$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa File: b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa (raw, json) Hash identifier: ETNCEVtYcNJreqZk2cnEBt9TgEUntvlMbj6xOIN8SK4= Subject key identifier: 0A:4B:7E:BE:54:50:22:27:23:F6:51:68:C2:14:88:5C:16:94:4F:8E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A6F57CC71916A0A75BAC0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 24.89.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6f:57:cc:71:91:6a:0a:75:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=ae8271d2-2386-47a2-af4b-7d934c0441b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:c2:c6:9a:7e:41:30:0a:1b:12:98:d5:a7: f1:60:da:2e:b2:c9:0c:95:af:9e:2e:4e:ee:08:47: a4:ff:53:06:20:55:09:a9:33:36:7a:46:5f:c9:a0: 90:3c:9c:53:7a:f9:70:1c:43:25:d6:8b:16:a2:2c: 11:b7:59:ea:a5:63:ce:3a:92:7a:91:e3:77:16:20: f9:32:e2:78:ed:38:ee:45:d7:34:55:e0:90:f7:9e: 08:e4:e1:82:18:81:33:2d:31:cb:96:bb:86:6e:60: 07:3e:93:b1:c2:c9:f4:a4:1a:6b:67:4a:2e:37:d9: c6:0f:9f:5b:e4:89:61:2a:31:57:e5:e2:1f:33:4c: 22:79:82:75:ac:e4:39:98:23:95:b9:63:02:86:0b: 9b:f2:39:1b:0f:fd:de:a4:fe:cd:fc:d2:83:09:e7: ab:fb:c4:00:56:e3:ad:c8:00:97:ba:09:1a:a6:fa: ed:ec:0a:af:cf:15:5f:2c:3d:2e:c3:cf:03:71:e7: 35:a4:b5:88:b3:8c:e8:7b:9c:bd:c5:1d:27:05:72: 7e:4b:9f:36:ae:92:9d:a4:f0:42:3d:b9:62:70:0b: e9:77:00:00:d1:b9:bc:3e:35:b0:a0:e8:45:e6:d1: 56:4b:84:37:88:d9:63:4b:34:59:ba:ff:8e:0f:b8: 76:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:7E:BE:54:50:22:27:23:F6:51:68:C2:14:88:5C:16:94:4F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:95:04:76:4c:aa:dd:cf:00:50:c2:ce:49:bd:c9:fd:60:0e: fd:2e:17:c6:2b:d0:15:c9:39:a3:f7:28:50:4b:94:ef:08:fb: 35:7a:3a:d8:36:62:1d:29:9b:80:15:3d:0c:99:d9:ac:8d:db: 4c:cd:9b:15:57:8b:c4:e2:76:78:05:39:84:3c:e0:e2:b3:04: d8:71:84:38:ea:ff:48:2a:62:4e:27:fd:48:37:7a:ff:40:44: d2:f3:64:2f:9a:e9:c7:37:93:bc:ff:64:df:35:95:38:87:e4: 56:b2:18:0e:c7:0c:1a:75:81:c4:b2:2b:f4:3b:bf:f3:76:91: ed:c0:ed:fd:d6:21:e8:6a:1c:9b:21:ba:91:be:9f:dd:c3:ba: e2:55:83:b1:bc:8d:bc:f6:21:37:63:94:2d:72:9d:26:9a:2a: d5:de:78:c3:bf:fb:fc:4f:62:30:0e:6e:4c:8e:a3:ff:f0:58: 62:52:9c:9a:39:bd:ed:71:75:8d:99:cc:75:82:9b:f6:cf:55: 49:da:f8:33:97:3e:7a:55:77:fc:54:68:d6:56:31:6c:22:13: a7:32:9f:fc:b7:d4:58:65:84:56:85:17:83:7b:d3:cf:3c:8a: 87:3c:3d:a0:85:41:0b:d2:4d:3a:2a:a5:24:5c:d9:29:31:ec: 56:b4:85:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm9XzHGRagp1usAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YWU4MjcxZDItMjM4Ni00N2EyLWFmNGItN2Q5MzRjMDQ0MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjifCxpp+QTAKGxKY1afxYNousskMla+eLk7u CEek/1MGIFUJqTM2ekZfyaCQPJxTevlwHEMl1osWoiwRt1nqpWPOOpJ6keN3FiD5 MuJ47TjuRdc0VeCQ954I5OGCGIEzLTHLlruGbmAHPpOxwsn0pBprZ0ouN9nGD59b 5IlhKjFX5eIfM0wieYJ1rOQ5mCOVuWMChgub8jkbD/3epP7N/NKDCeer+8QAVuOt yACXugkapvrt7AqvzxVfLD0uw88Dcec1pLWIs4zoe5y9xR0nBXJ+S582rpKdpPBC PblicAvpdwAA0bm8PjWwoOhF5tFWS4Q3iNljSzRZuv+OD7h26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApLfr5UUCInI/ZRaMIUiFwWlE+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjRlN2Y1Y2YtZGFhNC0z YzZkLTkyNWMtMmM4OTgyMGY2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeVBHZMqt3PAFDCzkm9yf1gDv0uF8Yr0BXJOaP3KFBLlO8I+zV6Otg2 Yh0pm4AVPQyZ2ayN20zNmxVXi8TidngFOYQ84OKzBNhxhDjq/0gqYk4n/Ug3ev9A RNLzZC+a6cc3k7z/ZN81lTiH5FayGA7HDBp1gcSyK/Q7v/N2ke3A7f3WIehqHJsh upG+n93DuuJVg7G8jbz2ITdjlC1ynSaaKtXeeMO/+/xPYjAObkyOo//wWGJSnJo5 ve1xdY2ZzHWCm/bPVUna+DOXPnpVd/xUaNZWMWwiE6cyn/y31FhlhFaFF4N70888 ioc8PaCFQQvSTToqpSRc2Skx7Fa0hcQ= -----END CERTIFICATE-----Generated at Wed Apr 8 23:01:19 2026 by rpki-client