmmhJHOrsIg2JLhvSEzEv /uAsckAEUVuJnmwf4HzujmlG9vEIVJlL5ogIzfbYZYNhLCH5OYegK4bO0MZkCNAX MSJtIlFuU0PM1ZiwD/fjyPqJV+0V4sxB0iZqv0YCIIYPR1sBlepKTB0KpYcVZh9n LLlWc7iOuIIZ5LY2BmaS9FQTmjZ6+oc= -----END CERTIFICATE-----Generated at Tue Apr 21 20:24:22 2026 by rpki-client