$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa File: ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa (raw, json) Hash identifier: 5n/PM122GjTgBF+2Ox2FSaqiHH7M/gHMvb/SAoNit5M= Subject key identifier: BD:CC:51:07:1B:AD:EE:0C:4F:E4:70:9B:FC:BE:55:7C:43:F3:A4:03 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A66644F4DFCDCB194D318 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 24.89.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:66:64:4f:4d:fc:dc:b1:94:d3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=5579f99e-7672-4cd6-a218-35bc340c194a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:4c:fa:e6:c1:8c:e2:42:51:84:ab:11:98: b2:8d:10:28:47:ac:b8:6b:aa:16:db:f7:fd:01:a1: 83:6d:81:87:79:95:62:86:24:06:11:3f:79:37:24: 8a:56:55:1d:a1:03:0e:f4:91:44:64:69:8e:6e:38: 83:75:8e:a1:71:79:c1:ea:8a:49:8c:70:d4:55:44: e4:be:c3:33:57:65:b8:26:44:eb:58:0a:48:b5:19: 2e:51:90:d8:67:94:c2:29:5e:7b:ea:10:9e:dc:fa: 38:0d:ef:d1:02:2f:dd:cf:5d:0b:57:85:47:95:dc: e9:d5:26:82:81:40:4f:e0:08:6e:a0:3d:c2:9c:63: f3:6c:f8:77:06:c6:86:dd:e7:c2:d7:00:de:b0:63: 28:c7:19:aa:74:1e:cc:ba:17:1f:01:cb:89:90:67: 85:3f:3b:5d:65:40:20:04:70:f5:94:59:ce:cd:02: ed:e3:0b:00:72:37:39:19:f1:9e:f9:d8:c6:d2:c3: b0:58:0b:b7:e3:1c:89:56:1f:04:7d:fc:87:6a:48: 1f:45:a6:c9:ae:23:96:d5:ea:91:f1:68:bd:7e:5b: 77:83:75:21:ef:40:bc:43:16:8e:d4:cc:55:4d:cf: 48:d1:8d:46:71:ef:0c:23:80:fe:b0:4d:c7:cc:4f: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:51:07:1B:AD:EE:0C:4F:E4:70:9B:FC:BE:55:7C:43:F3:A4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:61:32:5a:40:d5:09:34:2a:19:6e:c0:64:28:f0:f9:d4:c0: 74:b2:46:ce:a3:e7:ad:2d:1e:0d:d7:91:b8:ea:75:bf:5d:3e: 8c:04:4b:52:42:a2:57:a4:3a:49:86:53:a5:6c:94:3e:5f:93: 41:15:6c:bf:83:dd:df:08:4e:cd:fa:b4:43:ac:2b:4e:b1:3e: af:48:3f:39:a4:14:4d:3f:b7:f7:a4:1a:a8:bd:74:32:24:e2: cd:4d:64:6c:7c:3d:94:d6:50:75:9d:7e:fe:e3:6d:83:c4:fa: fa:14:61:c2:d5:4d:41:81:b3:da:15:91:b0:ea:78:46:4d:ad: 4e:a4:da:0b:49:e9:bd:87:ea:d7:5c:c4:4f:62:c9:57:2b:5c: 80:f2:a5:54:87:d4:cd:01:3f:78:c9:1c:84:79:ff:69:71:20: aa:08:25:e7:a9:d1:a7:f8:97:4b:fd:13:8f:f2:da:90:6f:7f: f2:89:fc:5d:a4:dd:4d:de:b2:1b:8d:e6:c9:ba:18:b9:1d:98: ce:90:cc:aa:6f:fc:74:fc:3b:0b:9c:22:02:2e:70:99:18:04: d4:35:74:08:8b:21:13:48:0f:ee:e7:35:be:a9:49:66:cb:98: bf:f6:98:c8:e9:28:ed:17:7b:1a:0e:58:ee:18:f5:6c:69:c0: 8d:49:cf:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmZkT0383LGU0xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NTU3OWY5OWUtNzY3Mi00Y2Q2LWEyMTgtMzViYzM0MGMxOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwhM+ubBjOJCUYSrEZiyjRAoR6y4a6oW2/f9 AaGDbYGHeZVihiQGET95NySKVlUdoQMO9JFEZGmObjiDdY6hcXnB6opJjHDUVUTk vsMzV2W4JkTrWApItRkuUZDYZ5TCKV576hCe3Po4De/RAi/dz10LV4VHldzp1SaC gUBP4AhuoD3CnGPzbPh3BsaG3efC1wDesGMoxxmqdB7MuhcfAcuJkGeFPztdZUAg BHD1lFnOzQLt4wsAcjc5GfGe+djG0sOwWAu34xyJVh8EffyHakgfRabJriOW1eqR 8Wi9flt3g3Uh70C8QxaO1MxVTc9I0Y1Gce8MI4D+sE3HzE83JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3MUQcbre4MT+Rwm/y+VXxD86QDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZmZiYzMyZWEtMzFhOS0z OGY1LTgxNTAtYWQ3YzhhMDQ0YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGFkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlhMlpA1Qk0KhluwGQo8PnUwHSyRs6j560tHg3Xkbjqdb9dPowES1JC olekOkmGU6VslD5fk0EVbL+D3d8ITs36tEOsK06xPq9IPzmkFE0/t/ekGqi9dDIk 4s1NZGx8PZTWUHWdfv7jbYPE+voUYcLVTUGBs9oVkbDqeEZNrU6k2gtJ6b2H6tdc xE9iyVcrXIDypVSH1M0BP3jJHIR5/2lxIKoIJeep0af4l0v9E4/y2pBvf/KJ/F2k 3U3eshuN5sm6GLkdmM6QzKpv/HT8OwucIgIucJkYBNQ1dAiLIRNID+7nNb6pSWbL mL/2mMjpKO0XexoOWO4Y9WxpwI1Jz64= -----END CERTIFICATE-----Generated at Wed Apr 8 22:58:39 2026 by rpki-client