$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa File: bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa (raw, json) Hash identifier: sQC0ziBQja+Zx5+A55EzTFSagMAO0EPqjl7CPjRO16k= Subject key identifier: CA:71:E1:99:13:89:DE:F9:AD:4B:38:FF:C4:C5:ED:81:E6:80:08:8D Certificate issuer: /CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Certificate serial: 010D0C9F4328584D1B19FAE1328A4C591E5F2800 Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 26157 IP address blocks: 207.174.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fa:e1:32:8a:4c:59:1e:5f:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4487c1c1-80b8-4bae-a8cd-4156dc61ae0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:b5:ba:79:e9:2c:8e:16:79:1f:25:df:48: 73:9e:67:3b:df:d1:13:df:8e:b6:cf:83:19:55:ae: 0a:35:80:2b:ae:07:d9:37:15:ae:e5:e7:15:9a:7f: 99:bc:74:43:ac:cc:2a:89:ec:fd:7a:92:c2:c6:6f: e4:fc:6b:8c:70:c8:e1:d4:4e:a5:2a:d0:86:4d:a0: ce:b7:d7:79:f8:b6:a3:6b:23:fc:e8:2a:bd:80:a3: c2:06:58:38:10:df:3a:bc:57:83:57:b5:d5:fb:bc: b7:00:0d:68:bb:36:ab:17:ef:84:5c:b1:8d:63:e3: 0b:56:f0:63:a6:17:7d:af:3b:56:f7:7c:d9:e8:c2: 75:15:81:d2:05:4b:cd:53:4a:28:87:a6:d1:a0:08: 05:8c:45:8a:4b:a6:c5:0b:18:2b:2b:09:50:5f:61: 90:84:85:ce:43:25:1e:e6:24:e9:9f:84:61:af:21: 61:0e:84:98:7a:33:b9:e4:6c:db:68:29:fc:54:6e: 0a:83:dd:bd:f1:cf:5c:28:85:c4:61:c5:47:05:96: 92:ed:dd:fd:6b:cd:11:8f:4d:e9:12:71:71:06:a4: ed:f4:1a:38:cf:2c:a1:d6:37:8e:16:16:88:6e:f8: 19:d1:ed:1c:cc:4a:fc:ee:ca:78:96:bc:8e:75:1f: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:71:E1:99:13:89:DE:F9:AD:4B:38:FF:C4:C5:ED:81:E6:80:08:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl X509v3 Authority Key Identifier: keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer sbgp-ipAddrBlock: critical IPv4: 207.174.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6e:05:fb:c4:b4:ed:b3:de:57:ee:32:c8:97:67:23:0c:de: 83:b8:d5:da:ad:e3:7e:9e:c3:16:95:a2:f3:57:cc:c6:49:50: ce:46:14:13:31:eb:f6:c3:dc:67:f8:a9:05:bb:05:34:58:a0: 08:25:5a:5b:54:26:c1:27:80:2d:14:74:01:0d:a9:81:ce:e5: e2:dc:38:f1:61:65:d4:ba:f9:07:69:dd:71:f6:a7:f3:39:ba: 1d:ae:58:68:4c:bb:c0:8b:9b:20:28:e6:4b:d6:0c:19:cb:7a: 34:6e:ee:e2:3e:e3:28:8f:07:b9:c1:e3:b1:37:3d:7c:8b:ec: b3:0a:3a:f8:dd:d5:3f:66:6d:6e:72:b0:6c:5b:b7:b5:20:9e: a2:f3:3c:8d:c3:7e:2d:bb:b5:24:f7:98:93:67:60:7a:1a:a2: 5f:db:ca:56:0a:88:84:27:c7:a1:68:ce:a2:c3:89:a1:10:c2: dd:9d:b1:df:16:c6:e2:85:d0:4a:4f:ae:92:29:03:de:31:18: 7a:e2:e2:de:14:13:a8:51:bd:a0:50:27:45:3e:09:4f:c8:da: c4:ae:b0:83:21:cf:2f:a9:17:16:0c:cd:6f:0e:84:4c:15:a1: 5c:83:0a:d2:4e:23:d7:f9:8c:76:e7:8e:0b:4b:27:06:79:79: 10:50:ec:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfrhMopMWR5fKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0MmNkMWUtMTM1MC00MWQ1LWExNGUtNTFiZGRiNTJj MzM2MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NDQ4N2MxYzEtODBiOC00YmFlLWE4Y2QtNDE1NmRjNjFhZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJi1unnpLI4WeR8l30hznmc739ET3462z4MZ Va4KNYArrgfZNxWu5ecVmn+ZvHRDrMwqiez9epLCxm/k/GuMcMjh1E6lKtCGTaDO t9d5+LajayP86Cq9gKPCBlg4EN86vFeDV7XV+7y3AA1ouzarF++EXLGNY+MLVvBj phd9rztW93zZ6MJ1FYHSBUvNU0ooh6bRoAgFjEWKS6bFCxgrKwlQX2GQhIXOQyUe 5iTpn4RhryFhDoSYejO55GzbaCn8VG4Kg9298c9cKIXEYcVHBZaS7d39a80Rj03p EnFxBqTt9Bo4zyyh1jeOFhaIbvgZ0e0czEr87sp4lryOdR8gtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpx4ZkTid75rUs4/8TF7YHmgAiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wOTQy Y2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJkZGI1MmMzMzYvYmNhNWFhMjAtMGFiOS0z MzE1LThkOTctZjJlZDUwMzM2OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDk0MmNkMWUtMTM1MC00MWQ1LWEx NGUtNTFiZGRiNTJjMzM2LzA5NDJjZDFlLTEzNTAtNDFkNS1hMTRlLTUxYmRkYjUy YzMzNi5jcmwwHwYDVR0jBBgwFoAUWsdYmsqiyRvuds1T1i6jaRsQMkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wOTQyY2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJk ZGI1MmMzMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADluBfvEtO2z3lfuMsiXZyMM3oO41dqt436ewxaVovNXzMZJUM5GFBMx 6/bD3Gf4qQW7BTRYoAglWltUJsEngC0UdAENqYHO5eLcOPFhZdS6+Qdp3XH2p/M5 uh2uWGhMu8CLmyAo5kvWDBnLejRu7uI+4yiPB7nB47E3PXyL7LMKOvjd1T9mbW5y sGxbt7UgnqLzPI3Dfi27tST3mJNnYHoaol/bylYKiIQnx6FozqLDiaEQwt2dsd8W xuKF0EpPrpIpA94xGHri4t4UE6hRvaBQJ0U+CU/I2sSusIMhzy+pFxYMzW8OhEwV oVyDCtJOI9f5jHbnjgtLJwZ5eRBQ7Ek= -----END CERTIFICATE-----Generated at Sun Mar 22 10:00:04 2026 by rpki-client