$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa File: b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa (raw, json) Hash identifier: lWHvnMqtI5VC2c20Y+yvbrSQJ79EXGZ2p195LAokK9Q= Subject key identifier: 22:C1:43:95:27:69:87:35:F5:25:6E:F3:A9:9B:01:2C:1C:13:14:11 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C20EB8531DFBF131268BC0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 24.89.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0e:b8:53:1d:fb:f1:31:26:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=7d4cb4f7-db5b-49a2-ac60-ee7dd463d2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:67:42:ca:5a:60:8f:70:51:62:5e:9e:8b:68: 01:9f:e1:a9:2e:31:f3:ce:36:75:2c:0f:92:d4:d7: 55:88:a2:d4:6d:51:fd:75:3b:a5:0d:b8:1b:a8:c1: fa:5c:d5:73:0f:27:ba:e0:a7:85:06:b0:6a:e7:45: 47:0f:ba:b0:4b:d2:38:99:08:03:6f:81:7b:22:73: c8:c5:4f:58:2a:0d:2c:9f:1a:c1:55:b5:ba:3d:0d: 19:3d:7b:aa:5e:78:5c:2d:a2:00:18:78:fb:68:81: 08:8f:ef:31:bc:40:15:03:85:c4:54:74:a9:51:6b: 81:8d:25:2d:98:df:d3:07:a0:f3:75:0e:d7:67:54: d1:c1:ec:4a:dc:92:bb:f2:30:e5:5e:bc:99:a6:b3: ca:d7:7d:65:20:0d:ed:4a:53:34:2a:f9:9f:7c:b1: cd:d0:45:9c:73:c5:d4:bc:e9:7d:11:7d:ca:7f:c8: 8f:db:37:91:e8:e8:1a:b8:50:db:69:2a:a4:9a:08: 77:e7:ee:0e:26:b1:45:37:19:fa:f1:df:44:9b:a2: 90:55:6c:d6:64:c3:58:c3:7b:a5:f2:01:ee:64:86: fe:34:a8:7a:5f:ca:9d:49:ce:30:05:8f:3c:6f:34: c4:80:d9:44:0f:e4:d1:1c:25:46:fe:b4:b2:70:d6: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C1:43:95:27:69:87:35:F5:25:6E:F3:A9:9B:01:2C:1C:13:14:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ee:7a:68:c9:5e:70:c4:18:7f:30:6f:45:92:2f:f3:9c:cf: e4:93:d0:b4:55:e3:f1:24:79:7c:c3:bf:43:36:1a:91:ec:70: cf:32:b5:3a:2a:f3:07:b1:09:f1:c8:52:b6:c3:65:fd:ca:5e: fe:b1:6d:58:1b:b8:d6:4f:0a:76:6c:93:3b:6d:d6:2d:0a:32: bb:35:7f:47:92:03:01:a8:61:3a:40:79:6f:a9:89:2a:8b:3c: f5:d6:eb:5e:05:1f:8c:a3:ae:bb:3d:a3:ea:d0:bb:fd:a5:fa: 1a:72:0b:86:5b:23:67:0b:94:88:26:cc:91:1c:c0:21:0d:ae: 27:89:d8:63:d5:93:b3:5d:cd:a1:3f:dd:71:9a:ee:76:09:ae: 22:ee:7e:95:d8:6b:6b:41:2b:a7:53:49:a1:78:b7:03:b9:eb: 49:ab:8d:31:db:b5:75:91:6c:c9:8d:7c:23:89:a4:1e:9e:bb: ff:05:e7:e2:9e:0c:06:3f:37:84:6a:21:6e:a2:8a:28:ad:c9: ea:27:d0:07:97:4d:57:bf:5f:66:65:f6:01:6f:b2:88:8c:4a: 32:5d:e2:71:2d:1e:de:5d:3c:f3:dc:ee:53:99:59:21:a0:a7: bc:8b:3f:2b:dd:f2:b3:e2:01:56:55:64:a6:37:42:29:0e:bb: 58:22:23:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg64Ux378TEmi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk N2Q0Y2I0ZjctZGI1Yi00OWEyLWFjNjAtZWU3ZGQ0NjNkMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2dCylpgj3BRYl6ei2gBn+GpLjHzzjZ1LA+S 1NdViKLUbVH9dTulDbgbqMH6XNVzDye64KeFBrBq50VHD7qwS9I4mQgDb4F7InPI xU9YKg0snxrBVbW6PQ0ZPXuqXnhcLaIAGHj7aIEIj+8xvEAVA4XEVHSpUWuBjSUt mN/TB6DzdQ7XZ1TRwexK3JK78jDlXryZprPK131lIA3tSlM0KvmffLHN0EWcc8XU vOl9EX3Kf8iP2zeR6OgauFDbaSqkmgh35+4OJrFFNxn68d9Em6KQVWzWZMNYw3ul 8gHuZIb+NKh6X8qdSc4wBY88bzTEgNlED+TRHCVG/rSycNaeQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLBQ5UnaYc19SVu86mbASwcExQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjRlN2Y1Y2YtZGFhNC0z YzZkLTkyNWMtMmM4OTgyMGY2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3uemjJXnDEGH8wb0WSL/Ocz+ST0LRV4/EkeXzDv0M2GpHscM8ytToq 8wexCfHIUrbDZf3KXv6xbVgbuNZPCnZskztt1i0KMrs1f0eSAwGoYTpAeW+piSqL PPXW614FH4yjrrs9o+rQu/2l+hpyC4ZbI2cLlIgmzJEcwCENrieJ2GPVk7NdzaE/ 3XGa7nYJriLufpXYa2tBK6dTSaF4twO560mrjTHbtXWRbMmNfCOJpB6eu/8F5+Ke DAY/N4RqIW6iiiityeon0AeXTVe/X2Zl9gFvsoiMSjJd4nEtHt5dPPPc7lOZWSGg p7yLPyvd8rPiAVZVZKY3QikOu1giI1g= -----END CERTIFICATE-----Generated at Wed Sep 23 20:56:27 2026 by rpki-client