$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa File: 79af0ffd-19dc-3f61-a048-83af6276d1fe.roa (raw, json) Hash identifier: 6bPGPB2c0C+aKKF3wf8C+HYjYwnhl5mDnoJNEey6vVQ= Subject key identifier: A6:14:46:CA:A3:CB:7B:3F:A5:E0:16:B4:86:6C:57:71:58:96:E7:33 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C20604D6FC07B4AFAC45C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 24.89.52.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:06:04:d6:fc:07:b4:af:ac:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=4f19e882-046a-4f64-8a54-35e4180a1e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:5a:1f:28:27:21:4b:7c:9d:8e:09:6f:d3: 23:b4:0d:90:96:28:2d:2e:d3:92:9f:d5:77:17:63: 6d:e3:2a:16:f4:41:3a:27:ef:f9:a6:52:33:61:a9: 26:80:67:e5:9e:13:64:8e:e6:5e:ab:09:ce:10:46: 62:d0:14:45:d8:ad:a5:9c:85:67:1e:b3:84:42:33: f0:16:94:62:8c:5b:42:a4:5a:6e:10:29:8a:45:05: 20:6c:ab:eb:7f:df:ef:95:f7:15:e6:60:38:9b:4b: 7b:c4:3d:92:4f:61:55:f0:37:0d:59:4d:71:35:fd: 13:ec:b8:6c:56:42:29:f7:22:07:c0:10:1d:26:a5: 61:e3:a5:37:c3:9f:e1:54:21:c4:79:b6:e4:7d:c8: c6:ab:76:97:a9:b9:f9:7f:0b:3b:1b:90:35:eb:98: 9f:eb:de:82:a2:a4:6c:c6:36:f6:09:79:1d:f5:6e: 19:e3:61:e8:bf:93:13:83:30:89:d9:03:41:71:8f: 51:1d:c5:f9:92:f7:f2:56:f2:57:d4:95:b7:46:57: bb:2c:59:a9:f6:8c:81:ea:c5:b7:24:e0:0a:2f:c0: 1e:20:fb:f7:72:6f:e6:5f:cf:7d:50:e4:7b:21:b7: 28:5d:71:6a:80:a2:94:9f:21:8e:45:25:04:3e:65: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:14:46:CA:A3:CB:7B:3F:A5:E0:16:B4:86:6C:57:71:58:96:E7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:87:b8:b1:88:2b:62:7c:95:82:c5:82:a3:ba:04:65:5b:e0: 1d:d2:90:09:01:a4:fe:b6:80:dc:70:8c:ed:5e:f4:f3:c5:46: ec:c5:63:c2:79:76:89:9c:3b:51:97:2d:b0:26:fc:9e:56:5f: d3:1f:92:df:81:6a:f5:7e:c6:7f:01:cc:9d:8b:e3:dd:fa:83: e8:57:f6:bc:bb:19:ca:05:27:c5:0a:8d:4e:b4:3f:91:cc:f8: 50:8d:0e:5a:ac:7b:f1:d6:fd:a4:42:a5:37:a1:31:df:3b:78: a5:d2:a6:83:67:ef:ab:05:41:33:80:fa:37:24:0e:b4:48:3a: 79:f2:56:22:0b:5e:90:f2:0d:ec:72:52:9f:a2:af:8e:55:8a: 2e:7e:41:5f:52:01:be:7c:85:b1:ad:51:01:ec:7a:2f:35:e4: 64:69:f2:60:f9:8a:d8:a4:f0:a0:63:a4:df:0e:76:2e:90:ff: b0:ad:31:67:f1:3b:89:01:fc:1e:1f:15:85:bb:63:1b:4f:8a: 3d:3a:12:3d:6d:76:33:ad:50:27:b8:80:19:69:b7:64:f2:37: fe:28:eb:fc:9e:55:a4:84:c9:b8:e3:58:44:84:fa:e5:4a:b4: 68:25:04:68:21:d5:b9:09:ce:a5:f5:80:e6:f9:d4:49:70:bc: 78:cd:b7:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgYE1vwHtK+sRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NGYxOWU4ODItMDQ2YS00ZjY0LThhNTQtMzVlNDE4MGExZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qtaHygnIUt8nY4Jb9MjtA2QligtLtOSn9V3 F2Nt4yoW9EE6J+/5plIzYakmgGflnhNkjuZeqwnOEEZi0BRF2K2lnIVnHrOEQjPw FpRijFtCpFpuECmKRQUgbKvrf9/vlfcV5mA4m0t7xD2ST2FV8DcNWU1xNf0T7Lhs VkIp9yIHwBAdJqVh46U3w5/hVCHEebbkfcjGq3aXqbn5fws7G5A165if696CoqRs xjb2CXkd9W4Z42Hov5MTgzCJ2QNBcY9RHcX5kvfyVvJX1JW3Rle7LFmp9oyB6sW3 JOAKL8AeIPv3cm/mX899UOR7IbcoXXFqgKKUnyGORSUEPmWR3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYURsqjy3s/peAWtIZsV3FYluczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNzlhZjBmZmQtMTlkYy0z ZjYxLWEwNDgtODNhZjYyNzZkMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGFk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeHuLGIK2J8lYLFgqO6BGVb4B3SkAkBpP62gNxwjO1e9PPFRuzFY8J5 domcO1GXLbAm/J5WX9Mfkt+BavV+xn8BzJ2L4936g+hX9ry7GcoFJ8UKjU60P5HM +FCNDlqse/HW/aRCpTehMd87eKXSpoNn76sFQTOA+jckDrRIOnnyViILXpDyDexy Up+ir45Vii5+QV9SAb58hbGtUQHsei815GRp8mD5itik8KBjpN8Odi6Q/7CtMWfx O4kB/B4fFYW7YxtPij06Ej1tdjOtUCe4gBlpt2TyN/4o6/yeVaSEybjjWESE+uVK tGglBGgh1bkJzqX1gOb51ElwvHjNt6Q= -----END CERTIFICATE-----Generated at Tue Sep 29 05:09:47 2026 by rpki-client