$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8c55a84a-2549-37b7-9ea1-93c06cb99c07.roa File: 8c55a84a-2549-37b7-9ea1-93c06cb99c07.roa (raw, json) Hash identifier: ROVsUogzezDkfQtwPaVdYRldxdwRzy+LiyPVQ8LRI24= Subject key identifier: 87:9B:02:98:C8:7B:05:91:C3:60:F1:B2:E9:56:7C:97:5D:05:2A:49 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584D9FB58D04C7EC5A35CFE92080 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8c55a84a-2549-37b7-9ea1-93c06cb99c07.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 11588 IP address blocks: 167.17.96.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8d:04:c7:ec:5a:35:cf:e9:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=6c339aea-27f4-4014-808b-f85c9aaaecb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:61:77:ff:65:a1:0a:1d:d0:65:df:75:1a: 66:65:04:63:f3:38:8c:80:2e:44:e8:8e:36:07:47: 14:ab:aa:9f:fd:6f:52:d4:71:4a:3e:c0:51:02:cd: bc:90:a3:06:50:54:fb:85:3f:dd:f5:49:18:4a:8c: 9f:0c:9b:a9:a9:39:d5:3e:9e:f6:96:90:80:10:58: 66:a8:5b:14:42:44:58:1d:d3:dc:b0:c1:92:b8:b1: 23:85:99:a3:b8:59:05:03:f6:7c:3a:92:5a:68:44: 97:c2:6b:7b:39:f5:f8:4b:3c:c8:af:61:d4:8e:1b: e4:52:e8:c1:24:67:ac:27:3b:32:3b:44:72:00:e7: 07:7f:a4:9a:c7:d8:79:08:7f:0c:36:ad:bf:e3:0a: 10:08:b9:91:84:ca:50:61:44:a0:85:a6:f1:b8:ad: 67:32:70:0e:36:d5:66:42:0a:80:5c:fb:93:b1:a6: 8d:b7:04:f2:df:c4:ec:9f:43:f9:5c:ac:69:c3:2b: 74:4a:15:66:c8:40:d3:05:4f:69:c9:1a:bd:ae:95: e6:a0:b2:0b:15:29:1c:c7:52:de:69:ee:ca:81:56: 0b:2f:19:d2:4c:b2:c1:53:5a:90:54:33:93:72:be: 4b:a4:f5:f0:33:50:48:68:bc:c5:e4:09:c1:cc:b5: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:02:98:C8:7B:05:91:C3:60:F1:B2:E9:56:7C:97:5D:05:2A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8c55a84a-2549-37b7-9ea1-93c06cb99c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 167.17.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d6:87:da:48:c9:37:9c:49:21:09:42:e7:b9:65:05:b0:d9: 9a:16:f8:9a:4d:6a:06:55:43:b3:55:c9:2c:28:96:18:64:ce: a8:a7:44:e3:a3:07:6d:a5:92:d4:e3:b9:46:dc:45:97:0d:a0: 42:a7:7e:42:2e:e4:34:50:ab:2f:b9:75:5a:93:d6:d5:4d:7e: 13:3c:8e:8f:fe:e9:59:43:5e:30:35:4e:2b:6e:14:c6:c1:40: f7:86:41:23:5c:9c:f9:e7:ea:94:57:dc:6c:fc:ba:d9:77:7c: 7c:7e:d1:6c:14:58:01:92:99:10:a0:4b:d3:99:62:92:fd:dd: 58:58:5d:d6:35:37:61:62:7e:ec:0d:dc:53:d4:71:20:9d:ae: 71:1d:86:4c:c7:19:a0:2f:7c:01:37:53:b7:a7:e3:36:70:f0: b1:de:3a:4e:c6:cc:bf:54:2e:e5:00:17:fb:31:a9:4d:a7:96: b4:5c:ed:dd:20:04:d9:a0:3e:09:4d:2c:bf:6d:e0:05:0f:07: 1e:d5:47:7c:7c:e6:e2:8d:dc:d4:a1:6f:85:ac:75:1d:5c:f3: 45:31:b6:61:15:41:83:81:33:e4:44:b9:21:35:60:ab:f3:cb: 3d:73:98:ee:bf:c8:b3:32:fc:e1:45:7b:b1:e3:89:a7:e0:03: 17:5c:e7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftY0Ex+xaNc/pIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NmMzMzlhZWEtMjdmNC00MDE0LTgwOGItZjg1YzlhYWFlY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIJhd/9loQod0GXfdRpmZQRj8ziMgC5E6I42 B0cUq6qf/W9S1HFKPsBRAs28kKMGUFT7hT/d9UkYSoyfDJupqTnVPp72lpCAEFhm qFsUQkRYHdPcsMGSuLEjhZmjuFkFA/Z8OpJaaESXwmt7OfX4SzzIr2HUjhvkUujB JGesJzsyO0RyAOcHf6Sax9h5CH8MNq2/4woQCLmRhMpQYUSghabxuK1nMnAONtVm QgqAXPuTsaaNtwTy38Tsn0P5XKxpwyt0ShVmyEDTBU9pyRq9rpXmoLILFSkcx1Le ae7KgVYLLxnSTLLBU1qQVDOTcr5LpPXwM1BIaLzF5AnBzLV6LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIebApjIewWRw2DxsulWfJddBSpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOGM1NWE4NGEtMjU0OS0z N2I3LTllYTEtOTNjMDZjYjk5YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpxFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPWh9pIyTecSSEJQue5ZQWw2ZoW+JpNagZVQ7NVySwolhhkzqinROOj B22lktTjuUbcRZcNoEKnfkIu5DRQqy+5dVqT1tVNfhM8jo/+6VlDXjA1TituFMbB QPeGQSNcnPnn6pRX3Gz8utl3fHx+0WwUWAGSmRCgS9OZYpL93VhYXdY1N2FifuwN 3FPUcSCdrnEdhkzHGaAvfAE3U7en4zZw8LHeOk7GzL9ULuUAF/sxqU2nlrRc7d0g BNmgPglNLL9t4AUPBx7VR3x85uKN3NShb4WsdR1c80UxtmEVQYOBM+REuSE1YKvz yz1zmO6/yLMy/OFFe7HjiafgAxdc5yM= -----END CERTIFICATE-----Generated at Wed Apr 29 15:27:56 2026 by rpki-client