$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0443ed63-bdb0-3397-9726-ca6b2191fabc.roa File: 0443ed63-bdb0-3397-9726-ca6b2191fabc.roa (raw, json) Hash identifier: BIJIIS/RJGOHBxG22vgtp0Ebfzha3/dG/W31x6r4REQ= Subject key identifier: 0F:4F:D3:03:03:07:D6:17:DB:3E:DC:BE:F7:42:D5:94:3C:86:4E:6A Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584D6A72BEB0D8D8D3B2C7F60BB0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0443ed63-bdb0-3397-9726-ca6b2191fabc.roa Signing time: Mon 06 Apr 2026 11:08:27 +0000 ROA not before: Mon 06 Apr 2026 11:08:27 +0000 ROA not after: Sun 05 Jul 2026 11:08:27 +0000 asID: 46450 IP address blocks: 208.64.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:72:be:b0:d8:d8:d3:b2:c7:f6:0b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Apr 6 11:08:27 2026 GMT Not After : Jul 5 11:08:27 2026 GMT Subject: CN=6a8ec0da-c18f-4c6a-a282-4c159a913b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:8d:bf:1b:a1:5c:5f:09:69:48:18:1a:f1: 75:c5:d8:33:06:79:9e:26:04:9a:a7:87:b2:e8:20: 5b:a8:36:b6:d0:15:22:fe:2e:3e:e4:2d:4f:8a:96: 40:95:90:46:b8:e6:3a:37:20:00:b2:c6:28:3a:37: 3e:0c:a7:73:c0:36:b0:1a:2b:15:5a:86:63:dc:de: 1e:dc:87:a8:ed:a6:a1:45:d3:f3:50:b2:88:a7:68: 34:01:b5:93:68:58:df:3a:f4:a8:e8:07:26:a5:6b: b8:23:3a:de:0e:a5:6a:2a:58:00:27:de:0e:34:56: f3:e8:7f:17:ba:08:35:80:38:08:06:d1:90:6d:ca: 1c:6d:43:c7:a8:73:d1:e0:48:89:db:fd:04:d7:1d: 4c:3a:0d:50:76:95:e5:09:79:40:01:33:23:c0:57: 6b:75:90:a6:e9:1a:4a:f9:a1:e3:b2:a9:47:77:ae: 8e:71:b5:f6:6b:4e:ae:e2:68:07:a8:1e:df:78:29: 05:55:d1:5f:f8:f1:ad:de:e6:10:ba:79:34:7e:90: e6:e9:6e:a7:a6:24:ba:25:2f:1e:4e:eb:68:54:56: b4:38:1f:65:e2:e9:4d:bd:41:30:be:ae:96:f8:92: 5c:60:de:ef:93:64:ae:2f:4a:93:4e:b7:ad:a7:ba: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4F:D3:03:03:07:D6:17:DB:3E:DC:BE:F7:42:D5:94:3C:86:4E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0443ed63-bdb0-3397-9726-ca6b2191fabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 208.64.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:ee:0b:c5:4b:5d:4a:f6:56:21:f8:c1:e9:f3:dc:5e:e7: dd:62:ef:90:c1:5d:b0:9a:46:21:3a:ea:43:2e:6a:2b:1d:a8: 36:f3:c3:94:4c:2c:53:57:c4:8b:1b:61:87:07:30:97:7a:0d: 7c:2a:1e:29:f5:73:ad:75:2f:f6:50:23:7d:8d:0c:39:dc:8d: 25:cb:d8:26:c9:dd:8a:5a:50:0e:c1:62:4b:df:09:47:a7:2e: cd:77:e4:17:55:a5:b1:f1:e7:e6:b2:9e:3e:06:6a:38:4a:84: 0e:5f:73:80:6d:26:fd:4f:04:29:05:77:20:35:82:ab:d5:8c: 00:81:3f:f9:e7:50:60:24:a5:85:21:af:ad:fb:de:99:21:7e: 49:07:62:02:28:7b:7c:ba:00:46:2a:a6:b7:18:c1:c6:3a:37: 63:a0:ce:d5:53:04:29:01:8a:82:52:3f:0e:14:03:bc:a8:5b: 90:b3:08:72:9d:a4:11:42:a3:f6:90:f4:60:26:fb:9b:6e:60: e1:26:81:9c:3d:90:a0:7d:d5:ec:e5:24:8f:b3:50:7a:b2:4f: 61:73:99:0b:d2:78:fc:3b:12:ac:33:3e:6b:7b:b0:5e:21:e3: 45:75:26:cd:6d:8c:d1:c9:4f:44:e1:eb:a5:28:7c:fa:0c:63: d5:e0:db:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qcr6w2NjTssf2C7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDQwNjExMDgyN1oXDTI2MDcwNTExMDgyN1owLzEtMCsGA1UEAxMk NmE4ZWMwZGEtYzE4Zi00YzZhLWEyODItNGMxNTlhOTEzYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFWNvxuhXF8JaUgYGvF1xdgzBnmeJgSap4ey 6CBbqDa20BUi/i4+5C1PipZAlZBGuOY6NyAAssYoOjc+DKdzwDawGisVWoZj3N4e 3Ieo7aahRdPzULKIp2g0AbWTaFjfOvSo6AcmpWu4IzreDqVqKlgAJ94ONFbz6H8X ugg1gDgIBtGQbcocbUPHqHPR4EiJ2/0E1x1MOg1QdpXlCXlAATMjwFdrdZCm6RpK +aHjsqlHd66OcbX2a06u4mgHqB7feCkFVdFf+PGt3uYQunk0fpDm6W6npiS6JS8e TutoVFa0OB9l4ulNvUEwvq6W+JJcYN7vk2SuL0qTTretp7o8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9P0wMDB9YX2z7cvvdC1ZQ8hk5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDQ0M2VkNjMtYmRiMC0z Mzk3LTk3MjYtY2E2YjIxOTFmYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBj7gvFS11K9lYh+MHp89xe591i75DBXbCaRiE66kMuaisdqDbzw5RM LFNXxIsbYYcHMJd6DXwqHin1c611L/ZQI32NDDncjSXL2CbJ3YpaUA7BYkvfCUen Ls135BdVpbHx5+aynj4GajhKhA5fc4BtJv1PBCkFdyA1gqvVjACBP/nnUGAkpYUh r6373pkhfkkHYgIoe3y6AEYqprcYwcY6N2OgztVTBCkBioJSPw4UA7yoW5CzCHKd pBFCo/aQ9GAm+5tuYOEmgZw9kKB91ezlJI+zUHqyT2FzmQvSePw7EqwzPmt7sF4h 40V1Js1tjNHJT0Th66UofPoMY9Xg29g= -----END CERTIFICATE-----Generated at Sun Apr 19 08:23:24 2026 by rpki-client