$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa File: bc7b5153-4728-3649-bc82-4499eb9a7abb.roa (raw, json) Hash identifier: FSRy0R01fR+liy9l1lSIEhBcCq8/WeerJ5jmUF3QdHU= Subject key identifier: EF:C2:D2:61:94:9F:6A:A2:63:20:71:9B:9D:11:56:63:5C:2B:79:06 Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584D3DFFB5E85589103D2C060780 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 14618 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:e8:55:89:10:3d:2c:06:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=b2da46b0-2b06-4f5a-8c19-c83a442d3d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:4b:e8:87:1a:ab:e3:83:30:5d:4a:b9:16: a7:25:55:d2:e4:47:ac:47:32:53:38:9f:2d:70:b8: c7:01:7a:db:14:b1:fe:2c:70:9e:b9:41:9b:af:77: 89:d6:4e:89:c7:15:52:3c:f2:04:db:7f:3a:98:ff: 2f:99:04:56:10:7e:1a:a6:68:28:58:b4:28:52:de: 32:eb:33:cb:b7:1e:36:8b:85:0c:f7:e6:9b:ac:26: 2e:44:41:f2:13:02:b3:23:ea:0f:df:33:5f:36:7c: 43:70:1c:5a:b8:48:a3:64:64:3b:09:f6:6c:8b:2f: 26:7c:5f:57:68:0d:25:4b:2b:8f:de:1e:83:2d:49: 77:df:55:75:a2:7b:e3:aa:e7:16:49:14:77:92:7e: e5:bc:6b:cc:af:b1:a4:02:d5:f7:96:40:ab:8a:7f: d5:40:d8:1c:16:25:56:1e:a0:c4:43:97:e9:2a:ac: 66:98:c9:6a:2b:da:b7:de:7c:dd:69:20:9c:c7:ab: f5:1b:71:bf:7e:76:13:62:31:a0:04:19:e5:a3:7f: 76:45:61:f3:58:9a:f4:55:cc:61:d5:6c:82:54:7e: f0:07:72:2f:0a:54:73:d8:7b:75:63:c3:73:2a:ff: 86:74:fe:03:c6:b5:de:de:93:7b:c2:0d:5d:e2:05: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C2:D2:61:94:9F:6A:A2:63:20:71:9B:9D:11:56:63:5C:2B:79:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7f:99:e6:e4:40:51:50:e7:0d:ba:f1:ba:8f:0d:29:a2:b2: c2:e2:c6:8a:c3:35:20:0c:c2:f3:e0:8e:ee:70:56:b7:45:74: 7f:25:df:91:59:f5:c0:1d:e3:22:46:47:2e:47:42:6a:b8:65: b5:bb:e8:b0:57:96:4b:2c:c7:7a:b9:65:de:6a:38:ea:66:cd: 72:d4:b9:6a:ea:81:ea:57:c7:ab:c1:ad:30:2e:55:99:b7:63: 22:fc:db:9f:76:82:a3:9a:50:01:02:db:1c:37:a0:a6:7b:26: ec:ec:60:01:ae:29:02:69:8d:c2:79:3b:f2:f7:50:b5:73:06: a9:56:54:09:d8:70:d6:fc:fa:42:25:b3:5d:62:45:72:89:35: d1:c6:32:01:3b:be:6e:62:92:66:24:de:76:e4:70:26:96:f5: 5b:f2:24:6e:e0:97:c2:0a:e5:33:9d:b1:68:61:99:89:42:5c: 30:87:df:84:30:85:af:7a:ed:36:d1:4c:d0:e7:43:38:2b:ce: e6:c3:57:df:df:e9:3c:06:c3:56:3b:53:60:ce:17:74:35:bc: 30:0a:2d:03:98:ba:c6:1c:4e:80:13:c0:44:61:ff:21:cc:c3: f3:fb:c0:6a:7b:00:9a:08:b5:32:7b:e5:0d:21:3b:e9:3d:48: 73:45:99:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7XoVYkQPSwGB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YjJkYTQ2YjAtMmIwNi00ZjVhLThjMTktYzgzYTQ0MmQzZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuClL6Icaq+ODMF1KuRanJVXS5EesRzJTOJ8t cLjHAXrbFLH+LHCeuUGbr3eJ1k6JxxVSPPIE2386mP8vmQRWEH4apmgoWLQoUt4y 6zPLtx42i4UM9+abrCYuREHyEwKzI+oP3zNfNnxDcBxauEijZGQ7CfZsiy8mfF9X aA0lSyuP3h6DLUl331V1onvjqucWSRR3kn7lvGvMr7GkAtX3lkCrin/VQNgcFiVW HqDEQ5fpKqxmmMlqK9q33nzdaSCcx6v1G3G/fnYTYjGgBBnlo392RWHzWJr0Vcxh 1WyCVH7wB3IvClRz2Ht1Y8NzKv+GdP4DxrXe3pN7wg1d4gWdBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/C0mGUn2qiYyBxm50RVmNcK3kGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvYmM3YjUxNTMtNDcyOC0z NjQ5LWJjODItNDQ5OWViOWE3YWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1/mebkQFFQ5w268bqPDSmissLixorDNSAMwvPgju5wVrdFdH8l35FZ 9cAd4yJGRy5HQmq4ZbW76LBXlkssx3q5Zd5qOOpmzXLUuWrqgepXx6vBrTAuVZm3 YyL82592gqOaUAEC2xw3oKZ7JuzsYAGuKQJpjcJ5O/L3ULVzBqlWVAnYcNb8+kIl s11iRXKJNdHGMgE7vm5ikmYk3nbkcCaW9VvyJG7gl8IK5TOdsWhhmYlCXDCH34Qw ha967TbRTNDnQzgrzubDV9/f6TwGw1Y7U2DOF3Q1vDAKLQOYusYcToATwERh/yHM w/P7wGp7AJoItTJ75Q0hO+k9SHNFmYo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:56 2026 by rpki-client