$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa File: bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa (raw, json) Hash identifier: 3EkYuopmN1ChbGGKnC5XP8FGuGPN3bhCKUJqHfQrCls= Subject key identifier: A4:FC:88:AC:CD:20:3D:23:7C:2C:E8:5A:AF:88:03:E6:B7:45:2F:3C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C50775765B272FA0B9BA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 9304 IP address blocks: 65.86.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:07:75:76:5b:27:2f:a0:b9:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=fdd64862-fd61-454d-9c5a-eed3e45b1ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:41:b7:e2:cc:67:30:cc:8a:22:48:6a:b2: 31:45:3d:12:65:32:1e:19:4f:50:3b:53:f7:a6:b8: a9:a7:c8:51:15:59:23:ed:00:ef:0c:2c:c2:01:0f: 8c:61:7e:08:1a:1f:4c:82:03:e5:eb:39:70:c3:22: 3b:91:9b:e0:63:95:c0:bc:eb:cf:f7:f9:4b:70:b1: d7:b9:4e:1c:d2:e6:13:35:40:8a:f6:dc:15:64:80: c7:35:3d:70:23:f3:0b:b6:8b:19:af:d4:cc:ad:50: 34:a8:41:2b:bd:92:2c:35:d6:73:b4:9c:50:fb:19: a7:50:3a:ea:0f:62:25:c5:3f:a0:f9:2f:6d:d2:79: a1:d7:03:8a:56:ce:0b:c5:72:03:a1:66:63:7c:e4: 42:7a:31:d8:f2:f1:60:a6:ac:26:e9:6a:eb:52:9f: 9a:13:70:5c:35:9b:ba:35:18:a3:ef:62:9f:43:a0: 24:c9:1c:6d:af:0c:ff:97:54:89:a1:66:10:18:4b: 5b:83:f4:38:69:76:4f:25:83:c6:41:08:9b:a5:5f: 39:60:8c:2c:36:c4:19:90:cf:e6:9a:0f:52:36:38: a3:fa:2c:06:8f:50:dc:6e:14:06:51:6d:e9:fd:b7: 56:7d:e6:61:77:54:e0:85:b1:99:74:d3:02:c2:4b: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FC:88:AC:CD:20:3D:23:7C:2C:E8:5A:AF:88:03:E6:B7:45:2F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2a:fc:8c:ea:18:f6:e6:af:60:26:bf:07:3e:28:09:35:be: a0:93:cb:95:2a:23:39:ab:71:27:ef:ef:24:32:49:9d:b1:82: e7:99:76:a5:ce:85:92:94:dd:28:73:6e:15:00:b4:2a:7c:0f: 96:68:f7:4f:33:f6:94:a0:65:e3:e8:32:6a:d8:d2:5f:e2:ba: 59:d2:9f:2a:98:19:f5:4d:ad:a5:a6:ad:a1:c1:1a:54:9a:e3: 0c:b4:4e:3a:16:d7:14:16:a5:bb:9f:a4:0e:2e:2b:7d:51:9b: 59:57:45:8f:05:42:7e:5d:f0:17:ba:7b:dd:2f:79:15:d1:ff: 6b:40:01:bb:7b:59:9e:b4:d5:68:ff:2b:b9:80:61:a6:4e:8b: 11:91:d1:89:90:6e:d6:a5:36:26:14:1a:73:eb:47:87:be:4f: de:72:cc:64:9b:2a:7a:85:ff:12:95:c0:53:af:34:1e:5b:3d: e6:c1:63:31:24:9e:e7:b2:21:6b:62:cd:81:37:07:59:b5:43: 10:43:fe:e5:7e:2b:c9:87:8f:5b:a0:7a:3a:50:d0:6f:10:19: 64:07:40:39:ff:05:80:ce:6c:8b:a6:28:41:7d:fc:d2:b9:f5: f6:e7:ae:d4:bc:5d:4a:89:7e:3b:0e:15:2e:c3:5d:57:69:0a: dc:35:32:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQd1dlsnL6C5uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZmRkNjQ4NjItZmQ2MS00NTRkLTljNWEtZWVkM2U0NWIxZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApihBt+LMZzDMiiJIarIxRT0SZTIeGU9QO1P3 pripp8hRFVkj7QDvDCzCAQ+MYX4IGh9MggPl6zlwwyI7kZvgY5XAvOvP9/lLcLHX uU4c0uYTNUCK9twVZIDHNT1wI/MLtosZr9TMrVA0qEErvZIsNdZztJxQ+xmnUDrq D2IlxT+g+S9t0nmh1wOKVs4LxXIDoWZjfORCejHY8vFgpqwm6WrrUp+aE3BcNZu6 NRij72KfQ6AkyRxtrwz/l1SJoWYQGEtbg/Q4aXZPJYPGQQibpV85YIwsNsQZkM/m mg9SNjij+iwGj1DcbhQGUW3p/bdWfeZhd1TghbGZdNMCwkt+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT8iKzNID0jfCzoWq+IA+a3RS88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmMyNmExMWQtMDI5MS0z ODM5LWFjMjYtNmFhOGMxYzk3NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwq/IzqGPbmr2Amvwc+KAk1vqCTy5UqIzmrcSfv7yQySZ2xgueZdqXO hZKU3ShzbhUAtCp8D5Zo908z9pSgZePoMmrY0l/iulnSnyqYGfVNraWmraHBGlSa 4wy0TjoW1xQWpbufpA4uK31Rm1lXRY8FQn5d8Be6e90veRXR/2tAAbt7WZ601Wj/ K7mAYaZOixGR0YmQbtalNiYUGnPrR4e+T95yzGSbKnqF/xKVwFOvNB5bPebBYzEk nueyIWtizYE3B1m1QxBD/uV+K8mHj1ugejpQ0G8QGWQHQDn/BYDObIumKEF9/NK5 9fbnrtS8XUqJfjsOFS7DXVdpCtw1Mi4= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:36 2026 by rpki-client