$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json) Hash identifier: x+NikPdXoDeUnbqEC35O0OvHGCaCdrLJYBMHZulldNA= Subject key identifier: 80:01:0B:74:87:0A:63:75:52:D6:D8:C7:2F:1E:D3:30:22:E3:BA:87 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C206D58CB8F64CE7D16A80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:06:d5:8c:b8:f6:4c:e7:d1:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=6bf2b961-22d9-4b0d-9c5c-e5eadc666c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:5f:27:e7:76:1f:1b:87:ca:13:7b:ed:35: d2:ef:eb:31:5d:83:1f:75:b7:69:2c:24:f8:7f:70: b2:d9:55:d6:00:8f:ac:82:ac:3b:36:23:f9:b7:d2: 26:66:3d:de:e5:e1:1e:4c:86:a8:05:fd:c8:1d:ad: 18:40:ee:99:f4:94:dd:bc:aa:93:63:2a:53:07:6a: 13:65:ec:8b:e3:4a:6c:51:16:b1:30:3d:75:42:1f: 46:1c:a8:0d:b9:36:6d:64:ac:2d:bf:14:ca:52:44: 73:d6:4e:8b:33:71:31:32:b1:46:e1:c0:83:9c:01: 56:82:cd:3c:1e:cd:be:a6:54:31:6b:16:3e:6f:8a: a9:50:ad:25:95:fb:58:15:a3:34:39:40:74:d8:2e: b6:60:0e:28:81:fd:c7:c9:b2:b8:25:f4:2e:05:b3: 46:e4:09:75:22:d1:c8:6b:87:ae:48:bc:ac:8c:43: 1e:b8:cd:97:e0:29:29:2a:60:e7:00:dd:11:af:1b: 60:70:80:79:8a:ea:f0:42:39:50:d1:90:7f:d9:f1: 5f:ee:ff:c4:f0:85:a9:06:0a:b4:08:5a:fd:08:00: 3d:1f:79:3d:03:1b:4d:eb:66:09:d2:26:de:fd:8b: d3:cb:a8:f4:ac:9d:84:ab:5d:a5:a6:45:dc:e7:59: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:0B:74:87:0A:63:75:52:D6:D8:C7:2F:1E:D3:30:22:E3:BA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7a:d0:d6:b8:a7:fb:28:bc:ec:79:00:7e:38:82:95:b2:05: 22:1c:48:55:c2:68:6d:6e:b5:c9:53:d2:b7:72:30:02:c8:38: 2a:b9:65:09:d9:a3:3b:0c:a6:44:03:34:6f:81:46:41:6d:91: 4c:f0:53:90:e4:0f:88:53:a1:b1:24:83:9b:aa:23:05:e2:77: 04:eb:36:f3:cd:0f:e0:75:00:5a:28:c6:15:e3:22:53:65:a8: 64:ad:fa:b4:e0:94:96:46:72:10:fd:22:48:6a:ed:8b:6f:f2: ae:b7:42:fd:86:aa:5f:57:27:1d:a2:fa:06:ad:c6:59:a9:17: eb:a3:2a:05:dd:e4:71:5d:2b:4a:ec:e0:b2:7e:9b:b4:9f:1a: 4e:83:0b:84:51:74:8c:91:7b:96:59:b7:71:b7:c7:df:5a:ca: e7:54:84:fd:37:5b:cf:67:d7:8a:2a:10:91:88:31:b3:b3:0b: 6e:75:85:9a:50:3f:bb:b7:f3:f3:f6:71:c8:15:63:d0:ea:48: 92:4e:24:9c:6a:e1:cb:1e:1e:80:e6:4d:50:9b:92:6b:67:7d: d5:1b:0f:ff:3c:70:86:fb:e7:06:0e:4c:09:1d:5a:45:70:8f: 11:4e:d6:ca:44:c8:b7:9d:1b:cb:57:a1:db:8f:3d:d3:11:09: 45:1b:c7:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgbVjLj2TOfRaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NmJmMmI5NjEtMjJkOS00YjBkLTljNWMtZTVlYWRjNjY2YzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhBfJ+d2HxuHyhN77TXS7+sxXYMfdbdpLCT4 f3Cy2VXWAI+sgqw7NiP5t9ImZj3e5eEeTIaoBf3IHa0YQO6Z9JTdvKqTYypTB2oT ZeyL40psURaxMD11Qh9GHKgNuTZtZKwtvxTKUkRz1k6LM3ExMrFG4cCDnAFWgs08 Hs2+plQxaxY+b4qpUK0llftYFaM0OUB02C62YA4ogf3HybK4JfQuBbNG5Al1ItHI a4euSLysjEMeuM2X4CkpKmDnAN0RrxtgcIB5iurwQjlQ0ZB/2fFf7v/E8IWpBgq0 CFr9CAA9H3k9AxtN62YJ0ibe/YvTy6j0rJ2Eq12lpkXc51n04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIABC3SHCmN1UtbYxy8e0zAi47qHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh60Na4p/sovOx5AH44gpWyBSIcSFXCaG1utclT0rdyMALIOCq5ZQnZ ozsMpkQDNG+BRkFtkUzwU5DkD4hTobEkg5uqIwXidwTrNvPND+B1AFooxhXjIlNl qGSt+rTglJZGchD9Ikhq7Ytv8q63Qv2Gql9XJx2i+gatxlmpF+ujKgXd5HFdK0rs 4LJ+m7SfGk6DC4RRdIyRe5ZZt3G3x99ayudUhP03W89n14oqEJGIMbOzC251hZpQ P7u38/P2ccgVY9DqSJJOJJxq4cseHoDmTVCbkmtnfdUbD/88cIb75wYOTAkdWkVw jxFO1spEyLedG8tXoduPPdMRCUUbx5c= -----END CERTIFICATE-----Generated at Mon Sep 28 23:13:30 2026 by rpki-client