$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa File: bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa (raw, json) Hash identifier: siQ/OVbep/bJoWxwcqmoDvLy/PyRGdkj/oYy2rcgqQ0= Subject key identifier: 47:27:10:1E:3A:58:1B:38:C7:8C:92:A0:23:C9:6C:1D:DA:A5:A4:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE86C33FB9F42E0E5796EB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33659 IP address blocks: 68.86.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:c3:3f:b9:f4:2e:0e:57:96:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=07947ee5-4706-4561-9cc1-56cf0ad512e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:f1:96:74:3a:0f:b4:f7:95:51:85:66:3e: f0:29:15:2a:17:d5:80:72:3b:5d:01:5f:39:e3:6e: df:f2:0c:17:38:01:57:28:da:16:7d:a7:30:87:e6: 26:6f:7f:94:64:e7:18:33:63:c7:b0:91:7c:e7:93: 38:74:6c:d5:22:7b:59:e3:0e:03:2a:de:1b:6d:95: b2:06:5e:fe:aa:b5:8e:5e:e5:29:71:77:0a:33:08: ce:32:4d:b4:6d:fb:e5:02:ce:fe:1c:44:a2:84:84: 90:9d:8c:46:10:db:bd:dd:28:8c:aa:4b:9d:c8:4b: ff:c1:d6:1b:2a:f8:37:77:e3:7c:6f:e2:b5:fd:14: cd:d7:b0:cc:72:0b:c0:1d:3c:44:f2:86:39:bb:81: 8c:a0:3f:78:eb:51:d1:40:b1:59:53:f3:c6:20:cf: d3:99:19:32:98:ae:23:17:05:7d:8e:3c:29:ad:ea: 10:f7:66:20:fb:8c:c8:5c:44:f9:f9:a3:35:1c:56: 08:eb:79:9b:40:86:09:29:fe:36:cf:ac:19:8d:ad: dc:41:d9:b0:33:f0:2d:fb:d9:4f:a9:fd:8e:63:e3: e6:4b:7a:b9:2a:7d:f6:a4:5c:9b:ba:0c:a7:af:0c: 28:40:cf:1c:5e:cb:ac:70:26:b3:de:fd:03:c0:b0: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:27:10:1E:3A:58:1B:38:C7:8C:92:A0:23:C9:6C:1D:DA:A5:A4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:37:f6:37:38:df:98:7d:6e:57:22:ba:d5:b1:9b:72:2b:54: aa:f3:19:42:fb:83:3c:bc:8b:1c:a1:78:06:ce:89:7f:81:30: 7c:b9:24:5e:61:07:69:a2:69:ff:08:ee:e0:f4:e1:36:f0:33: 54:03:1e:cf:dc:b1:f8:9a:74:26:52:02:cf:6b:24:f4:62:17: 5e:65:5b:1e:5c:6f:52:e5:30:37:94:84:32:8a:bd:fb:e6:38: de:a9:32:c8:02:c2:ab:2d:2a:a0:d8:98:a1:b5:10:ab:4f:2b: 4c:20:c6:6d:3b:45:3e:f1:18:48:49:fe:12:3a:a3:22:f6:30: 9f:50:cb:d8:58:3f:b8:05:93:62:51:fc:5e:2a:f7:04:d0:46: e1:38:32:9d:8a:1f:ff:2d:18:7b:78:20:9a:9d:d3:99:a2:2a: 6d:06:86:21:d4:50:86:1b:9b:81:ef:1a:8a:83:9f:e4:85:5e: 35:fb:06:80:d0:a3:f6:01:e0:cc:e5:cd:f4:ae:f4:24:b3:c7: 92:fd:c6:57:49:0a:80:c6:5e:a1:70:e5:8b:82:b4:d6:e4:44: 2d:14:f0:b5:b4:11:d2:66:fd:7e:66:08:c4:90:56:d5:3e:40: d4:3a:0b:df:10:6b:3d:0e:2d:13:41:21:f6:dc:d9:62:83:27: da:38:26:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehsM/ufQuDleW6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk MDc5NDdlZTUtNDcwNi00NTYxLTljYzEtNTZjZjBhZDUxMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvxlnQ6D7T3lVGFZj7wKRUqF9WAcjtdAV85 427f8gwXOAFXKNoWfacwh+Ymb3+UZOcYM2PHsJF855M4dGzVIntZ4w4DKt4bbZWy Bl7+qrWOXuUpcXcKMwjOMk20bfvlAs7+HESihISQnYxGENu93SiMqkudyEv/wdYb Kvg3d+N8b+K1/RTN17DMcgvAHTxE8oY5u4GMoD9461HRQLFZU/PGIM/TmRkymK4j FwV9jjwpreoQ92Yg+4zIXET5+aM1HFYI63mbQIYJKf42z6wZja3cQdmwM/At+9lP qf2OY+PmS3q5Kn32pFybugynrwwoQM8cXsuscCaz3v0DwLDimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcnEB46WBs4x4ySoCPJbB3apaTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZlYzNlNTktNGQ4NC0z OGI4LTkwOTUtYTA0MmI2YzhmNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY39jc435h9blciutWxm3IrVKrzGUL7gzy8ixyheAbOiX+BMHy5JF5h B2miaf8I7uD04TbwM1QDHs/csfiadCZSAs9rJPRiF15lWx5cb1LlMDeUhDKKvfvm ON6pMsgCwqstKqDYmKG1EKtPK0wgxm07RT7xGEhJ/hI6oyL2MJ9Qy9hYP7gFk2JR /F4q9wTQRuE4Mp2KH/8tGHt4IJqd05miKm0GhiHUUIYbm4HvGoqDn+SFXjX7BoDQ o/YB4MzlzfSu9CSzx5L9xldJCoDGXqFw5YuCtNbkRC0U8LW0EdJm/X5mCMSQVtU+ QNQ6C98Qaz0OLRNBIfbc2WKDJ9o4Jqk= -----END CERTIFICATE-----Generated at Sat Jun 6 11:07:56 2026 by rpki-client