$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa File: bfad3b88-3220-3c11-abe6-986866e4db67.roa (raw, json) Hash identifier: OacIR9w8otqEqX2O1AtiZ8xnbc/4jK6e+dpcGHlh19Y= Subject key identifier: 13:26:AD:F2:56:FB:41:08:06:6C:62:B2:8F:08:BA:BD:14:64:C0:30 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F4328584E4129D518736AA3BBC0E9C0A0 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 14434 IP address blocks: 162.247.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d5:18:73:6a:a3:bb:c0:e9:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=ed284686-ff97-4ae4-acf1-2b341bb15971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:5c:da:c0:6a:49:a7:5e:bb:d7:90:10:08: 25:fd:8e:53:9b:57:3a:c9:c0:f1:59:27:f3:f2:88: 20:8a:66:86:e0:5b:b9:21:3d:a2:0a:7a:6c:33:8f: cd:b8:46:cd:68:33:92:34:81:b7:05:b0:51:a3:d2: 48:62:58:e9:d8:39:9c:24:64:39:28:29:bf:bf:2d: 22:74:be:f2:0a:b3:c2:ac:8a:6e:a1:a5:bc:fd:aa: e9:7c:ec:51:0f:0a:f8:bf:08:02:ee:8b:9a:55:56: cc:61:d8:5e:4b:18:84:93:f8:12:17:4a:dc:aa:b9: f9:53:63:3b:21:62:b8:31:95:28:e9:c6:cf:a2:61: f8:4b:7b:d7:1d:41:f4:5d:c6:4d:91:77:22:c0:c1: a2:44:e2:a0:ff:52:2e:c0:65:00:8e:70:ad:ab:09: 78:bb:04:d0:c0:df:1e:b4:01:2d:19:ad:3b:dd:f5: 6b:db:30:df:f7:68:e2:80:fc:c6:bd:20:f0:ac:4b: 1b:92:bd:bf:ca:69:0b:2d:b9:25:2a:e5:6a:ef:f1: 51:d7:f6:e6:a7:3f:7b:ab:f2:7b:4a:94:f8:dc:c9: 34:d6:94:1c:f9:0e:e6:ed:46:71:9d:2a:c3:4e:6c: a2:90:cc:cc:51:2a:bc:67:4e:3a:c6:bd:6e:04:8a: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:26:AD:F2:56:FB:41:08:06:6C:62:B2:8F:08:BA:BD:14:64:C0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv4: 162.247.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2f:14:2a:4c:ac:7d:bf:26:ab:0d:2c:46:7c:01:ce:64:e6: 9d:0f:0d:da:71:e5:05:dc:43:38:83:1f:fa:25:54:c0:05:9e: b1:c3:aa:db:4b:ba:54:8e:1b:d9:dd:a3:c6:60:dc:05:e7:f0: 01:af:bb:c8:8d:44:2e:9e:ce:ae:8d:84:d0:ab:e1:63:24:a1: 5b:a1:00:12:47:0a:34:aa:56:20:c1:d1:e5:6e:95:fa:a6:7d: 4a:67:f9:7e:39:43:ab:75:19:79:6e:b8:dc:79:61:d6:19:68: 2d:d9:91:7a:cb:ad:c9:6a:8e:9f:c2:23:1b:f6:64:58:64:e2: 90:08:08:e5:9a:a5:ed:14:ad:18:23:8d:e0:22:ed:d2:31:25: b1:12:c8:83:fc:56:35:0c:7b:bc:e8:08:de:32:ca:48:92:ab: a9:f0:44:26:0e:76:f0:04:76:56:64:07:26:b7:43:59:6e:5b: c3:3c:dc:73:11:08:a7:29:e7:bc:3b:91:29:7d:7f:57:a3:5e: 9b:bf:5f:0a:3d:4d:3b:4f:a0:3e:ce:e4:65:41:0e:fb:0a:63: 8a:06:d1:1b:07:c0:44:fe:e5:16:60:f4:74:09:1f:06:15:0e: c4:0a:97:10:36:62:ca:27:0a:fe:f8:6b:06:d3:a2:db:92:b2: d2:bf:76:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdUYc2qju8DpwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZWQyODQ2ODYtZmY5Ny00YWU0LWFjZjEtMmIzNDFiYjE1OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcVc2sBqSadeu9eQEAgl/Y5Tm1c6ycDxWSfz 8oggimaG4Fu5IT2iCnpsM4/NuEbNaDOSNIG3BbBRo9JIYljp2DmcJGQ5KCm/vy0i dL7yCrPCrIpuoaW8/arpfOxRDwr4vwgC7ouaVVbMYdheSxiEk/gSF0rcqrn5U2M7 IWK4MZUo6cbPomH4S3vXHUH0XcZNkXciwMGiROKg/1IuwGUAjnCtqwl4uwTQwN8e tAEtGa073fVr2zDf92jigPzGvSDwrEsbkr2/ymkLLbklKuVq7/FR1/bmpz97q/J7 SpT43Mk01pQc+Q7m7UZxnSrDTmyikMzMUSq8Z046xr1uBIrM9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMmrfJW+0EIBmxiso8Iur0UZMAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvYmZhZDNiODgtMzIyMC0z YzExLWFiZTYtOTg2ODY2ZTRkYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQvFCpMrH2/JqsNLEZ8Ac5k5p0PDdpx5QXcQziDH/olVMAFnrHDqttL ulSOG9ndo8Zg3AXn8AGvu8iNRC6ezq6NhNCr4WMkoVuhABJHCjSqViDB0eVulfqm fUpn+X45Q6t1GXluuNx5YdYZaC3ZkXrLrclqjp/CIxv2ZFhk4pAICOWape0UrRgj jeAi7dIxJbESyIP8VjUMe7zoCN4yykiSq6nwRCYOdvAEdlZkBya3Q1luW8M83HMR CKcp57w7kSl9f1ejXpu/Xwo9TTtPoD7O5GVBDvsKY4oG0RsHwET+5RZg9HQJHwYV DsQKlxA2YsonCv74awbTotuSstK/dsA= -----END CERTIFICATE-----Generated at Wed Jul 8 16:10:41 2026 by rpki-client