$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa File: bcbb36b3-d8e7-31a4-a360-085363e54218.roa (raw, json) Hash identifier: kM9Q+AR6ocOtJsb3XPq/A/Wc/XSvhZxIoV5vDht3kDM= Subject key identifier: 0A:0F:72:E4:CA:B2:3F:27:1A:D0:8B:08:72:32:E6:FC:C2:08:66:6C Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584D5E1A4BBBD2F52A085E90AE40 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6453 IP address blocks: 64.86.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:4b:bb:d2:f5:2a:08:5e:90:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=baad7f34-b21c-4db3-a11a-20864599d2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:a2:2b:58:5b:d9:92:d8:bf:92:52:80:2d: 9b:75:29:ca:b4:89:81:14:8f:4d:eb:66:31:d1:8b: 4d:46:98:b7:9a:94:53:e1:5a:72:5c:93:b0:14:d6: 87:bc:16:8e:96:66:3b:b9:d2:7a:2d:f3:37:71:b2: 7b:ce:c5:b5:9c:19:57:4e:7b:a4:3c:71:e2:72:7e: ce:4b:5a:08:69:e2:17:cc:e8:ca:54:fd:4d:16:b9: 0c:80:86:18:d9:a8:ed:7d:01:59:af:88:0a:85:34: 95:c5:7d:fd:77:96:3c:fa:2c:94:72:9f:56:4e:2d: 13:f0:d7:10:c5:2a:3b:fc:76:ce:c1:71:bf:00:32: 3a:0b:ec:ce:71:74:3a:8d:3b:38:36:3c:9e:9c:02: 8c:10:d4:20:78:0f:b9:10:93:a0:e7:03:dc:8a:c3: 7e:53:8f:34:40:86:f8:87:69:37:d1:9d:72:79:bb: af:33:1c:7b:0e:94:f4:4e:31:de:21:17:44:fd:05: 2b:b6:a7:1a:79:63:16:5a:b5:fe:cf:7a:32:3f:85: 09:4c:e3:72:96:79:36:bd:8c:76:35:92:e7:d6:eb: 78:36:50:a7:e9:18:45:31:7c:3b:b3:96:90:25:b4: 66:cf:f2:da:62:0d:80:e1:21:2c:6e:bf:bb:91:d1: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0F:72:E4:CA:B2:3F:27:1A:D0:8B:08:72:32:E6:FC:C2:08:66:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bcbb36b3-d8e7-31a4-a360-085363e54218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:28:e3:02:1d:56:fb:2c:a4:ab:90:83:bc:ef:fa:62:c7:da: 9e:43:16:f6:74:97:61:fb:d5:bd:e9:c8:88:fa:79:25:1f:fa: ac:ce:cd:f5:f5:dc:10:69:c1:8e:eb:4f:01:7d:ec:f3:93:01: a7:e0:78:42:05:37:41:65:20:7f:d4:65:31:37:3a:73:fe:65: 9c:4f:e5:ef:69:3d:93:45:43:47:7c:62:c2:42:df:ce:17:cc: 99:a8:ad:a9:89:cc:45:14:81:83:ee:0c:0e:6e:f5:5d:d3:19: 45:8f:01:b2:31:f9:b2:a3:a3:01:83:7b:b0:5e:62:aa:bc:58: 47:0a:aa:70:07:52:b8:2e:b8:38:52:51:46:3a:31:07:b6:ab: ad:11:ef:60:89:e4:2b:4b:78:a5:5f:25:5c:a8:fd:7e:aa:92: 1b:61:57:8d:50:d0:da:71:4a:c6:0f:86:e5:06:2d:ec:e9:fb: de:50:43:0b:42:1e:cf:28:5f:00:eb:48:5d:cc:5e:62:ea:06: 54:3f:93:1b:35:c9:d6:1c:d9:4d:47:fe:4b:e1:8d:f1:f8:f5: a2:fd:d2:41:a9:f3:09:50:07:30:30:83:9a:5d:a0:06:60:a5: bf:96:1f:3a:c6:bc:38:85:b5:09:54:2b:40:02:88:13:bb:b0: 9b:5a:9b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGku70vUqCF6QrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmFhZDdmMzQtYjIxYy00ZGIzLWExMWEtMjA4NjQ1OTlkMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji+iK1hb2ZLYv5JSgC2bdSnKtImBFI9N62Yx 0YtNRpi3mpRT4VpyXJOwFNaHvBaOlmY7udJ6LfM3cbJ7zsW1nBlXTnukPHHicn7O S1oIaeIXzOjKVP1NFrkMgIYY2ajtfQFZr4gKhTSVxX39d5Y8+iyUcp9WTi0T8NcQ xSo7/HbOwXG/ADI6C+zOcXQ6jTs4NjyenAKMENQgeA+5EJOg5wPcisN+U480QIb4 h2k30Z1yebuvMxx7DpT0TjHeIRdE/QUrtqcaeWMWWrX+z3oyP4UJTONylnk2vYx2 NZLn1ut4NlCn6RhFMXw7s5aQJbRmz/LaYg2A4SEsbr+7kdGu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoPcuTKsj8nGtCLCHIy5vzCCGZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmNiYjM2YjMtZDhlNy0z MWE0LWEzNjAtMDg1MzYzZTU0MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIo4wIdVvsspKuQg7zv+mLH2p5DFvZ0l2H71b3pyIj6eSUf+qzOzfX1 3BBpwY7rTwF97POTAafgeEIFN0FlIH/UZTE3OnP+ZZxP5e9pPZNFQ0d8YsJC384X zJmoramJzEUUgYPuDA5u9V3TGUWPAbIx+bKjowGDe7BeYqq8WEcKqnAHUrguuDhS UUY6MQe2q60R72CJ5CtLeKVfJVyo/X6qkhthV41Q0NpxSsYPhuUGLezp+95QQwtC Hs8oXwDrSF3MXmLqBlQ/kxs1ydYc2U1H/kvhjfH49aL90kGp8wlQBzAwg5pdoAZg pb+WHzrGvDiFtQlUK0ACiBO7sJtam9k= -----END CERTIFICATE-----Generated at Fri Apr 17 19:14:20 2026 by rpki-client