$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa File: dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa (raw, json) Hash identifier: j14/3euk1Ea6x5CftTJkgp7PjNph41UwghqNTY67Dcg= Subject key identifier: 50:98:C4:63:41:1C:D1:8F:86:48:46:89:7C:B6:C2:FA:A9:14:38:1E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A66586CBD480A6581E400 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 24.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:66:58:6c:bd:48:0a:65:81:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=9c30539b-fc1e-4e04-9164-fd194ef7e651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e3:cb:8e:bc:c1:12:ae:94:27:8d:3d:45:21: 60:21:0f:bd:3f:0c:df:b1:b9:98:a2:aa:08:19:f9: f4:e8:68:cc:b1:f3:56:36:ee:42:eb:12:b1:a4:94: cb:c1:2f:00:99:c7:8e:76:ac:75:49:56:52:72:41: 1f:e6:94:3b:30:31:a6:e5:c3:53:95:9a:8d:86:6b: 37:0f:c0:04:e0:83:79:0f:1b:b7:26:4c:10:b1:32: ba:fe:59:64:ac:40:f0:78:ca:72:03:7b:6f:46:28: 17:db:0b:02:e8:38:9d:1d:d6:b2:fd:dc:e8:2a:f3: aa:7b:21:b9:0e:c9:5a:c1:e1:3b:bb:82:32:34:40: 38:6f:a1:17:56:29:1f:89:d2:81:39:72:2c:40:8a: 90:71:af:55:d9:b3:78:f9:8b:bd:d3:e7:af:8a:f1: b4:b6:ea:66:21:ee:86:cd:c4:98:4e:50:4b:4c:6b: 6c:73:c9:1e:73:aa:73:6c:6c:f8:73:e6:f0:b6:ac: ea:75:8b:58:54:d9:1e:70:0d:34:0d:f7:01:78:5c: df:e5:3e:b4:0f:b9:f3:b2:ee:19:f8:a9:75:6c:59: 3a:07:74:de:31:cd:67:d6:42:37:5c:b2:f5:f0:32: ca:06:ce:9d:09:b1:81:39:e3:3f:7b:bd:8c:69:ea: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:98:C4:63:41:1C:D1:8F:86:48:46:89:7C:B6:C2:FA:A9:14:38:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1a:5a:1e:f5:9a:95:96:ab:61:e0:67:16:f3:86:b7:08:8a: 94:d6:48:60:16:97:1e:61:2e:81:a3:18:b7:d6:84:3f:a1:28: b0:d9:eb:cd:12:b7:22:bf:b9:03:24:7a:f6:4e:cd:74:ec:9c: e8:5c:a7:c9:2c:05:1b:7b:f9:85:ae:99:31:60:6b:6b:62:ed: 7e:38:7d:7a:c7:7b:5d:02:49:93:5e:87:6e:0a:f7:e1:0a:f9: 82:1f:39:72:2d:c5:b7:2b:b7:37:6b:e7:6a:10:94:77:b5:df: 36:b2:17:c9:7c:60:17:2e:33:ac:c1:55:7a:b7:75:68:cf:5f: 55:e8:b2:81:0b:a8:b4:80:9c:a6:45:78:5d:bc:a1:0e:43:74: 78:50:72:83:6c:d1:ae:46:df:e3:1e:ef:36:63:df:e1:35:ec: 78:ce:25:0e:be:0d:26:c1:07:ba:b8:4f:e2:70:48:ac:dd:bb: ad:41:49:62:4d:7e:2a:11:77:7f:29:41:5d:be:43:6c:dc:24: 44:64:a5:88:85:3c:99:87:ea:fe:db:2c:51:ac:a2:ce:e6:6e: ab:1d:80:67:e5:62:38:94:f2:86:31:dd:18:c6:75:5b:3f:6c: d3:a3:6e:b6:b6:d5:6d:69:90:3c:8e:6f:9b:70:78:94:b6:ae: f2:59:53:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmZYbL1ICmWB5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OWMzMDUzOWItZmMxZS00ZTA0LTkxNjQtZmQxOTRlZjdlNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+PLjrzBEq6UJ409RSFgIQ+9PwzfsbmYoqoI Gfn06GjMsfNWNu5C6xKxpJTLwS8AmceOdqx1SVZSckEf5pQ7MDGm5cNTlZqNhms3 D8AE4IN5Dxu3JkwQsTK6/llkrEDweMpyA3tvRigX2wsC6DidHday/dzoKvOqeyG5 DslaweE7u4IyNEA4b6EXVikfidKBOXIsQIqQca9V2bN4+Yu90+evivG0tupmIe6G zcSYTlBLTGtsc8kec6pzbGz4c+bwtqzqdYtYVNkecA00DfcBeFzf5T60D7nzsu4Z +Kl1bFk6B3TeMc1n1kI3XLL18DLKBs6dCbGBOeM/e72MaequEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCYxGNBHNGPhkhGiXy2wvqpFDgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGFjMzY5YTgtZjRkZS0z YWFmLWJkYTYtMWI4M2MzMWYyZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgaWh71mpWWq2HgZxbzhrcIipTWSGAWlx5hLoGjGLfWhD+hKLDZ680S tyK/uQMkevZOzXTsnOhcp8ksBRt7+YWumTFga2ti7X44fXrHe10CSZNeh24K9+EK +YIfOXItxbcrtzdr52oQlHe13zayF8l8YBcuM6zBVXq3dWjPX1XosoELqLSAnKZF eF28oQ5DdHhQcoNs0a5G3+Me7zZj3+E17HjOJQ6+DSbBB7q4T+JwSKzdu61BSWJN fioRd38pQV2+Q2zcJERkpYiFPJmH6v7bLFGsos7mbqsdgGflYjiU8oYx3RjGdVs/ bNOjbra21W1pkDyOb5tweJS2rvJZU/M= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:07 2026 by rpki-client