$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc85e321-049e-3f1c-a778-328d99e7630a.roa File: bc85e321-049e-3f1c-a778-328d99e7630a.roa (raw, json) Hash identifier: V07+XFQrvCD+nwIZM1rs+r9cMPQPOzF/oO1E9msGDxs= Subject key identifier: 60:4B:36:42:93:FD:32:06:2D:D1:9F:BA:B2:BE:2E:AB:02:75:49:8A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D44FA71A4A1F2D96B0BC4C780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc85e321-049e-3f1c-a778-328d99e7630a.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 211908 IP address blocks: 154.43.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:71:a4:a1:f2:d9:6b:0b:c4:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=c94dd9d8-e386-41e4-b168-a34d8f297d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:cb:fc:c0:b0:c7:27:ab:78:be:c0:3d:40: 15:c8:23:2d:d2:95:b9:50:e5:5a:8e:a3:1b:7c:e0: e0:62:02:b3:59:45:07:dc:59:b3:00:6c:93:6e:51: ba:d3:e4:7a:5f:2b:55:f8:3d:9e:32:6c:fd:10:a8: 86:c7:a9:5e:91:0c:bf:4a:bf:ac:f7:28:ce:23:52: 2c:3c:a1:69:26:bd:c3:aa:72:cb:6d:c1:e1:64:35: 46:a0:28:43:0c:08:4b:26:7d:0f:9c:2c:21:76:67: f2:d5:f0:4c:d3:18:6b:b9:25:80:ea:54:5d:0c:f1: 29:6d:62:1f:cf:9a:30:d6:f7:46:a3:bc:23:8a:74: 12:4d:67:53:3c:00:d4:fd:30:c0:b6:b4:a6:44:bb: 67:ee:69:bd:97:1b:97:85:36:4f:50:bb:6b:ce:dd: 47:92:73:bb:71:08:3e:eb:13:49:b1:6f:f2:fa:43: 25:52:5c:5a:3a:bd:a6:0e:11:7f:2b:1c:9b:70:07: 0f:76:1f:73:30:44:d7:48:9f:36:96:6d:3c:c8:e4: 86:aa:88:0b:c4:05:9a:ae:7c:db:4d:fe:43:49:b6: 31:04:0a:4c:02:74:4c:3e:7a:d6:22:40:3d:00:12: e6:a4:cb:cc:dd:15:e2:e7:e4:0a:50:dd:20:83:2a: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:36:42:93:FD:32:06:2D:D1:9F:BA:B2:BE:2E:AB:02:75:49:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc85e321-049e-3f1c-a778-328d99e7630a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.43.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a9:16:fb:d8:81:c1:d8:e7:c3:7d:d8:4d:2c:e3:2a:26:60: d2:44:9a:09:89:ff:e0:8b:1e:90:6a:fd:e4:14:5f:af:6b:2e: 13:70:0e:59:29:52:d6:7e:e0:33:f0:cd:75:78:6f:2a:d2:47: 63:b2:f9:cc:43:8e:a6:ee:ae:8a:b8:38:e2:87:49:6f:bf:eb: 29:91:27:02:6e:ca:57:be:8a:1c:5f:52:88:24:6f:9d:50:f3: b6:ca:91:67:22:8c:24:be:32:b6:e6:7d:ab:7f:14:36:e4:8a: c5:ca:20:46:da:8d:96:81:e7:57:7b:72:64:9f:e6:3e:bb:84: 2f:ab:36:28:b0:a5:91:64:fc:44:5c:14:2b:15:d7:46:61:f1: 6d:ce:d6:13:64:e7:2c:dc:6b:0d:7d:49:b3:45:02:5c:92:cd: 4b:be:ef:15:25:f7:fc:0f:ef:39:fa:5e:4e:bb:37:fe:6a:39: 6e:92:d1:6c:37:69:9a:87:75:59:fa:74:f6:ff:85:9b:30:d7: 00:1d:eb:a4:bd:12:98:e4:f9:ea:0b:95:4a:74:45:82:cc:42: ae:17:3a:96:5a:d7:4f:cb:24:9a:5a:4c:cf:61:82:eb:22:11: 00:a2:28:66:e1:87:da:05:c1:e0:42:0b:02:83:dc:27:19:1c: 4b:8c:ec:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nGkofLZawvEx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Yzk0ZGQ5ZDgtZTM4Ni00MWU0LWIxNjgtYTM0ZDhmMjk3ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4/L/MCwxyereL7APUAVyCMt0pW5UOVajqMb fODgYgKzWUUH3FmzAGyTblG60+R6XytV+D2eMmz9EKiGx6lekQy/Sr+s9yjOI1Is PKFpJr3DqnLLbcHhZDVGoChDDAhLJn0PnCwhdmfy1fBM0xhruSWA6lRdDPEpbWIf z5ow1vdGo7wjinQSTWdTPADU/TDAtrSmRLtn7mm9lxuXhTZPULtrzt1HknO7cQg+ 6xNJsW/y+kMlUlxaOr2mDhF/KxybcAcPdh9zMETXSJ82lm08yOSGqogLxAWarnzb Tf5DSbYxBApMAnRMPnrWIkA9ABLmpMvM3RXi5+QKUN0ggyrt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBLNkKT/TIGLdGfurK+LqsCdUmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmM4NWUzMjEtMDQ5ZS0z ZjFjLWE3NzgtMzI4ZDk5ZTc2MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmiumMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmpFvvYgcHY58N92E0s4yomYNJEmgmJ/+CLHpBq/eQUX69rLhNwDlkp UtZ+4DPwzXV4byrSR2Oy+cxDjqburoq4OOKHSW+/6ymRJwJuyle+ihxfUogkb51Q 87bKkWcijCS+Mrbmfat/FDbkisXKIEbajZaB51d7cmSf5j67hC+rNiiwpZFk/ERc FCsV10Zh8W3O1hNk5yzcaw19SbNFAlySzUu+7xUl9/wP7zn6Xk67N/5qOW6S0Ww3 aZqHdVn6dPb/hZsw1wAd66S9Epjk+eoLlUp0RYLMQq4XOpZa10/LJJpaTM9hgusi EQCiKGbhh9oFweBCCwKD3CcZHEuM7Bw= -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:59 2026 by rpki-client