$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json) Hash identifier: ZX6+gu9SScDv/SCbkJxzTrzFT6RnGPCnWnDHPp4G6R4= Subject key identifier: 0A:77:F9:9C:DD:C0:9B:6A:C2:E2:DF:E9:97:3B:75:B8:0C:FF:F6:01 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584ABD4B99BB495AD10BC96BDDC0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 53508 IP address blocks: 206.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:99:bb:49:5a:d1:0b:c9:6b:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=c84a3ad0-5f92-4bd4-92f2-84a790b87643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:18:c8:92:9f:9d:40:e3:6f:6a:69:b6:90: 26:6b:24:35:4f:50:3d:54:45:34:56:54:67:ab:09: 68:2e:87:46:29:ed:37:78:83:8b:1b:45:cd:dd:f2: e5:e6:7b:8c:c5:50:c3:3c:a4:52:41:d3:3e:25:4c: f6:27:85:72:c1:4e:cf:e0:b5:a9:ae:36:86:ba:56: 00:01:08:35:f5:19:3a:22:8c:76:9e:2f:b8:17:1b: 5d:8c:6a:20:be:ef:4b:62:4f:e1:45:65:25:b6:de: 8c:a5:71:34:56:d0:97:61:85:52:6f:95:5e:97:8a: 25:19:61:3a:29:f4:c4:61:98:1b:21:f8:c5:0d:29: c7:d3:93:18:f2:18:69:c9:3e:8c:92:17:85:31:b8: e6:bb:c7:09:f6:01:a9:ee:c8:f8:30:95:6f:87:0f: 4f:ce:b6:c0:29:83:87:74:81:80:81:77:c6:13:14: 45:e2:76:e9:0a:34:2b:18:c8:9a:79:df:a5:3a:7b: b3:d7:35:80:fc:8f:5a:d6:c6:77:04:7c:36:a1:5f: 5a:a4:8a:9e:00:74:a0:61:f8:5b:c5:12:70:41:9e: 30:43:96:93:51:a8:a5:a8:db:56:48:d6:fb:d9:7a: 01:56:61:ba:02:ed:66:3c:13:c9:b4:46:99:b8:e6: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:F9:9C:DD:C0:9B:6A:C2:E2:DF:E9:97:3B:75:B8:0C:FF:F6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9c:1c:c4:37:1d:98:88:f1:8f:0e:06:60:28:68:2d:f0:a0: 85:25:5c:14:97:8c:c4:f9:dc:7d:04:f3:ee:c1:df:bf:3a:34: c6:a7:50:da:db:71:13:d5:95:06:26:0d:f8:cc:b0:93:e3:49: f8:77:0d:32:9a:88:c2:96:1a:bf:74:48:84:98:dc:bc:f7:af: 39:89:f0:10:04:a0:22:d6:8b:e6:5d:aa:61:b7:8f:d7:17:69: 83:cc:2b:39:5d:96:e9:ef:09:20:e2:f5:1b:5e:da:d4:18:7c: 0c:8e:27:bf:7c:f5:38:8d:29:af:f8:81:7a:dc:6d:89:af:f3: c9:3d:36:b3:97:89:8e:cb:81:91:e2:ef:8e:86:3e:04:fe:ee: 57:a7:a0:44:b1:c2:9e:00:7a:e7:26:64:be:f8:f6:48:7b:44: b6:f4:c9:94:03:47:13:92:e8:f2:de:b3:92:89:dc:72:51:14: 47:66:6d:81:ac:47:53:b0:f8:43:0d:73:8c:ac:4b:3e:8d:a9: c0:38:1a:e0:6a:78:cb:ab:3c:ff:75:e6:bd:d5:48:1d:dc:81: 3d:44:37:2e:eb:2e:58:0e:74:65:5e:a9:e7:ad:b4:ad:da:4d: d3:5a:9f:74:cc:05:01:08:8b:f4:62:ec:f3:a4:9d:2e:d4:72: 69:25:00:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5m7SVrRC8lr3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk Yzg0YTNhZDAtNWY5Mi00YmQ0LTkyZjItODRhNzkwYjg3NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHcYyJKfnUDjb2pptpAmayQ1T1A9VEU0VlRn qwloLodGKe03eIOLG0XN3fLl5nuMxVDDPKRSQdM+JUz2J4VywU7P4LWprjaGulYA AQg19Rk6Iox2ni+4FxtdjGogvu9LYk/hRWUltt6MpXE0VtCXYYVSb5Vel4olGWE6 KfTEYZgbIfjFDSnH05MY8hhpyT6MkheFMbjmu8cJ9gGp7sj4MJVvhw9PzrbAKYOH dIGAgXfGExRF4nbpCjQrGMiaed+lOnuz1zWA/I9a1sZ3BHw2oV9apIqeAHSgYfhb xRJwQZ4wQ5aTUailqNtWSNb72XoBVmG6Au1mPBPJtEaZuObKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3+ZzdwJtqwuLf6Zc7dbgM//YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIacHMQ3HZiI8Y8OBmAoaC3woIUlXBSXjMT53H0E8+7B3786NManUNrb cRPVlQYmDfjMsJPjSfh3DTKaiMKWGr90SISY3Lz3rzmJ8BAEoCLWi+ZdqmG3j9cX aYPMKzldlunvCSDi9Rte2tQYfAyOJ7989TiNKa/4gXrcbYmv88k9NrOXiY7LgZHi 746GPgT+7lenoESxwp4AeucmZL749kh7RLb0yZQDRxOS6PLes5KJ3HJRFEdmbYGs R1Ow+EMNc4ysSz6NqcA4GuBqeMurPP915r3VSB3cgT1ENy7rLlgOdGVeqeettK3a TdNan3TMBQEIi/Ri7POknS7UcmklAP8= -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:45 2025 by rpki-client