$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa File: 6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa (raw, json) Hash identifier: 4OWYoZaMa6j5DE7wMYUaymHa9zvIUvqPaDlsjpGPkBU= Subject key identifier: 6F:E2:8B:3A:E7:B3:3F:43:BA:C0:69:5F:82:BA:49:C6:E1:EB:1B:D0 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584C7D7C698F50A3CD08B4FC0D00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 53508 IP address blocks: 24.89.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:69:8f:50:a3:cd:08:b4:fc:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=24f53701-a768-4fab-8329-4164495d8adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:f7:3a:53:07:96:3d:c2:0e:26:ba:30:42: f4:3b:d9:b0:6c:41:16:11:3a:d7:79:20:35:f5:0b: 45:f8:f3:fa:b5:9b:31:03:51:3f:1d:f4:e5:ef:2e: 2b:1d:53:58:d3:51:a7:7b:84:01:a0:6a:e0:72:e8: 7f:28:52:59:b9:48:d9:52:25:aa:54:6a:0d:ac:c5: ca:6e:44:72:a5:60:03:c6:68:ee:cd:22:30:2c:4b: 16:8e:a6:5e:c4:82:ab:48:84:2f:73:c2:6a:05:85: 6c:06:e1:73:0e:61:59:f6:3f:3e:57:75:74:4a:a0: 65:ec:84:28:0f:04:de:5c:73:8a:30:84:a2:99:97: 4c:33:98:f7:b9:89:e3:a9:c4:6f:c8:33:44:78:e6: a0:a0:c0:66:12:6e:e9:dc:c9:39:d2:f9:40:1c:79: 0b:ad:c4:ba:33:0a:d8:e5:0c:65:8d:75:56:41:2b: 55:3b:f1:e8:34:5e:e7:26:ee:f8:fe:48:d0:25:10: 6c:61:46:24:7a:75:25:ae:52:57:82:25:0a:06:59: f6:de:f4:61:eb:9e:33:8d:64:2e:5f:4e:74:27:ef: 91:73:4f:01:e6:db:26:b5:cb:29:81:0d:b7:c7:b1: c7:f4:20:29:e9:4d:09:32:70:8e:7f:9c:dc:72:c5: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E2:8B:3A:E7:B3:3F:43:BA:C0:69:5F:82:BA:49:C6:E1:EB:1B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:e9:2f:ad:f7:24:ae:35:a8:a0:43:c5:5d:9a:b8:5b:b2: 44:02:dd:dc:00:9e:e6:9b:06:75:79:45:bd:a4:ef:3a:f3:30: db:c2:7e:8f:bc:f6:f8:b7:08:c8:99:9d:10:fa:cd:ae:50:64: c6:13:28:a0:c0:8e:54:55:ca:e7:53:42:07:d4:19:9f:b7:1a: 2c:47:d4:2a:87:0e:8d:35:37:cb:9b:26:40:9a:91:44:6b:bd: 2a:f3:41:ef:b3:d7:70:e5:4e:25:80:10:9d:bd:2f:c1:f1:b7: e2:5c:e6:0f:04:a0:be:77:87:22:a6:42:02:9b:7a:3e:37:6c: 2b:df:fc:9f:b6:a1:09:b3:a6:3d:92:5b:df:1b:58:1e:68:8b: 84:a6:7b:10:3f:e5:c5:92:3b:39:b0:b1:a6:23:27:9c:70:b9: af:59:b1:06:19:3e:f3:d4:ae:a9:f0:b4:7f:7b:f6:d7:74:14: ec:d9:f8:0b:4a:69:a2:b3:d1:fc:e8:e9:93:33:1f:f7:65:49: b1:5d:ad:30:b6:5d:7a:fe:c3:53:66:f7:96:2f:25:60:cf:61: 52:a0:36:10:b5:ce:2a:a5:40:82:84:2d:eb:a3:d1:8f:6e:38: 2c:71:57:82:0b:12:bf:cc:10:5d:b4:8d:6f:5a:a1:ff:a4:df: 1e:34:c6:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGmPUKPNCLT8DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MjRmNTM3MDEtYTc2OC00ZmFiLTgzMjktNDE2NDQ5NWQ4YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygv3OlMHlj3CDia6MEL0O9mwbEEWETrXeSA1 9QtF+PP6tZsxA1E/HfTl7y4rHVNY01Gne4QBoGrgcuh/KFJZuUjZUiWqVGoNrMXK bkRypWADxmjuzSIwLEsWjqZexIKrSIQvc8JqBYVsBuFzDmFZ9j8+V3V0SqBl7IQo DwTeXHOKMISimZdMM5j3uYnjqcRvyDNEeOagoMBmEm7p3Mk50vlAHHkLrcS6MwrY 5QxljXVWQStVO/HoNF7nJu74/kjQJRBsYUYkenUlrlJXgiUKBln23vRh654zjWQu X050J++Rc08B5tsmtcspgQ23x7HH9CAp6U0JMnCOf5zccsVsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/iizrnsz9DusBpX4K6Scbh6xvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNmM4YTQ2OTQtMDBkZC0z ZTFjLTlkZTItYzdlYzQ3NTJkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGFk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy26S+t9ySuNaigQ8VdmrhbskQC3dwAnuabBnV5Rb2k7zrzMNvCfo+8 9vi3CMiZnRD6za5QZMYTKKDAjlRVyudTQgfUGZ+3GixH1CqHDo01N8ubJkCakURr vSrzQe+z13DlTiWAEJ29L8Hxt+Jc5g8EoL53hyKmQgKbej43bCvf/J+2oQmzpj2S W98bWB5oi4SmexA/5cWSOzmwsaYjJ5xwua9ZsQYZPvPUrqnwtH979td0FOzZ+AtK aaKz0fzo6ZMzH/dlSbFdrTC2XXr+w1Nm95YvJWDPYVKgNhC1ziqlQIKELeuj0Y9u OCxxV4ILEr/MEF20jW9aof+k3x40xvE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:08 2026 by rpki-client