$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa File: bc6990b7-5135-34a6-8b7f-da63625a8f64.roa (raw, json) Hash identifier: F7SbSR5aFWHAgL5J8mDeNfUBdkqGrm8V/6ckiHHmoM8= Subject key identifier: 57:DA:A2:67:13:66:A5:94:90:57:C4:05:BB:FD:8B:A7:80:AC:E4:F9 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584D40CA48FEE9325DDD4BBC2300 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 1403 IP address blocks: 198.58.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:48:fe:e9:32:5d:dd:4b:bc:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7da5dd4b-ca8e-457a-b962-d442c0c1266a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:bc:f6:a5:6a:fc:c6:1a:23:57:93:4d:4e: 03:e6:f5:d4:40:78:42:e8:b2:d6:b8:d3:32:d7:0e: 02:6b:3e:fe:9b:b1:1a:82:fb:28:88:28:e8:1d:8b: 8b:a7:49:ad:07:94:cf:80:4f:2f:ad:8d:3f:ca:e3: 04:e4:90:30:d2:e3:86:e2:78:b9:1a:a9:4b:17:3c: d2:a4:e7:09:5f:02:d9:ba:18:91:b9:ae:74:ad:ec: eb:e0:28:57:16:1c:bf:c4:a3:c7:3e:5d:a2:f7:c4: 40:5b:d7:d6:30:99:e4:89:86:32:bc:f7:6e:e2:06: 84:31:7b:c9:9a:4a:6f:34:38:8c:7c:20:cc:d9:9d: ef:d4:2b:8e:0c:1c:ae:4b:a1:67:02:3d:94:38:98: ac:f9:79:55:90:ee:b6:36:a0:46:2e:3a:96:26:91: fb:13:20:f9:83:b9:1d:dd:2b:68:38:ae:ea:d9:a9: 96:01:e6:6e:6e:16:ff:a0:3a:8a:22:d7:53:b8:2a: e5:10:20:70:fd:42:8d:bb:17:b5:f2:30:8b:8a:83: 4b:c9:2e:04:39:c4:0a:c3:88:1a:f2:72:0b:86:a4: 68:da:18:c1:d2:f5:b4:0a:58:bd:c3:d1:37:c7:1a: 28:f3:de:f8:62:b3:a9:f6:67:df:22:6b:60:46:5d: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DA:A2:67:13:66:A5:94:90:57:C4:05:BB:FD:8B:A7:80:AC:E4:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 198.58.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:54:40:d6:69:f9:1f:28:2d:ac:df:fc:b2:c8:ee:21:dc:f2: 29:cf:33:da:71:f7:3c:ed:5a:41:4c:c7:f2:76:43:dd:1c:bf: 6c:94:9d:25:f6:31:e6:f9:ec:55:9f:21:d2:cf:d2:54:47:8c: 2b:18:78:37:8a:ec:99:c1:7c:9a:03:2a:e9:32:10:1e:43:6d: d9:c0:06:e4:1c:d3:53:b4:4f:09:88:9f:db:39:79:38:49:45: ba:41:55:4a:07:91:48:a0:2b:c2:27:e9:72:f1:2f:61:68:87: b4:2b:a2:ce:8d:47:f7:86:c2:d2:8b:e5:28:dc:5d:ed:5e:01: a0:fd:ca:69:73:be:e4:e2:f9:28:92:8a:9b:21:a8:b0:ca:21: bc:1b:40:37:a9:fa:9a:b4:47:05:f8:cd:86:a8:b9:56:0f:0d: bf:1a:dd:6a:65:c2:f2:51:30:72:e0:d6:8c:71:26:9b:6f:55: 3f:96:3a:b3:cc:15:9e:f9:67:51:e6:81:06:44:f2:9c:a2:be: e8:36:07:96:de:d1:e9:fc:47:15:1c:8d:60:70:42:03:26:c1: 97:b5:ee:ba:18:b0:d4:34:27:2d:f1:9e:89:cb:69:ff:53:98: 9c:d8:73:bf:45:43:23:13:87:8e:e9:7b:21:f9:7b:ba:06:89: 54:17:5c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aykj+6TJd3Uu8IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2RhNWRkNGItY2E4ZS00NTdhLWI5NjItZDQ0MmMwYzEyNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiu89qVq/MYaI1eTTU4D5vXUQHhC6LLWuNMy 1w4Caz7+m7EagvsoiCjoHYuLp0mtB5TPgE8vrY0/yuME5JAw0uOG4ni5GqlLFzzS pOcJXwLZuhiRua50rezr4ChXFhy/xKPHPl2i98RAW9fWMJnkiYYyvPdu4gaEMXvJ mkpvNDiMfCDM2Z3v1CuODByuS6FnAj2UOJis+XlVkO62NqBGLjqWJpH7EyD5g7kd 3StoOK7q2amWAeZubhb/oDqKItdTuCrlECBw/UKNuxe18jCLioNLyS4EOcQKw4ga 8nILhqRo2hjB0vW0Cli9w9E3xxoo8974YrOp9mffImtgRl0WgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfaomcTZqWUkFfEBbv9i6eArOT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmM2OTkwYjctNTEzNS0z NGE2LThiN2YtZGE2MzYyNWE4ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNUQNZp+R8oLazf/LLI7iHc8inPM9px9zztWkFMx/J2Q90cv2yUnSX2 Meb57FWfIdLP0lRHjCsYeDeK7JnBfJoDKukyEB5DbdnABuQc01O0TwmIn9s5eThJ RbpBVUoHkUigK8In6XLxL2Foh7Qros6NR/eGwtKL5SjcXe1eAaD9ymlzvuTi+SiS ipshqLDKIbwbQDep+pq0RwX4zYaouVYPDb8a3WplwvJRMHLg1oxxJptvVT+WOrPM FZ75Z1HmgQZE8pyivug2B5be0en8RxUcjWBwQgMmwZe17roYsNQ0Jy3xnonLaf9T mJzYc79FQyMTh47peyH5e7oGiVQXXN8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:11 2026 by rpki-client