$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/351b7510-9ed7-383b-9bef-7685582ff39f.roa File: 351b7510-9ed7-383b-9bef-7685582ff39f.roa (raw, json) Hash identifier: SY6jeZD1HE7MtdUfEHgbv5OntohzQok391NhJ4aABi0= Subject key identifier: 8A:55:35:BE:3C:B1:83:40:80:B8:09:B0:36:D5:B1:14:72:4E:79:34 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584DA6B015705B738F46A75B7300 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/351b7510-9ed7-383b-9bef-7685582ff39f.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14340 IP address blocks: 204.14.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:15:70:5b:73:8f:46:a7:5b:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=441dda5d-f289-434f-9b98-3c24f1033442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:7c:da:4f:ef:2d:cc:14:d6:a2:09:7a:81: 5c:16:b8:8b:65:60:22:c3:c4:9e:b6:da:06:a4:97: 72:31:a8:3f:eb:65:67:14:99:61:9f:52:79:7f:52: 85:8c:e6:ee:83:1c:36:4c:74:76:e2:b1:fc:5f:94: f3:04:77:8f:f2:14:5b:9e:1a:cf:1c:f1:e3:f9:53: f3:05:67:cf:dd:38:2b:8a:da:24:dd:e7:c3:5d:b2: 22:a9:dd:97:d4:2b:7c:6c:98:29:3b:02:1a:74:30: d4:89:e1:00:c7:8f:3e:a8:b5:30:f8:cf:b4:4a:5e: ae:80:6c:23:3c:cb:63:cd:c2:6b:f0:b0:17:4e:d4: 52:03:7c:43:f0:ee:2c:29:00:28:e7:ba:3b:e3:cf: 44:7e:a1:5c:e9:40:74:01:00:8c:ca:cb:10:4f:54: d4:2d:f8:30:b9:7b:9e:23:03:da:38:43:72:70:fa: ae:d6:50:73:f5:65:7f:2e:76:72:31:b1:df:31:2a: 06:f3:6c:18:e1:56:15:c0:db:96:7e:84:03:d9:a4: ab:e8:56:56:4c:00:6e:35:91:ec:3c:28:88:ef:bc: 37:c1:f6:60:55:b5:8f:95:7f:39:e6:f6:5a:7a:ff: 2c:d8:80:47:6b:58:df:ea:4d:ad:dc:ff:fa:43:03: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:35:BE:3C:B1:83:40:80:B8:09:B0:36:D5:B1:14:72:4E:79:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/351b7510-9ed7-383b-9bef-7685582ff39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 204.14.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5b:c3:a0:8b:89:b9:db:31:38:d8:6b:6b:2c:9f:91:b7:d2: fb:21:9f:64:c5:2b:05:41:9e:d5:b8:83:89:b7:93:85:73:04: a0:bf:76:92:80:da:1e:e8:48:90:31:a0:1b:e4:fa:e6:81:16: c0:7e:e5:bb:42:85:aa:0d:ca:bd:f0:57:99:7f:9a:a5:8d:dc: cb:15:01:2a:1e:0b:4d:59:52:e3:23:4f:4d:35:07:e1:92:44: c5:c2:58:23:9a:cc:af:b0:e2:c1:00:25:3c:23:91:be:6e:c8: 48:8a:10:16:67:4e:c9:56:21:05:59:c5:e9:69:21:06:8a:ad: 3f:1a:c2:06:02:10:04:7f:13:28:8c:3a:87:2c:0b:b6:f9:d3: ea:7c:cf:ac:e9:61:da:71:be:97:37:df:fd:98:78:26:ab:9a: 69:63:c8:82:c0:f6:8a:2d:0a:7e:03:b8:53:90:d7:fa:e6:b3: ab:69:72:c3:f1:fa:7b:f8:62:3b:77:4c:9b:06:b8:ce:57:b6: b1:2d:88:aa:03:46:c4:d1:9b:bd:c4:20:23:38:d1:f1:44:bd: 3c:94:d3:73:c9:2c:1e:49:9e:40:4b:8c:c0:89:ad:19:77:97: 40:f5:9f:05:79:05:75:5d:8d:ff:30:c6:b1:82:26:c9:5e:c3: 0b:d5:fb:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBVwW3OPRqdbcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NDQxZGRhNWQtZjI4OS00MzRmLTliOTgtM2MyNGYxMDMzNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfZ82k/vLcwU1qIJeoFcFriLZWAiw8SettoG pJdyMag/62VnFJlhn1J5f1KFjObugxw2THR24rH8X5TzBHeP8hRbnhrPHPHj+VPz BWfP3Tgritok3efDXbIiqd2X1Ct8bJgpOwIadDDUieEAx48+qLUw+M+0Sl6ugGwj PMtjzcJr8LAXTtRSA3xD8O4sKQAo57o7489EfqFc6UB0AQCMyssQT1TULfgwuXue IwPaOENycPqu1lBz9WV/LnZyMbHfMSoG82wY4VYVwNuWfoQD2aSr6FZWTABuNZHs PCiI77w3wfZgVbWPlX855vZaev8s2IBHa1jf6k2t3P/6QwPPdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpVNb48sYNAgLgJsDbVsRRyTnk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMzUxYjc1MTAtOWVkNy0z ODNiLTliZWYtNzY4NTU4MmZmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFbw6CLibnbMTjYa2ssn5G30vshn2TFKwVBntW4g4m3k4VzBKC/dpKA 2h7oSJAxoBvk+uaBFsB+5btChaoNyr3wV5l/mqWN3MsVASoeC01ZUuMjT001B+GS RMXCWCOazK+w4sEAJTwjkb5uyEiKEBZnTslWIQVZxelpIQaKrT8awgYCEAR/EyiM OocsC7b50+p8z6zpYdpxvpc33/2YeCarmmljyILA9ootCn4DuFOQ1/rms6tpcsPx +nv4Yjt3TJsGuM5XtrEtiKoDRsTRm73EICM40fFEvTyU03PJLB5JnkBLjMCJrRl3 l0D1nwV5BXVdjf8wxrGCJslewwvV+8E= -----END CERTIFICATE-----Generated at Wed Apr 29 16:23:07 2026 by rpki-client