$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bfcaace4-9316-345b-9d5a-cb5ecf912301.roa File: bfcaace4-9316-345b-9d5a-cb5ecf912301.roa (raw, json) Hash identifier: OeVlmxSvrYU7EUlQxMASoXOPoTR8YTRe/nhoqykBy9E= Subject key identifier: 80:A8:A9:E8:57:AC:7B:55:F4:E3:D9:25:17:E8:0E:62:F3:DE:92:C1 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584D7367F93367FB23DA3DCEB280 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bfcaace4-9316-345b-9d5a-cb5ecf912301.roa Signing time: Thu 09 Apr 2026 16:09:02 +0000 ROA not before: Thu 09 Apr 2026 16:09:02 +0000 ROA not after: Wed 08 Jul 2026 16:09:02 +0000 asID: 198087 IP address blocks: 209.236.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:67:f9:33:67:fb:23:da:3d:ce:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 9 16:09:02 2026 GMT Not After : Jul 8 16:09:02 2026 GMT Subject: CN=63c1e3b0-fb10-42cf-a30b-46c69d5743bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:b6:94:b7:b4:35:07:98:cb:ef:67:99:64: 17:41:1b:08:8b:1f:4f:32:d1:6c:b5:51:8c:f5:a2: 6a:18:3d:19:e5:46:97:fe:22:57:46:de:b0:1c:56: a6:33:82:90:b0:fa:4a:17:dc:6c:1f:ca:14:d4:6c: 35:be:85:4c:f1:e8:01:04:fa:73:79:6d:53:de:7f: dd:e5:4c:55:2d:46:85:c1:4e:56:5e:88:c1:07:83: 82:7f:27:e9:f2:95:4c:2b:3d:4f:29:21:45:94:be: 00:d1:d0:5a:08:74:98:5a:5e:1e:1e:1a:e5:aa:2f: 66:c6:11:a4:f4:d9:2e:33:fd:8a:80:85:73:dc:cc: c3:de:17:8c:76:20:74:ba:c6:c3:a9:a2:4e:07:fd: d1:a9:28:f0:16:50:57:90:27:32:60:c4:0d:c8:59: 71:68:95:16:83:94:3a:93:cb:fe:f2:55:a9:37:08: b2:cd:28:b7:be:e8:3f:d3:ed:66:eb:66:49:4b:38: 3b:ee:ef:c1:8e:12:93:7c:6c:f6:ef:7f:0f:30:93: c7:f8:11:55:26:d4:dc:27:33:2b:a5:be:7a:30:f1: 57:43:08:da:2b:1a:4b:05:52:55:88:58:ae:f7:03: 3e:bb:74:65:b6:94:ac:e8:50:d8:6c:9e:f4:23:26: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A8:A9:E8:57:AC:7B:55:F4:E3:D9:25:17:E8:0E:62:F3:DE:92:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bfcaace4-9316-345b-9d5a-cb5ecf912301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.236.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:93:d3:7f:ec:0b:17:f2:7d:e6:74:d2:8e:44:04:d6:e9:a2: f6:9b:ae:65:62:df:ad:5a:cb:a3:da:dd:00:03:7b:f2:cf:df: ef:5a:7b:14:31:b0:e9:79:53:a7:f2:7e:b7:a3:ec:f6:1a:de: 72:23:91:22:f3:e3:02:44:fc:f1:7d:09:f0:ef:22:d2:41:7c: 90:74:9d:3e:9d:54:dc:a1:b0:e8:66:a6:96:ae:08:8a:6e:e9: 0d:df:e7:3d:46:a1:9b:fd:d1:10:b1:7d:2e:08:6b:7e:af:7f: 8a:ea:ba:7d:9d:66:62:ec:88:36:9b:e9:a5:73:fc:90:f8:aa: 40:99:d8:bf:76:f0:74:3a:0f:97:42:99:4f:48:32:6e:8a:e7: bd:19:f4:53:c2:c3:d1:84:4d:93:a0:57:42:58:cc:0c:6e:6d: ed:87:6c:f0:31:b0:52:62:d8:8d:cb:9b:0c:0c:8f:ac:b4:b3: 09:a5:0a:35:5b:81:12:86:fa:f1:db:1e:f0:9c:cc:b8:ee:6e: 49:bb:08:c6:13:5c:f6:0a:64:1e:0c:6f:a9:17:02:a8:39:53: 8f:4a:0c:53:ea:5c:2b:db:94:9d:0e:56:59:a2:de:4a:b0:2c: b4:b7:a8:05:6a:0a:bd:02:de:11:aa:ac:30:cf:7d:23:3a:f4: e8:7d:fe:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zZ/kzZ/sj2j3OsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDQwOTE2MDkwMloXDTI2MDcwODE2MDkwMlowLzEtMCsGA1UEAxMk NjNjMWUzYjAtZmIxMC00MmNmLWEzMGItNDZjNjlkNTc0M2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM62lLe0NQeYy+9nmWQXQRsIix9PMtFstVGM 9aJqGD0Z5UaX/iJXRt6wHFamM4KQsPpKF9xsH8oU1Gw1voVM8egBBPpzeW1T3n/d 5UxVLUaFwU5WXojBB4OCfyfp8pVMKz1PKSFFlL4A0dBaCHSYWl4eHhrlqi9mxhGk 9NkuM/2KgIVz3MzD3heMdiB0usbDqaJOB/3RqSjwFlBXkCcyYMQNyFlxaJUWg5Q6 k8v+8lWpNwiyzSi3vug/0+1m62ZJSzg77u/BjhKTfGz2738PMJPH+BFVJtTcJzMr pb56MPFXQwjaKxpLBVJViFiu9wM+u3RltpSs6FDYbJ70IyaLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICoqehXrHtV9OPZJRfoDmLz3pLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmZjYWFjZTQtOTMxNi0z NDViLTlkNWEtY2I1ZWNmOTEyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFST03/sCxfyfeZ00o5EBNbpovabrmVi361ay6Pa3QADe/LP3+9aexQx sOl5U6fyfrej7PYa3nIjkSLz4wJE/PF9CfDvItJBfJB0nT6dVNyhsOhmppauCIpu 6Q3f5z1GoZv90RCxfS4Ia36vf4rqun2dZmLsiDab6aVz/JD4qkCZ2L928HQ6D5dC mU9IMm6K570Z9FPCw9GETZOgV0JYzAxube2HbPAxsFJi2I3LmwwMj6y0swmlCjVb gRKG+vHbHvCczLjubkm7CMYTXPYKZB4Mb6kXAqg5U49KDFPqXCvblJ0OVlmi3kqw LLS3qAVqCr0C3hGqrDDPfSM69Oh9/gw= -----END CERTIFICATE-----Generated at Sat Apr 11 05:37:55 2026 by rpki-client