$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa File: bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa (raw, json) Hash identifier: 06upZQ0FVsZdSM+NLnUjV2jBm3FGRFTvP8NmMzFBPpE= Subject key identifier: 73:9E:16:31:B7:BE:9F:BB:FA:2D:86:D6:8E:A1:7B:C4:DB:C8:AB:42 Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584D55BA3E871C07FF34664837B0 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 40232 IP address blocks: 204.48.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3e:87:1c:07:ff:34:66:48:37:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=06481905-9e38-4e9f-aba6-6a0bb4cc4d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:18:67:75:b9:cc:98:32:4b:c9:8a:9b:a5: 3d:08:9a:4e:69:c1:cf:c3:fe:d0:cc:f1:05:f5:83: 93:e6:d5:ad:ed:90:dd:8f:fc:fa:39:2a:e5:1d:68: bf:5e:05:00:08:4b:cc:6e:4c:34:c7:43:31:b4:e9: f4:67:e7:73:a8:1b:57:93:fb:47:8a:37:de:f0:92: 39:73:d7:20:c3:3f:ad:22:2a:d0:2f:85:a1:db:82: c1:46:ec:d3:fb:a6:97:e0:38:5d:75:48:bd:77:c5: e4:de:b1:31:77:83:54:27:9b:f6:97:67:d7:7d:a8: e9:94:1f:fd:28:31:2b:89:65:a2:6e:45:27:53:1e: a0:eb:79:d3:ee:6d:d3:bb:6e:95:ce:32:37:7e:27: dd:da:67:3b:a5:4c:52:61:13:0a:1b:c2:90:fd:ed: d1:4c:41:45:6d:79:90:81:40:6f:0b:31:c4:02:2a: 11:df:e9:8f:24:12:7c:49:67:4e:9a:ec:1c:1c:92: e9:aa:68:22:ba:4a:82:8d:17:8f:b1:60:2a:4f:5e: 0b:14:62:17:2b:61:e6:94:ed:97:65:c2:f7:12:4f: 20:19:f7:24:72:13:d4:11:e6:13:78:c9:ad:ce:35: 04:5d:2b:fe:aa:49:c7:91:6c:c2:e4:c4:b5:40:6e: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9E:16:31:B7:BE:9F:BB:FA:2D:86:D6:8E:A1:7B:C4:DB:C8:AB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 204.48.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a2:92:96:ec:49:b1:fe:a6:66:ea:56:09:e3:5f:80:95:6f: 8e:c0:4f:4c:f3:95:5b:aa:3f:2e:ae:aa:6c:3e:d2:b9:3e:b4: e7:58:78:01:e3:24:7d:e2:af:47:ed:df:35:07:78:b3:92:b6: b9:c2:1b:87:25:ce:75:9d:4c:2e:42:a5:0b:56:4f:3d:3c:07: b6:fe:c4:cd:fb:29:77:2a:0b:b6:ed:6b:62:8b:d8:2e:d8:78: ee:f5:14:a1:bd:2b:6a:7c:fe:e6:0d:6d:ed:eb:2d:b7:82:88: de:52:4c:a0:71:2a:9c:ae:88:5e:1d:9e:31:74:2e:26:e0:8c: dc:46:75:e0:36:7a:f2:34:93:e7:7b:28:f3:a8:ba:72:1d:57: 40:c9:a1:d7:11:db:5e:12:36:bd:4d:b2:5e:37:68:69:23:2e: dc:71:c6:f0:91:b7:5c:af:31:5b:84:aa:c5:24:12:71:ed:94: e7:b2:1e:97:f3:3f:54:46:b3:83:ba:fc:7e:93:25:a3:82:3c: 79:58:3f:8a:d4:61:08:36:db:55:d7:17:3c:31:dc:68:7c:dd: 60:b4:12:db:1a:76:12:68:5e:13:aa:03:e8:2a:47:86:0d:a3: 57:4c:84:f4:5e:09:de:a1:4f:fd:05:94:af:9c:e1:7d:62:b9: 39:93:36:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuj6HHAf/NGZIN7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDY0ODE5MDUtOWUzOC00ZTlmLWFiYTYtNmEwYmI0Y2M0ZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsoYZ3W5zJgyS8mKm6U9CJpOacHPw/7QzPEF 9YOT5tWt7ZDdj/z6OSrlHWi/XgUACEvMbkw0x0MxtOn0Z+dzqBtXk/tHijfe8JI5 c9cgwz+tIirQL4Wh24LBRuzT+6aX4DhddUi9d8Xk3rExd4NUJ5v2l2fXfajplB/9 KDEriWWibkUnUx6g63nT7m3Tu26VzjI3fifd2mc7pUxSYRMKG8KQ/e3RTEFFbXmQ gUBvCzHEAioR3+mPJBJ8SWdOmuwcHJLpqmgiukqCjRePsWAqT14LFGIXK2HmlO2X ZcL3Ek8gGfckchPUEeYTeMmtzjUEXSv+qknHkWzC5MS1QG7lyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOeFjG3vp+7+i2G1o6he8TbyKtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvYmM1ZTg0Y2YtNzA1NC0z M2RlLWE2ZWUtOTBjMzMzMThkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyikpbsSbH+pmbqVgnjX4CVb47AT0zzlVuqPy6uqmw+0rk+tOdYeAHj JH3ir0ft3zUHeLOStrnCG4clznWdTC5CpQtWTz08B7b+xM37KXcqC7bta2KL2C7Y eO71FKG9K2p8/uYNbe3rLbeCiN5STKBxKpyuiF4dnjF0LibgjNxGdeA2evI0k+d7 KPOounIdV0DJodcR214SNr1Nsl43aGkjLtxxxvCRt1yvMVuEqsUkEnHtlOeyHpfz P1RGs4O6/H6TJaOCPHlYP4rUYQg221XXFzwx3Gh83WC0EtsadhJoXhOqA+gqR4YN o1dMhPReCd6hT/0FlK+c4X1iuTmTNsY= -----END CERTIFICATE-----Generated at Fri Apr 17 19:35:01 2026 by rpki-client