$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa File: 2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa (raw, json) Hash identifier: gQwkeLx9qre+s4Kn7/Pj1k73x5irUsZuoWhmB5MxZJs= Subject key identifier: 97:46:F5:E2:24:5C:20:6B:ED:B4:62:6B:C1:89:8F:B9:3C:81:FE:C4 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C3AF273BA558A63F5C40 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:af:27:3b:a5:58:a6:3f:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8a8eedba-a8bf-46f9-b2dd-f81d62b442a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:e4:53:a4:20:39:4b:9b:06:91:49:97:54: e9:90:c9:ed:67:40:9b:3e:7b:9f:eb:5b:56:b9:89: c2:05:71:b3:0f:28:23:3e:9c:3d:a0:4f:34:70:1c: 6b:cc:20:1e:25:f0:b8:16:26:a9:f9:b8:f8:da:ad: ce:a9:03:65:a7:ff:ee:b7:96:11:0e:26:52:5f:03: 5a:d5:75:7c:ef:83:9c:5a:d0:0c:46:1e:cd:b4:84: 4e:6a:dd:7c:26:1d:7a:ef:4c:2e:c8:3c:d5:76:dc: 9a:1b:a8:6a:c4:f4:b7:6b:83:06:9c:5a:b5:04:54: b1:40:7d:8e:31:07:74:ad:f4:9b:86:f8:5b:d0:9a: c4:b4:bd:5a:46:3a:07:c8:0b:f2:91:73:9d:c4:c3: c2:9f:7e:28:c0:e4:4f:18:7f:68:9e:c7:f2:6c:0a: c0:b1:c3:fb:e0:29:61:33:fc:4a:c5:98:ad:94:44: 09:6a:bf:0d:d9:09:97:1b:27:46:76:55:89:61:56: 55:60:11:f9:3a:7a:e6:5f:1a:0c:d0:8e:72:f1:cf: 86:58:fc:9a:0d:3e:23:20:aa:2a:1c:1f:9f:34:15: ff:3c:b8:d0:07:8e:3c:ff:a2:65:a7:a1:91:e8:ed: 49:f8:98:6e:f1:95:a8:d4:52:16:1c:c2:97:d1:dc: 49:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:F5:E2:24:5C:20:6B:ED:B4:62:6B:C1:89:8F:B9:3C:81:FE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:39:6e:6e:cb:4b:72:0d:e0:f4:1c:29:e1:2f:23:1c:cc:c4: 1d:de:46:f1:55:56:4e:04:ce:75:dc:57:75:34:93:22:bd:09: 9e:5b:af:8a:da:5b:74:f7:93:3c:56:bf:5b:71:be:67:68:92: aa:5c:57:70:75:2f:ed:bc:d6:89:03:5b:43:4e:85:a5:44:83: 8f:7a:38:84:de:a2:f6:e8:16:da:e3:30:2a:7a:74:c6:de:d4: 3c:21:0b:55:c3:53:ce:ab:ff:04:68:e6:9a:3f:f7:a8:81:6b: 75:d2:d5:d2:d3:57:2a:10:b4:bf:67:f7:c1:15:88:4f:9e:1c: ff:b4:46:06:e5:a7:ce:0a:a6:d4:48:db:0f:0e:24:75:05:c0: f5:34:92:91:1f:9c:03:fb:2a:04:92:45:a5:e0:b7:5b:07:50: 7f:08:85:60:7e:65:a3:4e:f9:a2:2c:b0:74:c1:42:2c:b9:99: 14:c3:79:1a:2c:bb:ad:8d:94:78:86:f8:c9:c0:4b:f1:8e:d0: 24:88:f2:ef:d1:f3:19:7d:aa:fe:84:f0:52:6b:62:39:f2:ce: b8:fb:af:9d:70:83:01:dd:48:a3:52:73:37:be:9f:c8:44:cf: 9d:0a:6b:67:6f:72:33:2a:5e:55:0a:96:50:16:8b:65:4d:3c: 5a:ee:34:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8OvJzulWKY/XEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGE4ZWVkYmEtYThiZi00NmY5LWIyZGQtZjgxZDYyYjQ0MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmULkU6QgOUubBpFJl1TpkMntZ0CbPnuf61tW uYnCBXGzDygjPpw9oE80cBxrzCAeJfC4Fiap+bj42q3OqQNlp//ut5YRDiZSXwNa 1XV874OcWtAMRh7NtIROat18Jh1670wuyDzVdtyaG6hqxPS3a4MGnFq1BFSxQH2O MQd0rfSbhvhb0JrEtL1aRjoHyAvykXOdxMPCn34owORPGH9onsfybArAscP74Clh M/xKxZitlEQJar8N2QmXGydGdlWJYVZVYBH5OnrmXxoM0I5y8c+GWPyaDT4jIKoq HB+fNBX/PLjQB448/6Jlp6GR6O1J+Jhu8ZWo1FIWHMKX0dxJ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdG9eIkXCBr7bRia8GJj7k8gf7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmFhYTFiNmQtMDYyNC0z Y2NmLWJkZjUtMzI2MDA0Y2Y4MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC05bm7LS3IN4PQcKeEvIxzMxB3eRvFVVk4EznXcV3U0kyK9CZ5br4ra W3T3kzxWv1txvmdokqpcV3B1L+281okDW0NOhaVEg496OITeovboFtrjMCp6dMbe 1DwhC1XDU86r/wRo5po/96iBa3XS1dLTVyoQtL9n98EViE+eHP+0Rgblp84KptRI 2w8OJHUFwPU0kpEfnAP7KgSSRaXgt1sHUH8IhWB+ZaNO+aIssHTBQiy5mRTDeRos u62NlHiG+MnAS/GO0CSI8u/R8xl9qv6E8FJrYjnyzrj7r51wgwHdSKNScze+n8hE z50Ka2dvcjMqXlUKllAWi2VNPFruNFw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:18 2025 by rpki-client