$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa File: bc43eb96-6422-380c-9f25-98a56512ac46.roa (raw, json) Hash identifier: IihjNUCTjfpbZwIDXsL9DN3qqI+M0e9jnv5o71tafHI= Subject key identifier: 32:93:73:7D:8E:98:63:77:75:1F:34:0B:C8:5B:F4:56:21:0D:C4:A1 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA4C6957009D36ECBDA300 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11537 IP address blocks: 64.57.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4c:69:57:00:9d:36:ec:bd:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=b3366e27-21ab-4feb-a5b2-8bf03c9c57a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f4:02:d3:23:4d:ab:f1:fa:d7:76:09:a4:5e: de:34:19:85:e5:c4:49:a7:e5:ba:42:e3:a1:02:21: c3:4e:7f:d8:15:62:f0:c1:87:c6:19:7b:fa:b8:48: 7c:c5:77:19:f7:4e:09:bf:44:3a:35:fa:07:c9:a6: 40:01:56:59:78:21:58:7d:e1:ba:b1:d3:2a:41:01: e6:c0:74:ff:41:e4:ac:d5:80:24:f7:b6:fe:8a:78: 73:90:1f:3a:47:4f:56:e3:20:22:82:8e:ca:ff:d3: b7:7f:1f:9d:2b:73:bf:42:b9:04:aa:3c:cd:2f:a2: 5b:5c:fa:de:1e:ed:ea:ac:46:43:1a:ca:d9:6c:3a: b5:92:62:2c:cf:71:c1:48:c1:2b:c1:01:05:ed:33: 26:9f:27:55:fe:f2:d9:36:98:41:3f:95:b4:0c:83: 92:c7:c0:a2:b4:3b:1f:4b:04:83:dc:09:3a:99:da: 30:1d:e2:35:b2:e2:12:76:f8:f6:b8:79:14:07:71: a0:a3:de:0d:d2:3a:22:76:1c:51:2b:93:e7:3c:be: b1:70:98:34:29:bc:79:c2:ae:e7:a1:72:b4:bb:e2: 4f:ae:03:da:25:50:56:53:e1:45:60:7f:6d:29:49: e6:71:9d:88:aa:7a:e6:1c:9e:88:10:af:fe:78:00: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:73:7D:8E:98:63:77:75:1F:34:0B:C8:5B:F4:56:21:0D:C4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 64.57.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:91:be:d1:38:80:5b:c1:8e:83:5f:6f:6a:48:44:cb:c1:9c: a5:9b:96:31:ba:dd:18:13:30:83:7f:99:b1:d3:a6:db:de:e5: 71:67:9f:97:09:a6:a4:41:b4:a4:fb:c6:74:8e:d0:eb:db:9d: f0:82:c8:e6:bb:3a:31:8a:b6:47:a7:45:b5:e0:84:fe:4a:f2: db:74:fc:6e:37:16:63:7a:37:62:b8:ba:6f:63:e7:ad:bd:4b: a0:28:8a:84:fd:f3:f1:41:66:4b:64:92:67:35:1f:04:c3:8e: f7:ee:bb:f0:dd:74:80:49:50:f1:43:70:a0:0f:4a:d2:01:79: 05:57:43:91:f4:8b:a6:a0:42:58:9c:c7:5b:22:88:a0:fc:ca: f0:f1:39:13:7b:69:46:92:54:ff:5f:b4:71:05:d7:93:1b:2d: 34:6f:36:f3:2f:b5:c5:46:d6:06:42:c8:4b:94:7d:18:4a:78: 9c:78:32:54:9b:84:26:f9:8f:cf:72:a6:c5:fe:a4:48:56:06: 72:93:03:b0:4a:88:cf:32:95:b0:b4:1a:ca:07:7f:9e:95:f9: fa:5d:f9:21:19:d7:6b:00:1f:ef:01:79:7c:5e:1b:5a:47:7b: de:6b:06:a1:24:ed:60:1e:4e:2f:6d:c9:6a:bd:68:a5:09:6a: 6c:54:b7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykxpVwCdNuy9owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YjMzNjZlMjctMjFhYi00ZmViLWE1YjItOGJmMDNjOWM1N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPQC0yNNq/H613YJpF7eNBmF5cRJp+W6QuOh AiHDTn/YFWLwwYfGGXv6uEh8xXcZ904Jv0Q6NfoHyaZAAVZZeCFYfeG6sdMqQQHm wHT/QeSs1YAk97b+inhzkB86R09W4yAigo7K/9O3fx+dK3O/QrkEqjzNL6JbXPre Hu3qrEZDGsrZbDq1kmIsz3HBSMErwQEF7TMmnydV/vLZNphBP5W0DIOSx8CitDsf SwSD3Ak6mdowHeI1suISdvj2uHkUB3Ggo94N0joidhxRK5PnPL6xcJg0Kbx5wq7n oXK0u+JPrgPaJVBWU+FFYH9tKUnmcZ2IqnrmHJ6IEK/+eAA94QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKTc32OmGN3dR80C8hb9FYhDcShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYmM0M2ViOTYtNjQyMi0z ODBjLTlmMjUtOThhNTY1MTJhYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCRvtE4gFvBjoNfb2pIRMvBnKWbljG63RgTMIN/mbHTptve5XFnn5cJ pqRBtKT7xnSO0OvbnfCCyOa7OjGKtkenRbXghP5K8tt0/G43FmN6N2K4um9j5629 S6AoioT98/FBZktkkmc1HwTDjvfuu/DddIBJUPFDcKAPStIBeQVXQ5H0i6agQlic x1siiKD8yvDxORN7aUaSVP9ftHEF15MbLTRvNvMvtcVG1gZCyEuUfRhKeJx4MlSb hCb5j89ypsX+pEhWBnKTA7BKiM8ylbC0GsoHf56V+fpd+SEZ12sAH+8BeXxeG1pH e95rBqEk7WAeTi9tyWq9aKUJamxUt6Y= -----END CERTIFICATE-----Generated at Tue Mar 24 22:19:50 2026 by rpki-client