$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa File: d90de460-0499-33b8-aecd-22d18def726e.roa (raw, json) Hash identifier: yXvFJihrEgf0RJKp3AUEK81hkjgYf8NHnxZ85eilH7o= Subject key identifier: 3A:F2:F2:17:6C:C6:B9:05:02:F2:90:06:1F:02:6B:A8:6A:28:B0:52 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A71932737F2B473E7CB00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 1651 IP address blocks: 24.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:71:93:27:37:f2:b4:73:e7:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=52f1a3e5-e565-44f8-b383-d2d70f87eef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:64:7a:ad:95:4a:75:48:d1:c4:44:38:45: 68:fb:d0:fa:55:59:f5:3d:df:67:a8:fb:71:19:68: 2b:4a:31:75:a6:84:cc:08:ce:0f:bb:98:d9:56:bf: 65:e7:aa:4f:e3:40:69:9c:b6:4f:24:2f:38:84:e3: 81:d5:6e:f3:5c:67:16:84:45:49:09:88:4f:9d:b2: ac:cd:eb:6d:2b:a2:2e:30:ba:a4:9e:c6:a0:24:f0: d0:3b:63:f2:3a:ce:b6:10:ea:a0:2a:65:fc:84:96: 6e:bb:25:a6:7a:48:ac:67:44:77:cc:8b:a1:dd:c3: f7:c1:ec:ac:1f:bf:ad:7e:da:be:d8:ff:65:1e:9e: 72:b5:a4:37:89:76:45:63:a7:70:46:ea:7f:7d:33: 62:53:30:50:42:6d:85:42:e8:d8:b6:2d:87:f6:fe: 51:0e:6d:e0:12:bd:68:39:0f:96:13:ff:6b:cf:a7: 21:44:48:75:71:30:2b:ef:07:51:02:ee:d9:9b:d0: cc:26:14:63:74:e8:85:d3:92:f3:9d:ed:65:33:2b: ac:0b:6f:3d:ea:fa:94:10:09:9e:f8:51:ce:37:f0: 6a:1e:09:75:10:cc:84:e3:c9:a0:4a:55:27:7a:33: 4c:d8:cd:06:17:82:0c:43:73:de:b8:61:a8:d6:43: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:F2:17:6C:C6:B9:05:02:F2:90:06:1F:02:6B:A8:6A:28:B0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b0:bc:a5:9b:fb:73:3f:a4:8f:72:a3:cf:d8:a7:d8:0d:9f: 54:2a:23:56:07:7a:be:36:d6:17:49:fb:85:dd:b1:b9:bd:a4: e6:94:05:e2:a4:3d:e0:ad:aa:ea:08:5c:6a:55:af:65:1e:d0: 6d:8a:19:9a:51:a7:e7:79:2a:32:e0:a4:60:72:13:89:eb:78: 24:07:a0:0c:dc:85:6e:5f:19:bc:0a:73:a5:b2:01:07:4d:04: fa:de:0f:20:09:24:a9:e5:66:63:63:35:2e:a5:05:0e:45:fd: cc:7c:77:c8:5b:46:af:6e:5d:5b:1a:7d:44:db:e7:0d:b1:e7: 5b:2f:ab:1b:92:4b:1c:d5:7c:d6:2c:c6:33:fb:5c:2b:20:59: 5d:26:c9:fd:ad:ef:20:6a:a9:91:e6:a3:b8:9b:23:66:48:6b: 20:48:0a:53:29:5a:15:45:a2:c0:60:77:0b:40:61:ec:2f:a5: 10:a2:dd:6d:c0:b5:ad:13:64:ee:33:2c:74:33:06:90:c4:4b: 02:6b:b8:9e:0a:6e:28:fc:52:94:e1:82:d3:69:35:b6:fd:3e: dc:b1:55:30:ad:d7:a9:03:df:78:41:35:ec:bf:4b:d6:1b:b3: 7f:16:4d:c2:2a:7d:50:08:62:0d:c9:22:ab:9e:e9:fe:46:41: 5e:89:f3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnGTJzfytHPnywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NTJmMWEzZTUtZTU2NS00NGY4LWIzODMtZDJkNzBmODdlZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF1keq2VSnVI0cREOEVo+9D6VVn1Pd9nqPtx GWgrSjF1poTMCM4Pu5jZVr9l56pP40BpnLZPJC84hOOB1W7zXGcWhEVJCYhPnbKs zettK6IuMLqknsagJPDQO2PyOs62EOqgKmX8hJZuuyWmekisZ0R3zIuh3cP3weys H7+tftq+2P9lHp5ytaQ3iXZFY6dwRup/fTNiUzBQQm2FQujYti2H9v5RDm3gEr1o OQ+WE/9rz6chREh1cTAr7wdRAu7Zm9DMJhRjdOiF05Lzne1lMyusC2896vqUEAme +FHON/BqHgl1EMyE48mgSlUnejNM2M0GF4IMQ3PeuGGo1kNoawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDry8hdsxrkFAvKQBh8Ca6hqKLBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDkwZGU0NjAtMDQ5OS0z M2I4LWFlY2QtMjJkMThkZWY3MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGewvKWb+3M/pI9yo8/Yp9gNn1QqI1YHer421hdJ+4Xdsbm9pOaUBeKk PeCtquoIXGpVr2Ue0G2KGZpRp+d5KjLgpGByE4nreCQHoAzchW5fGbwKc6WyAQdN BPreDyAJJKnlZmNjNS6lBQ5F/cx8d8hbRq9uXVsafUTb5w2x51svqxuSSxzVfNYs xjP7XCsgWV0myf2t7yBqqZHmo7ibI2ZIayBIClMpWhVFosBgdwtAYewvpRCi3W3A ta0TZO4zLHQzBpDESwJruJ4Kbij8UpThgtNpNbb9PtyxVTCt16kD33hBNey/S9Yb s38WTcIqfVAIYg3JIque6f5GQV6J83E= -----END CERTIFICATE-----Generated at Wed Apr 8 22:59:41 2026 by rpki-client