$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/eb453663-5b86-3561-99f6-c2c79f2476ec.roa File: eb453663-5b86-3561-99f6-c2c79f2476ec.roa (raw, json) Hash identifier: FHAizs9Br6mV+KVj6aPg9Z3NnUHOplU1e+0BJSAtOpw= Subject key identifier: A2:1C:57:BE:72:FC:88:7E:44:7D:2E:D3:C3:FE:8B:D0:EA:F5:DC:BB Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A70A162A291E62E0DB240 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/eb453663-5b86-3561-99f6-c2c79f2476ec.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 209.127.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:a1:62:a2:91:e6:2e:0d:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=ea427d6d-c75b-4e9b-bae6-b203a60b2d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:5f:9c:db:65:c4:80:c4:cd:cf:70:de:4b: 68:3d:61:70:d9:17:c7:6e:42:fd:08:d3:c9:37:53: 7f:c1:7e:b7:b6:ca:44:32:9d:4b:14:f9:69:cc:18: 7c:d8:95:7f:35:4d:16:20:45:06:c8:65:b5:2b:7c: b7:d7:27:c8:86:51:c2:20:95:b7:db:e8:17:f2:83: e6:68:f6:04:50:29:90:f9:3b:1f:28:fb:b6:8c:67: a0:c1:56:31:b4:2f:4e:ac:2a:df:f3:0e:45:cd:20: 81:15:17:b8:7d:5c:dc:c1:2f:9d:57:cd:8f:30:4a: ef:40:b6:12:af:f4:4c:54:0d:68:2d:4c:7e:c3:eb: de:8a:a8:0b:58:76:c1:72:68:6a:93:0e:a5:f4:5e: 4c:b8:0d:fe:f2:e1:80:b9:b7:d3:3a:cb:e8:6d:07: 99:7a:d7:7b:19:b8:1d:f9:1a:78:8a:60:dd:d5:ad: ac:79:68:82:a3:a7:37:3b:3b:a8:9b:30:79:aa:33: b7:d9:fe:1d:a2:25:da:58:9e:03:c3:2f:59:76:aa: 62:5c:7a:66:8b:27:a1:40:75:a7:17:9b:61:65:39: a4:8c:0b:bd:c5:66:52:c7:b1:c7:20:e4:94:73:eb: 5d:5c:d3:59:3b:da:ba:ea:09:54:0c:1d:07:63:3a: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1C:57:BE:72:FC:88:7E:44:7D:2E:D3:C3:FE:8B:D0:EA:F5:DC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/eb453663-5b86-3561-99f6-c2c79f2476ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 209.127.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c8:7d:e1:1d:9e:06:52:77:42:a8:ea:b4:9a:00:21:91:8d: 67:aa:ac:99:95:bd:f1:8e:3b:32:a0:6b:ea:b4:f9:04:2d:cf: cb:a7:68:dc:9d:29:65:2b:e4:40:bd:08:2a:e6:c7:e8:2f:a4: 82:f7:a8:ac:d4:52:b7:9d:37:8d:2a:9a:8e:ae:bd:f7:4b:de: d8:ad:aa:b1:9d:4c:2a:89:33:93:64:79:7f:77:93:4e:f7:76: d6:31:e2:fd:72:e5:d0:33:0b:8f:67:52:46:03:06:7a:f0:36: 08:cf:a0:cb:7f:5d:ca:85:a8:ce:8b:cf:47:57:67:94:04:b3: e6:0d:ea:5a:96:58:b8:3e:83:5f:ad:ac:2f:e6:35:c4:0a:d4: 25:f3:2f:79:b3:c3:dd:b6:66:70:2c:f9:e4:59:b7:bd:f6:8f: 76:66:19:20:ce:dd:1b:d4:6b:39:9d:22:af:78:ce:4f:ef:da: 40:39:95:e4:14:25:cb:0f:07:ae:28:ef:7a:76:20:16:9d:04: ae:37:9d:16:0e:d7:04:ae:10:f4:d5:94:b9:0a:21:a8:14:ad: 33:26:03:6f:de:5e:ac:e0:60:ab:bc:3d:37:da:32:38:53:a3: a3:fe:b1:d0:ae:69:5b:34:20:f9:5f:48:d5:c8:75:c6:4c:bf: 08:21:5c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnChYqKR5i4NskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZWE0MjdkNmQtYzc1Yi00ZTliLWJhZTYtYjIwM2E2MGIyZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJNfnNtlxIDEzc9w3ktoPWFw2RfHbkL9CNPJ N1N/wX63tspEMp1LFPlpzBh82JV/NU0WIEUGyGW1K3y31yfIhlHCIJW32+gX8oPm aPYEUCmQ+TsfKPu2jGegwVYxtC9OrCrf8w5FzSCBFRe4fVzcwS+dV82PMErvQLYS r/RMVA1oLUx+w+veiqgLWHbBcmhqkw6l9F5MuA3+8uGAubfTOsvobQeZetd7Gbgd +Rp4imDd1a2seWiCo6c3OzuomzB5qjO32f4doiXaWJ4Dwy9ZdqpiXHpmiyehQHWn F5thZTmkjAu9xWZSx7HHIOSUc+tdXNNZO9q66glUDB0HYzrOFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIcV75y/Ih+RH0u08P+i9Dq9dy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWI0NTM2NjMtNWI4Ni0z NTYxLTk5ZjYtYzJjNzlmMjQ3NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvIfeEdngZSd0Ko6rSaACGRjWeqrJmVvfGOOzKga+q0+QQtz8unaNyd KWUr5EC9CCrmx+gvpIL3qKzUUredN40qmo6uvfdL3titqrGdTCqJM5NkeX93k073 dtYx4v1y5dAzC49nUkYDBnrwNgjPoMt/XcqFqM6Lz0dXZ5QEs+YN6lqWWLg+g1+t rC/mNcQK1CXzL3mzw922ZnAs+eRZt732j3ZmGSDO3RvUazmdIq94zk/v2kA5leQU JcsPB64o73p2IBadBK43nRYO1wSuEPTVlLkKIagUrTMmA2/eXqzgYKu8PTfaMjhT o6P+sdCuaVs0IPlfSNXIdcZMvwghXKU= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:05 2026 by rpki-client