$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bcaaf87c-2dd8-3e7f-a627-61947b3baa61.roa File: bcaaf87c-2dd8-3e7f-a627-61947b3baa61.roa (raw, json) Hash identifier: 3skSLXt5vlqEKiWJmbtyGoDpQMPrG2TnAEkrZ9pcufM= Subject key identifier: 56:B7:A2:BF:B1:F0:18:CD:3C:56:E7:B1:A7:F1:91:EF:68:23:3B:AF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8AC55D21D8DC0D179392FB49 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bcaaf87c-2dd8-3e7f-a627-61947b3baa61.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 64.204.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:5d:21:d8:dc:0d:17:93:92:fb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=af7069c9-d751-4538-95c6-4945dc5ec635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:2b:1d:76:7a:3f:4a:81:0b:54:50:ba:b4: cd:04:2a:b6:1b:0a:5e:e5:d9:e6:11:1c:b8:d9:bc: ad:79:93:c3:1e:ac:ff:9b:2d:eb:ef:41:94:14:e5: bf:85:7c:83:f5:c3:8d:08:12:2c:fe:bc:b6:06:65: 0a:97:80:d3:04:94:07:9b:ae:3c:8c:2b:47:ff:83: 31:21:a0:12:52:9c:a8:66:33:57:cd:43:a8:5b:81: 0e:d3:95:63:00:4d:3a:14:b1:bc:04:eb:77:cb:d1: 79:34:e6:9a:80:dc:dd:b6:b2:93:f9:8e:9b:f3:dd: 36:de:50:f8:61:9c:83:05:cb:60:37:9f:19:89:c9: 7f:98:74:ba:d4:6b:a5:cf:b6:d1:64:80:03:c7:a7: 7d:b1:ef:bc:2c:83:8c:1c:f7:af:8f:87:95:28:d0: be:b4:b4:e5:33:5b:cd:50:4c:ae:a1:52:09:4a:b3: 42:9e:51:81:43:a2:78:80:07:b6:cf:0a:ca:89:be: 7e:6b:9a:a1:cc:e0:de:ea:e9:bf:61:bc:d5:46:0d: c6:c5:38:7d:4d:7c:28:30:d2:cf:a8:de:db:0b:b2: bf:fb:87:ca:19:ce:e1:96:5c:7b:d6:4a:e5:95:fa: 8e:9f:03:67:f1:ca:6d:a2:16:e7:77:d1:ed:fd:8b: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B7:A2:BF:B1:F0:18:CD:3C:56:E7:B1:A7:F1:91:EF:68:23:3B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bcaaf87c-2dd8-3e7f-a627-61947b3baa61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:61:60:2c:29:9c:d7:56:7d:79:cd:3c:a2:15:74:24:89:af: 46:b4:14:74:0a:23:af:dc:6b:7a:8e:31:67:36:6c:75:8b:c7: d3:77:58:f1:26:8e:0f:37:df:4b:83:b8:9d:49:37:bc:c8:d4: ba:c0:75:19:eb:fd:ca:9d:38:cd:63:98:a6:7e:4c:bd:6f:97: 45:8b:31:b0:4d:ab:45:a6:c0:c6:21:85:47:04:0d:e0:1f:f6: 5c:ef:b2:05:8f:82:58:a8:3e:ef:9f:93:c7:73:12:5e:b2:82: 58:97:a1:fe:9c:4c:c1:6b:1b:f3:0b:ba:f6:87:b0:4c:e4:12: d5:79:8e:0e:dd:af:a2:45:18:a2:48:84:b5:c2:8b:22:40:c9: 0b:88:17:6c:43:87:f2:ac:1b:6a:1b:ac:db:27:5c:54:82:63: 13:31:9c:ed:76:44:d9:b0:4b:36:dd:e6:bd:a3:b9:1c:a7:85: 1e:dd:88:0e:82:65:f1:32:57:d5:a7:59:27:b2:a9:ee:98:21: 13:7d:5c:97:b6:e6:7b:21:38:1b:2e:93:61:63:0f:18:b0:1e: 49:3b:47:2c:66:81:37:bd:f2:39:16:b5:85:53:9f:23:0d:44: 5c:58:9d:45:87:66:24:90:4e:bb:18:5c:38:27:da:b2:c6:02: c3:b5:69:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxV0h2NwNF5OS+0kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YWY3MDY5YzktZDc1MS00NTM4LTk1YzYtNDk0NWRjNWVjNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYkrHXZ6P0qBC1RQurTNBCq2Gwpe5dnmERy4 2byteZPDHqz/my3r70GUFOW/hXyD9cONCBIs/ry2BmUKl4DTBJQHm648jCtH/4Mx IaASUpyoZjNXzUOoW4EO05VjAE06FLG8BOt3y9F5NOaagNzdtrKT+Y6b89023lD4 YZyDBctgN58Zicl/mHS61Gulz7bRZIADx6d9se+8LIOMHPevj4eVKNC+tLTlM1vN UEyuoVIJSrNCnlGBQ6J4gAe2zwrKib5+a5qhzODe6um/YbzVRg3GxTh9TXwoMNLP qN7bC7K/+4fKGc7hllx71krllfqOnwNn8cptohbnd9Ht/Yu8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa3or+x8BjNPFbnsafxke9oIzuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmNhYWY4N2MtMmRkOC0z ZTdmLWE2MjctNjE5NDdiM2JhYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBhYCwpnNdWfXnNPKIVdCSJr0a0FHQKI6/ca3qOMWc2bHWLx9N3WPEm jg8330uDuJ1JN7zI1LrAdRnr/cqdOM1jmKZ+TL1vl0WLMbBNq0WmwMYhhUcEDeAf 9lzvsgWPglioPu+fk8dzEl6ygliXof6cTMFrG/MLuvaHsEzkEtV5jg7dr6JFGKJI hLXCiyJAyQuIF2xDh/KsG2obrNsnXFSCYxMxnO12RNmwSzbd5r2juRynhR7diA6C ZfEyV9WnWSeyqe6YIRN9XJe25nshOBsuk2FjDxiwHkk7RyxmgTe98jkWtYVTnyMN RFxYnUWHZiSQTrsYXDgn2rLGAsO1aQs= -----END CERTIFICATE-----Generated at Wed May 13 19:07:18 2026 by rpki-client