$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa File: 3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa (raw, json) Hash identifier: ZfM3govK4HOUfX/lFNI65y4KsFS5rnihZI8GemIiCKA= Subject key identifier: 2A:41:89:EF:E3:73:B3:3A:60:4C:2C:01:76:DD:0C:A4:43:E2:E7:9E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C20EDF5C414B9358D49F00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 24.244.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0e:df:5c:41:4b:93:58:d4:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=f2858019-9120-4550-8378-ed8cb66f65e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:ec:92:88:30:5d:44:8b:63:e6:b0:2b:e2: 8e:58:67:20:85:a4:46:08:10:2a:8f:b9:7d:f7:5d: 31:da:08:85:7f:df:ee:bd:95:df:84:21:3d:13:69: b5:11:d2:04:31:73:e5:f2:94:92:a2:8f:93:0e:24: b8:7b:4f:1b:44:d5:0b:a7:7d:00:d4:b5:f7:16:b6: c3:1f:5a:6c:18:ab:5d:45:8d:58:61:44:81:a4:41: 0d:d3:17:d4:eb:2f:7e:b4:59:b0:8e:e8:b0:45:52: 10:6b:f2:85:c4:6e:8a:9e:c9:6d:8c:29:1d:97:9d: b3:f7:3d:3e:8a:db:dd:ae:d6:a2:9d:3c:1b:b8:f2: 55:a7:3d:23:59:78:2e:a1:82:fc:63:84:7e:ed:1f: ab:6a:b1:7d:3d:7b:c0:b6:58:0e:f7:7a:ec:d6:36: 61:fa:69:02:45:07:57:85:90:b7:0d:1c:cc:3e:26: 90:da:25:89:3f:c4:eb:12:04:53:c7:e7:38:80:eb: d9:bc:ef:95:e1:03:12:d0:43:da:da:57:03:d8:eb: cb:dd:6e:76:c6:d3:10:94:b4:e7:ae:c9:23:6d:c3: 2a:fa:dc:55:af:9c:3d:ce:47:06:3b:da:02:35:6f: 9e:02:2f:aa:20:6f:0e:2b:52:21:aa:b8:c4:29:d7: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:89:EF:E3:73:B3:3A:60:4C:2C:01:76:DD:0C:A4:43:E2:E7:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bf:76:14:ae:71:e4:a3:4c:26:76:0c:0d:01:0a:67:49:11: a6:8b:bf:27:b0:ec:47:c8:4c:d0:8b:16:81:4e:1a:31:b0:51: e6:30:b8:18:ae:b0:f8:d1:23:b6:eb:f8:6b:36:92:56:01:28: 8a:65:be:2c:e8:68:7c:38:84:9c:db:18:73:b1:93:51:f1:b7: 95:fc:48:76:2e:23:4a:f8:cf:f3:2d:97:e1:1b:16:26:c2:1f: 46:29:bb:d3:a9:2a:03:f9:54:ed:bb:be:f1:5f:e0:a0:4f:70: e0:f5:2f:5a:4d:98:13:d5:09:d6:1a:67:6a:92:52:c8:d5:7a: 43:64:3c:5b:34:f9:fb:3e:2f:30:a1:5a:a5:93:23:39:b6:af: d7:a5:cd:e0:50:3c:0b:35:f9:2f:5d:58:4f:3b:a4:fe:42:0d: a9:3e:3f:5d:1f:3a:1c:ea:1c:d0:56:17:89:ef:20:c4:dd:a4: 67:a8:3c:fe:02:87:d0:b6:c3:db:5e:79:3d:66:cb:19:9e:05: bc:ec:23:04:4b:72:8c:22:94:65:a6:3c:d6:ef:a8:c1:b1:90: 4a:a4:a2:51:0d:4a:c1:72:1f:2a:26:f0:f8:67:82:05:4b:d8: e3:4b:35:28:63:98:f3:c6:5d:29:84:c1:62:f1:49:b4:8a:01: b9:20:94:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg7fXEFLk1jUnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjI4NTgwMTktOTEyMC00NTUwLTgzNzgtZWQ4Y2I2NmY2NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvLskogwXUSLY+awK+KOWGcghaRGCBAqj7l9 910x2giFf9/uvZXfhCE9E2m1EdIEMXPl8pSSoo+TDiS4e08bRNULp30A1LX3FrbD H1psGKtdRY1YYUSBpEEN0xfU6y9+tFmwjuiwRVIQa/KFxG6KnsltjCkdl52z9z0+ itvdrtainTwbuPJVpz0jWXguoYL8Y4R+7R+rarF9PXvAtlgO93rs1jZh+mkCRQdX hZC3DRzMPiaQ2iWJP8TrEgRTx+c4gOvZvO+V4QMS0EPa2lcD2OvL3W52xtMQlLTn rskjbcMq+txVr5w9zkcGO9oCNW+eAi+qIG8OK1IhqrjEKdeGZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpBie/jc7M6YEwsAXbdDKRD4ueeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2FmMTRjM2YtZTNlNy0z MzMyLWI5YmItOWQ5N2ZhNWU4ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq/dhSuceSjTCZ2DA0BCmdJEaaLvyew7EfITNCLFoFOGjGwUeYwuBiu sPjRI7br+Gs2klYBKIplvizoaHw4hJzbGHOxk1Hxt5X8SHYuI0r4z/Mtl+EbFibC H0Ypu9OpKgP5VO27vvFf4KBPcOD1L1pNmBPVCdYaZ2qSUsjVekNkPFs0+fs+LzCh WqWTIzm2r9elzeBQPAs1+S9dWE87pP5CDak+P10fOhzqHNBWF4nvIMTdpGeoPP4C h9C2w9teeT1myxmeBbzsIwRLcowilGWmPNbvqMGxkEqkolENSsFyHyom8PhnggVL 2ONLNShjmPPGXSmEwWLxSbSKAbkglOA= -----END CERTIFICATE-----Generated at Wed Sep 23 06:39:58 2026 by rpki-client