$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa File: bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa (raw, json) Hash identifier: TfC3ZlJN3XbBBSIWrhmqwXdcv7JI637Kp2XG6xWxA5s= Subject key identifier: C3:5D:9E:54:8B:38:83:1E:1A:2F:00:2B:AA:5F:56:C6:EA:02:BD:0E Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584C8CD6C8BE2053CB6BC91A2CC0 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa Signing time: Sat 17 Jan 2026 02:00:30 +0000 ROA not before: Sat 17 Jan 2026 02:00:30 +0000 ROA not after: Fri 17 Apr 2026 01:00:30 +0000 asID: 22987 IP address blocks: 68.209.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8c:d6:c8:be:20:53:cb:6b:c9:1a:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Jan 17 02:00:30 2026 GMT Not After : Apr 17 01:00:30 2026 GMT Subject: CN=5095da6f-fd7a-43d9-93ed-5d525ae1208b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:ab:cf:2f:31:90:67:72:c7:40:2a:1e:79: cd:36:cc:f2:28:41:d2:af:bb:7f:7e:fc:ae:c9:c5: 00:66:75:7a:16:8e:e9:5a:5d:66:46:22:09:f8:06: 28:db:ca:45:ab:a6:2e:29:5b:98:b5:b9:e2:38:77: ba:37:7e:fb:e7:b7:43:6f:08:57:d9:16:1f:15:5e: 09:69:50:f1:b7:96:47:eb:d7:4e:2b:2f:8e:b9:40: 3e:c5:17:23:4c:15:4c:fb:99:47:f9:b1:d7:4c:5c: 85:78:e1:41:18:b2:60:80:ca:2f:39:ae:65:69:61: a7:f5:ce:31:a4:16:77:b0:48:10:69:d0:2e:b5:c0: 30:b8:d2:b1:f4:61:ed:f8:96:35:2e:d1:27:ee:3f: 9c:34:d0:50:99:11:c8:14:78:7d:cf:08:a1:0f:24: 4d:46:02:ab:b0:6e:78:2f:9e:5e:12:b0:6e:e9:c7: 44:8e:69:a1:f9:c1:49:30:aa:2e:20:5a:93:5c:e7: a2:d8:b7:f7:eb:4a:ce:66:79:2c:e2:80:2b:85:91: 4b:ad:5f:f2:ac:fd:9e:8a:81:31:40:0f:57:2d:a4: 6e:f5:22:65:fc:55:5b:8f:e9:8f:a2:4f:95:e7:29: 90:e2:dd:46:15:73:4b:0e:92:a1:cc:f7:ba:d0:fc: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5D:9E:54:8B:38:83:1E:1A:2F:00:2B:AA:5F:56:C6:EA:02:BD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 68.209.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f8:dd:3a:c2:f3:e3:d0:f7:4b:ba:a2:ac:39:79:08:f0:5e: 0e:a4:6b:74:a9:f9:34:61:bf:0f:d7:4c:65:e5:67:87:4e:9e: e0:6a:94:d8:84:18:dd:3a:8b:a3:1a:3a:4f:03:d3:bb:d3:0c: 33:8a:9e:12:a0:6f:e7:fe:38:87:1a:db:0b:6e:b2:61:23:a8: 28:fe:19:14:1e:84:d7:21:5e:13:9c:17:94:7a:6c:2d:31:c3: ec:d7:78:48:78:82:26:93:0f:0f:6e:ba:b3:09:86:4c:72:7a: 16:06:9d:f6:dc:43:6d:e7:a3:4c:55:fa:ac:81:ad:66:8a:28: 4d:9c:04:81:b2:91:4e:fb:4a:8b:f6:ff:2e:65:62:26:a2:7a: 9c:20:39:c8:86:77:5e:5e:f6:84:22:ac:75:8a:79:df:20:0b: 31:1f:53:ec:61:e3:b2:96:ca:e6:21:8f:c8:c3:a7:f6:15:5a: d1:61:27:a6:9b:08:dc:32:e3:69:76:06:75:d4:19:a5:00:de: 25:da:74:1c:ed:ac:0f:e6:f7:b7:08:c1:9c:fe:f9:2b:60:15: 45:95:d5:99:08:30:c3:9f:86:44:55:b8:6a:81:91:85:29:f2: 37:01:c4:33:61:77:c0:50:82:0b:26:33:c4:82:d2:d2:5c:b0: eb:55:0a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyM1si+IFPLa8kaLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI2MDExNzAyMDAzMFoXDTI2MDQxNzAxMDAzMFowLzEtMCsGA1UEAxMk NTA5NWRhNmYtZmQ3YS00M2Q5LTkzZWQtNWQ1MjVhZTEyMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj2rzy8xkGdyx0AqHnnNNszyKEHSr7t/fvyu ycUAZnV6Fo7pWl1mRiIJ+AYo28pFq6YuKVuYtbniOHe6N37757dDbwhX2RYfFV4J aVDxt5ZH69dOKy+OuUA+xRcjTBVM+5lH+bHXTFyFeOFBGLJggMovOa5laWGn9c4x pBZ3sEgQadAutcAwuNKx9GHt+JY1LtEn7j+cNNBQmRHIFHh9zwihDyRNRgKrsG54 L55eErBu6cdEjmmh+cFJMKouIFqTXOei2Lf360rOZnks4oArhZFLrV/yrP2eioEx QA9XLaRu9SJl/FVbj+mPok+V5ymQ4t1GFXNLDpKhzPe60PzCuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNdnlSLOIMeGi8AK6pfVsbqAr0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvYmY4MzRmMTktMTRjOC0z NGYyLWJmOTUtYjM3OTdiZDk2ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRNGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET43TrC8+PQ90u6oqw5eQjwXg6ka3Sp+TRhvw/XTGXlZ4dOnuBqlNiE GN06i6MaOk8D07vTDDOKnhKgb+f+OIca2wtusmEjqCj+GRQehNchXhOcF5R6bC0x w+zXeEh4giaTDw9uurMJhkxyehYGnfbcQ23no0xV+qyBrWaKKE2cBIGykU77Sov2 /y5lYiaiepwgOciGd15e9oQirHWKed8gCzEfU+xh47KWyuYhj8jDp/YVWtFhJ6ab CNwy42l2BnXUGaUA3iXadBztrA/m97cIwZz++StgFUWV1ZkIMMOfhkRVuGqBkYUp 8jcBxDNhd8BQggsmM8SC0tJcsOtVCtU= -----END CERTIFICATE-----Generated at Thu Feb 26 21:37:46 2026 by rpki-client