$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa File: bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa (raw, json) Hash identifier: iJNoXZRS717OXyj1v326CrFyex1bvLIAJQt9G8i3Mvw= Subject key identifier: 3C:20:90:83:BE:2C:A1:F6:CD:EA:97:82:94:11:0F:BC:29:44:20:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A053DE84A9EFCF650631340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 395747 IP address blocks: 198.41.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:3d:e8:4a:9e:fc:f6:50:63:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=3de50cdd-48b1-4f88-afa9-93ce19df303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:a8:55:ef:c7:30:08:59:b0:55:9c:f2:ac: 0e:0a:c8:e6:72:7b:b3:21:ae:60:c6:51:61:98:97: 2d:73:f2:e3:c3:2c:69:28:34:8d:c1:c9:cb:a7:54: 55:62:46:29:0a:31:0f:d7:51:6b:57:8a:69:22:fa: 58:91:0f:34:11:b5:33:8f:f4:2e:84:49:d5:9a:9f: ee:2d:20:e7:62:51:11:2e:29:fb:11:bc:13:df:01: ae:74:50:0a:eb:01:59:ac:9d:b6:14:6e:76:fe:34: 2a:c7:be:4e:be:21:59:43:37:28:52:99:bf:10:bf: 36:af:fe:ee:1c:cd:54:53:65:60:b4:bd:b3:ec:00: ee:e4:53:27:6a:d2:93:ab:e9:30:da:86:47:1a:63: 78:56:1f:9a:1b:b9:ba:7b:52:6c:8b:e4:48:98:eb: ac:a1:bd:ee:85:8f:ca:0c:6d:cf:71:7d:9f:59:54: cd:c5:da:35:d6:c2:97:71:52:9d:54:be:39:20:e8: 81:bb:2e:aa:55:67:11:27:ad:55:26:f0:28:24:2e: 55:38:51:ef:14:99:e3:2a:37:d2:25:2a:c5:bd:d6: e9:d0:d4:0e:c3:e1:a9:86:b8:a6:4c:c2:bc:6b:f1: 24:f6:f3:ad:9c:ec:0d:cd:53:c4:20:61:b9:4f:dc: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:90:83:BE:2C:A1:F6:CD:EA:97:82:94:11:0F:BC:29:44:20:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcaa2509-b5d2-3eae-8d81-54d650e5ce1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d0:8d:3a:3c:af:dd:e4:43:2c:7a:c6:50:73:0d:c0:48:21: a5:0c:3e:f9:7d:8a:b5:9d:02:fe:65:fe:3f:81:3f:c7:ef:53: 9b:7b:28:ee:2e:97:9c:0e:95:51:9a:cc:b1:91:24:4c:d6:87: 98:0e:d1:be:ef:71:1e:e3:d4:a7:6d:fc:44:18:3f:68:7c:66: fa:e8:06:59:8b:5b:07:27:1a:9a:a1:0a:0e:80:b5:e4:fb:42: 28:ed:04:db:47:2e:19:52:de:91:6f:8a:41:66:c4:6a:1f:ff: 0d:d8:41:91:3e:fd:60:0e:4a:88:69:37:47:9a:d4:e6:f7:b7: 54:97:25:74:94:05:6e:8d:45:6e:2f:98:92:d0:02:17:3c:76: d6:2e:54:58:6c:23:14:20:07:d3:cf:0a:61:2e:f9:7e:96:84: e3:0c:88:90:ab:1f:9e:b3:23:55:70:df:31:06:20:25:77:91: 5c:c3:5c:8b:fa:fa:33:5e:d3:aa:ef:fb:17:d2:20:ab:fd:8e: 74:0a:4a:81:50:21:8a:30:18:62:f9:a3:60:c1:c9:5f:f4:d7: 73:fb:64:88:14:20:36:a3:48:48:69:08:5e:ba:41:0b:d8:4c: 95:53:26:d1:cc:e8:55:03:25:f1:25:06:dc:9c:fa:d7:fd:f8: db:59:9c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BT3oSp789lBjE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk M2RlNTBjZGQtNDhiMS00Zjg4LWFmYTktOTNjZTE5ZGYzMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7eoVe/HMAhZsFWc8qwOCsjmcnuzIa5gxlFh mJctc/LjwyxpKDSNwcnLp1RVYkYpCjEP11FrV4ppIvpYkQ80EbUzj/QuhEnVmp/u LSDnYlERLin7EbwT3wGudFAK6wFZrJ22FG52/jQqx75OviFZQzcoUpm/EL82r/7u HM1UU2VgtL2z7ADu5FMnatKTq+kw2oZHGmN4Vh+aG7m6e1Jsi+RImOusob3uhY/K DG3PcX2fWVTNxdo11sKXcVKdVL45IOiBuy6qVWcRJ61VJvAoJC5VOFHvFJnjKjfS JSrFvdbp0NQOw+GphrimTMK8a/Ek9vOtnOwNzVPEIGG5T9ynDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwgkIO+LKH2zeqXgpQRD7wpRCCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmNhYTI1MDktYjVkMi0z ZWFlLThkODEtNTRkNjUwZTVjZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/QjTo8r93kQyx6xlBzDcBIIaUMPvl9irWdAv5l/j+BP8fvU5t7KO4u l5wOlVGazLGRJEzWh5gO0b7vcR7j1Kdt/EQYP2h8ZvroBlmLWwcnGpqhCg6AteT7 QijtBNtHLhlS3pFvikFmxGof/w3YQZE+/WAOSohpN0ea1Ob3t1SXJXSUBW6NRW4v mJLQAhc8dtYuVFhsIxQgB9PPCmEu+X6WhOMMiJCrH56zI1Vw3zEGICV3kVzDXIv6 +jNe06rv+xfSIKv9jnQKSoFQIYowGGL5o2DByV/013P7ZIgUIDajSEhpCF66QQvY TJVTJtHM6FUDJfElBtyc+tf9+NtZnDY= -----END CERTIFICATE-----Generated at Fri Apr 17 03:47:08 2026 by rpki-client