$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/bf4a8aed-9913-35d7-94f2-8643e8c92972.roa File: bf4a8aed-9913-35d7-94f2-8643e8c92972.roa (raw, json) Hash identifier: VKf5LiG7ifWy4QGWyfcc0JY9POYjBsL+pN+p9vmtF90= Subject key identifier: 23:F0:6A:2B:0B:F6:BA:7D:3C:98:84:8B:6F:D5:9E:C8:AD:A1:BC:75 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584D1B19F0A4B6C44219CDCF9F80 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/bf4a8aed-9913-35d7-94f2-8643e8c92972.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394905 IP address blocks: 216.234.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f0:a4:b6:c4:42:19:cd:cf:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=9b7fe6a7-e7be-4741-ac0c-6e10fe2803cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:f9:17:c2:fa:0b:66:4a:39:85:4b:d4:6a: 00:60:61:bc:00:e6:69:8a:2a:49:f1:fd:21:93:00: be:09:b9:e4:d4:65:ac:da:f4:ed:45:c6:16:05:b3: f6:24:fa:1e:f1:e2:c2:d1:16:38:2c:1c:54:af:92: a8:67:6b:bc:29:55:6b:a0:46:ee:b4:78:f0:2c:51: 68:8a:45:ba:81:aa:89:3c:38:10:87:89:45:c1:61: 51:ea:4c:9c:0c:ac:b7:ff:88:7c:4d:d2:06:72:de: 7d:b0:32:28:d9:d4:90:a1:0e:05:3d:6e:84:1d:a4: bc:c0:19:bc:38:03:a2:e3:88:83:d8:e1:15:25:6b: 55:a4:9e:0f:48:eb:f2:c4:2c:39:86:8a:e9:6e:3e: c7:9a:06:8a:c4:35:f1:6b:9c:4d:a5:36:b8:9f:a9: 12:5a:61:30:ba:f2:39:50:08:16:c7:81:33:e4:7c: 80:db:e7:42:15:47:7a:02:c2:69:17:bb:8e:29:e5: e8:ad:7e:1b:2b:ee:c3:ed:c9:66:de:3a:ab:b5:57: dd:d0:f6:cc:d7:0a:96:69:fc:85:15:90:eb:04:a4: 7c:ac:26:ee:b7:fe:e9:bb:ac:a2:cd:1a:b6:af:5a: 26:d6:51:ed:a7:23:be:31:8f:48:57:f4:c5:39:2c: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F0:6A:2B:0B:F6:BA:7D:3C:98:84:8B:6F:D5:9E:C8:AD:A1:BC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/bf4a8aed-9913-35d7-94f2-8643e8c92972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 216.234.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:34:b2:f0:c6:77:58:56:e6:a4:f2:e0:3b:40:7f:b7:4d:98: c6:a9:a2:6e:15:73:58:77:19:80:6f:53:76:30:0c:f0:a0:fc: 70:58:1d:94:42:60:4d:02:3d:5f:ce:d4:05:31:d2:4d:71:15: 8f:9b:7b:88:fd:69:df:67:11:93:9b:53:ea:de:7b:d0:90:29: 2b:e6:bb:44:fa:42:4b:05:3e:c9:4f:8a:54:b5:af:75:bf:95: 33:d8:a3:df:ba:bf:c5:8f:48:59:e8:10:92:aa:e7:26:31:bc: ce:18:4a:28:47:63:d1:db:9c:51:2f:12:3d:49:fe:e3:69:1b: 92:f8:d2:56:4e:3f:92:e7:dc:aa:d6:c4:a6:88:4e:02:e2:d4: ed:30:f8:6d:56:35:fe:85:75:f7:25:82:4f:5f:51:af:85:48: 63:4e:8b:80:24:73:d8:72:30:ba:64:a8:3c:99:54:a8:24:67: e4:a9:7b:27:6d:d1:00:e0:89:53:98:e2:55:c5:f1:27:df:6a: 93:99:db:63:9f:a6:66:d6:c7:53:a9:84:0e:50:df:7c:50:a0: 43:70:b2:33:a3:0d:be:a5:a3:9f:32:ed:6e:5c:03:d1:35:2b: 6a:1d:91:d0:ca:55:ea:c5:69:3b:44:01:8c:d7:29:f3:f2:54: 76:57:d2:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfCktsRCGc3Pn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OWI3ZmU2YTctZTdiZS00NzQxLWFjMGMtNmUxMGZlMjgwM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyn5F8L6C2ZKOYVL1GoAYGG8AOZpiipJ8f0h kwC+Cbnk1GWs2vTtRcYWBbP2JPoe8eLC0RY4LBxUr5KoZ2u8KVVroEbutHjwLFFo ikW6gaqJPDgQh4lFwWFR6kycDKy3/4h8TdIGct59sDIo2dSQoQ4FPW6EHaS8wBm8 OAOi44iD2OEVJWtVpJ4PSOvyxCw5horpbj7HmgaKxDXxa5xNpTa4n6kSWmEwuvI5 UAgWx4Ez5HyA2+dCFUd6AsJpF7uOKeXorX4bK+7D7clm3jqrtVfd0PbM1wqWafyF FZDrBKR8rCbut/7pu6yizRq2r1om1lHtpyO+MY9IV/TFOSxm3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPwaisL9rp9PJiEi2/Vnsitobx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYmY0YThhZWQtOTkxMy0z NWQ3LTk0ZjItODY0M2U4YzkyOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Op1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc0svDGd1hW5qTy4DtAf7dNmMapom4Vc1h3GYBvU3YwDPCg/HBYHZRC YE0CPV/O1AUx0k1xFY+be4j9ad9nEZObU+ree9CQKSvmu0T6QksFPslPilS1r3W/ lTPYo9+6v8WPSFnoEJKq5yYxvM4YSihHY9HbnFEvEj1J/uNpG5L40lZOP5Ln3KrW xKaITgLi1O0w+G1WNf6Fdfclgk9fUa+FSGNOi4Akc9hyMLpkqDyZVKgkZ+Speydt 0QDgiVOY4lXF8SffapOZ22OfpmbWx1OphA5Q33xQoENwsjOjDb6lo58y7W5cA9E1 K2odkdDKVerFaTtEAYzXKfPyVHZX0m4= -----END CERTIFICATE-----Generated at Mon Mar 23 10:42:44 2026 by rpki-client