$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json) Hash identifier: arr3CU1HU+fXp0AFcP8DpvAJg+c5SARbgq8ecSXgYTU= Subject key identifier: 7D:C7:1A:F9:18:76:A7:34:CF:36:76:27:89:1E:9F:D3:5F:91:19:9F Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8A057178FF97A9D0A00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:a0:57:17:8f:f9:7a:9d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b3f16b0c-50d9-45b8-ab38-f35dc6bc752d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:9f:f2:28:c7:ac:da:11:8c:cb:3a:82:1d: cb:74:03:94:86:84:54:f4:8b:53:33:dc:e7:65:76: f6:f5:b1:65:2e:b9:75:6e:e0:8d:88:fa:10:92:19: ed:c8:b6:80:07:31:ff:74:58:59:2c:f6:d2:b8:01: 81:54:7c:97:0d:09:2a:1a:7a:2a:f6:c3:7a:be:69: ac:9b:8d:03:f1:46:49:64:36:c0:f2:37:5c:1c:99: c9:7e:db:8b:22:fe:88:ca:14:6d:95:f5:10:31:8a: 14:eb:81:e1:51:3a:e6:6a:30:f6:47:42:4c:bb:07: 9f:9f:a7:49:fc:3d:67:c2:db:69:f4:21:b4:3e:04: 28:85:7d:8b:5b:e8:90:a2:80:b4:2d:a6:0c:98:1f: a0:ad:52:25:1e:e7:05:c6:d2:ed:17:c9:71:c3:85: 83:ba:a2:9c:5a:89:dc:70:d1:a1:a9:02:7b:56:2e: a1:f1:d1:67:56:b3:20:f1:ae:e8:51:6b:38:c1:87: 1e:dc:1a:4e:12:b1:35:e4:7d:19:91:7a:4f:e6:1d: c9:11:be:46:87:e3:71:18:b0:17:7a:1c:a0:89:d2: 65:db:f0:36:71:a3:9e:cc:d8:ba:98:b4:c3:21:36: 48:c1:cd:9b:b3:27:c6:3c:a2:a9:58:ad:56:1c:f9: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:1A:F9:18:76:A7:34:CF:36:76:27:89:1E:9F:D3:5F:91:19:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bc:80:b0:7a:3f:ed:c8:0a:b2:6f:0f:72:e3:15:73:06:8e: 7e:8f:dc:4b:a4:3b:91:e0:dc:f8:a2:c3:09:8e:ea:cc:57:5c: d1:c3:d4:8a:7a:35:2e:f1:83:a9:f0:b2:9a:9f:6e:1f:c8:34: f9:98:ed:b5:38:85:8f:0e:57:fb:f3:c9:c2:8d:90:35:88:27: 48:e1:f8:e4:8d:fe:66:5a:65:fd:25:50:1d:c0:fa:cf:e5:39: b7:52:60:3f:a4:4f:9f:11:e8:f7:1f:78:2e:9b:e4:fc:74:f9: 6b:66:39:a2:b4:15:cf:c8:3d:bd:3b:bb:4a:9f:14:9a:8c:93: c1:7a:e1:9b:30:10:30:5e:08:33:ee:49:14:ae:e1:7c:8d:ea: 94:7d:a0:26:fe:45:98:cb:42:59:d9:18:3a:ff:bd:c9:4d:3e: 3e:13:9f:61:16:f8:40:11:7b:c5:19:c4:03:57:ce:5a:ab:7b: c7:48:f4:72:d5:0f:d3:ae:39:e5:61:9f:62:87:a3:b7:b9:e2: 7a:81:d1:d0:a6:69:2e:fc:05:36:20:bb:fc:d4:1c:c3:05:16: 45:a1:82:b8:aa:33:d7:9f:20:33:d0:fa:c7:db:4b:f5:75:3c: 0b:b0:b1:fd:a7:a8:ac:8b:bd:8a:57:22:b0:ce:1c:ea:34:f2: e4:a3:a5:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7igVxeP+XqdCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjNmMTZiMGMtNTBkOS00NWI4LWFiMzgtZjM1ZGM2YmM3NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD2f8ijHrNoRjMs6gh3LdAOUhoRU9ItTM9zn ZXb29bFlLrl1buCNiPoQkhntyLaABzH/dFhZLPbSuAGBVHyXDQkqGnoq9sN6vmms m40D8UZJZDbA8jdcHJnJftuLIv6IyhRtlfUQMYoU64HhUTrmajD2R0JMuwefn6dJ /D1nwttp9CG0PgQohX2LW+iQooC0LaYMmB+grVIlHucFxtLtF8lxw4WDuqKcWonc cNGhqQJ7Vi6h8dFnVrMg8a7oUWs4wYce3BpOErE15H0ZkXpP5h3JEb5Gh+NxGLAX ehygidJl2/A2caOezNi6mLTDITZIwc2bsyfGPKKpWK1WHPnDiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3HGvkYdqc0zzZ2J4ken9NfkRmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF28gLB6P+3ICrJvD3LjFXMGjn6P3EukO5Hg3PiiwwmO6sxXXNHD1Ip6 NS7xg6nwspqfbh/INPmY7bU4hY8OV/vzycKNkDWIJ0jh+OSN/mZaZf0lUB3A+s/l ObdSYD+kT58R6PcfeC6b5Px0+WtmOaK0Fc/IPb07u0qfFJqMk8F64ZswEDBeCDPu SRSu4XyN6pR9oCb+RZjLQlnZGDr/vclNPj4Tn2EW+EARe8UZxANXzlqre8dI9HLV D9OuOeVhn2KHo7e54nqB0dCmaS78BTYgu/zUHMMFFkWhgriqM9efIDPQ+sfbS/V1 PAuwsf2nqKyLvYpXIrDOHOo08uSjpdY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:40 2025 by rpki-client