$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa File: 57aff851-18b2-3c97-924b-1cbb9ef8f281.roa (raw, json) Hash identifier: tR0CYsa347m8P9J2dYhxzBw0PU84vy2/34KqARs+ygo= Subject key identifier: 2E:45:AF:40:4A:3B:9A:03:53:4D:A5:97:0A:9E:EA:35:C2:7F:9A:56 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A66AAD12DF7F2B3F39D80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 69.50.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:66:aa:d1:2d:f7:f2:b3:f3:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=8dd0b812-8fca-4625-bd4e-030bd9c0575c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:e5:99:71:e6:54:a2:ed:d5:27:0f:e1:d4: 13:ab:11:1f:ad:1d:4d:a3:b6:a1:54:a9:bb:a6:af: 0e:52:ef:06:70:cd:67:5e:43:e1:b1:7c:76:15:2a: 39:9b:eb:5c:a3:c7:9d:8c:cd:3b:87:56:a1:6f:21: 37:ba:80:87:d8:d7:0e:fe:2c:fb:2c:19:0a:c7:2f: 6c:1a:49:47:74:fc:be:1a:da:0f:d0:64:ca:2a:02: b2:66:64:b2:47:91:e1:da:aa:27:87:96:8e:c1:df: fc:14:ec:67:c6:b3:67:3a:ea:4e:29:79:27:f4:85: 2d:42:16:ee:58:8e:ae:1d:17:bd:b0:89:66:6f:73: ec:52:28:3e:78:ee:40:9c:0a:55:e6:f0:8e:fd:bf: ee:0b:d6:49:84:ba:2a:36:90:82:ff:d6:94:07:d3: f9:82:ca:c8:8e:93:24:68:c5:b9:53:ff:26:bb:e3: e1:86:06:5f:dc:81:b9:16:74:00:90:e3:a4:41:c2: 6b:98:18:5b:62:39:82:cd:9d:76:3b:55:53:36:80: 3b:e7:73:e9:2a:d0:91:e4:7e:46:94:26:5d:99:4a: c9:23:62:8b:07:eb:c5:88:a1:22:86:3e:b4:79:04: d7:1d:1a:ec:97:77:a3:76:09:e3:ba:66:5b:07:e7: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:AF:40:4A:3B:9A:03:53:4D:A5:97:0A:9E:EA:35:C2:7F:9A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 69.50.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:96:79:63:33:bf:e0:0c:58:83:ee:ed:d6:c1:0d:e5:e7:09: 5f:d1:29:0a:38:ec:24:0c:24:da:42:75:bb:14:5d:29:6d:bb: 39:0b:15:7b:d0:bc:91:6f:9a:92:e0:8c:99:74:d5:ff:4a:17: 3f:eb:ef:80:07:e1:7c:fd:8f:03:e6:9e:ef:5f:58:e0:8a:a3: 57:41:87:a8:b7:be:b0:c7:46:30:e8:e6:0d:bd:ce:fe:3a:fa: f4:23:65:cf:07:8e:06:8f:6a:5d:8d:74:ee:3b:2d:61:be:a5: 7b:5c:a4:6d:fa:63:6d:7a:78:56:23:fb:71:4a:cf:20:89:99: b5:c3:53:e1:35:94:68:56:5c:b8:57:10:49:27:fc:11:b2:6d: d1:27:f0:80:14:db:03:03:6b:4f:f4:3e:b8:e4:36:56:60:c9: 54:70:59:27:d6:4a:3b:4f:bb:47:7f:00:87:09:f0:79:6f:54: 34:92:5d:28:89:e0:95:84:79:97:76:80:b0:c9:4d:1b:76:65: 6e:0a:b6:a5:8c:45:dc:1d:38:b1:9f:12:59:08:71:31:e5:72: a1:f5:aa:28:c3:1e:51:97:ae:ab:c6:10:57:10:32:d3:38:a1: 7f:c3:a1:22:8c:c2:30:42:2f:99:8e:72:43:c8:8d:0b:ee:8d: 09:ca:ed:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmaq0S338rPznYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OGRkMGI4MTItOGZjYS00NjI1LWJkNGUtMDMwYmQ5YzA1NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgHlmXHmVKLt1ScP4dQTqxEfrR1No7ahVKm7 pq8OUu8GcM1nXkPhsXx2FSo5m+tco8edjM07h1ahbyE3uoCH2NcO/iz7LBkKxy9s GklHdPy+GtoP0GTKKgKyZmSyR5Hh2qonh5aOwd/8FOxnxrNnOupOKXkn9IUtQhbu WI6uHRe9sIlmb3PsUig+eO5AnApV5vCO/b/uC9ZJhLoqNpCC/9aUB9P5gsrIjpMk aMW5U/8mu+PhhgZf3IG5FnQAkOOkQcJrmBhbYjmCzZ12O1VTNoA753PpKtCR5H5G lCZdmUrJI2KLB+vFiKEihj60eQTXHRrsl3ejdgnjumZbB+djWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5Fr0BKO5oDU02llwqe6jXCf5pWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNTdhZmY4NTEtMThiMi0z Yzk3LTkyNGItMWNiYjllZjhmMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRTLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCWeWMzv+AMWIPu7dbBDeXnCV/RKQo47CQMJNpCdbsUXSltuzkLFXvQ vJFvmpLgjJl01f9KFz/r74AH4Xz9jwPmnu9fWOCKo1dBh6i3vrDHRjDo5g29zv46 +vQjZc8HjgaPal2NdO47LWG+pXtcpG36Y216eFYj+3FKzyCJmbXDU+E1lGhWXLhX EEkn/BGybdEn8IAU2wMDa0/0PrjkNlZgyVRwWSfWSjtPu0d/AIcJ8HlvVDSSXSiJ 4JWEeZd2gLDJTRt2ZW4KtqWMRdwdOLGfElkIcTHlcqH1qijDHlGXrqvGEFcQMtM4 oX/DoSKMwjBCL5mOckPIjQvujQnK7Ys= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:04 2026 by rpki-client