$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa File: 2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa (raw, json) Hash identifier: zEio+i42RfH2ouIMso/PjaIEDHYFvV+thqMJu+QfLRk= Subject key identifier: D4:8D:77:D5:26:2B:1F:40:43:B1:91:30:30:50:2B:66:66:E3:7A:F0 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C20FEEF41C11FEBC52BAC0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0f:ee:f4:1c:11:fe:bc:52:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=63ac1dde-18a1-4fb1-af52-75d4d945c0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:2f:3a:2b:9d:05:c0:a4:15:47:bb:f4:4b: cf:fd:12:46:4e:b4:4e:e1:57:aa:ea:6e:d7:0c:00: 1b:2a:66:74:26:96:d9:9b:09:a4:ca:d7:7c:3b:5d: 90:16:3e:c4:20:e9:fe:65:97:b3:00:e4:32:2c:ef: 49:f5:e2:74:f5:0d:da:9d:c0:8a:52:c8:3b:2d:79: 0e:d5:ee:17:a0:d8:b9:16:a0:6a:14:01:cc:ec:fb: 35:22:54:65:dc:b0:b1:88:db:33:7f:99:0a:0e:03: 37:40:8d:7a:57:c7:78:af:a6:0a:6f:8c:36:ca:43: a5:38:08:07:5e:c5:14:50:5e:16:55:16:12:f7:81: 9a:da:dc:31:92:6c:c4:52:52:bf:c8:d3:e3:78:f8: 2e:63:b4:b6:ab:93:9c:bc:23:c3:9b:ad:45:aa:2f: 72:b7:37:2f:8d:4b:ac:65:59:b1:24:cb:91:90:b9: a7:e6:ab:e9:4e:40:a1:70:25:10:bf:b3:9f:50:cb: ad:4c:1c:10:61:31:a8:58:e0:f5:e3:4f:e6:b8:12: 76:28:74:59:4a:5d:b7:9d:ee:00:22:6a:b4:d8:8b: 89:dd:49:99:b0:b7:13:cc:68:4e:18:50:0a:99:96: 73:a8:4a:98:84:a4:15:a8:97:26:d9:c5:5a:0d:bf: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:77:D5:26:2B:1F:40:43:B1:91:30:30:50:2B:66:66:E3:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8b:ff:50:27:0f:fb:c7:92:d6:b6:cd:4b:c9:16:05:bf:1e: b7:21:6f:04:b8:f1:2d:7a:50:1a:fc:ef:b6:e6:7a:93:51:4b: bf:2a:10:77:e7:e4:2f:20:73:c3:80:7b:f8:73:32:be:4b:df: 10:41:73:78:8c:2e:6b:68:2f:8f:86:c4:b7:a5:80:b2:23:18: e4:1a:ea:c8:04:d5:fc:58:ac:5e:4f:3e:b7:2b:75:02:93:bd: 9d:f9:f9:c5:04:9e:f5:91:a8:b5:3b:70:13:5d:63:65:66:eb: 9a:dd:2d:15:a0:8d:a9:78:2c:c6:8a:64:ca:b4:a7:23:97:d7: 32:0d:8d:97:38:41:bb:db:65:79:63:34:9c:16:48:5e:f7:ab: a8:db:cf:a7:e0:bd:51:7c:cf:bc:27:8a:c2:6a:cf:51:2b:a5: 70:d0:70:26:68:7b:1f:5a:af:c8:e3:4e:67:02:38:ab:4f:c4: f7:fb:fe:07:75:f5:19:03:d7:38:23:57:78:df:a9:60:5d:ed: 5e:58:d2:49:c1:a7:8d:d1:e0:15:ee:63:f3:7c:15:c9:31:6c: 3f:d2:73:2c:e2:5c:cb:81:d8:13:2f:27:15:73:41:83:ec:b6: 83:95:fc:4e:7f:74:ba:9f:fb:64:49:8d:80:99:0b:91:9d:55: d5:67:16:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg/u9BwR/rxSusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NjNhYzFkZGUtMThhMS00ZmIxLWFmNTItNzVkNGQ5NDVjMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouQvOiudBcCkFUe79EvP/RJGTrRO4Veq6m7X DAAbKmZ0JpbZmwmkytd8O12QFj7EIOn+ZZezAOQyLO9J9eJ09Q3ancCKUsg7LXkO 1e4XoNi5FqBqFAHM7Ps1IlRl3LCxiNszf5kKDgM3QI16V8d4r6YKb4w2ykOlOAgH XsUUUF4WVRYS94Ga2twxkmzEUlK/yNPjePguY7S2q5OcvCPDm61Fqi9ytzcvjUus ZVmxJMuRkLmn5qvpTkChcCUQv7OfUMutTBwQYTGoWOD140/muBJ2KHRZSl23ne4A Imq02IuJ3UmZsLcTzGhOGFAKmZZzqEqYhKQVqJcm2cVaDb/cuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSNd9UmKx9AQ7GRMDBQK2Zm43rwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmFhYTFiNmQtMDYyNC0z Y2NmLWJkZjUtMzI2MDA0Y2Y4MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaL/1AnD/vHkta2zUvJFgW/HrchbwS48S16UBr877bmepNRS78qEHfn 5C8gc8OAe/hzMr5L3xBBc3iMLmtoL4+GxLelgLIjGOQa6sgE1fxYrF5PPrcrdQKT vZ35+cUEnvWRqLU7cBNdY2Vm65rdLRWgjal4LMaKZMq0pyOX1zINjZc4QbvbZXlj NJwWSF73q6jbz6fgvVF8z7wnisJqz1ErpXDQcCZoex9ar8jjTmcCOKtPxPf7/gd1 9RkD1zgjV3jfqWBd7V5Y0knBp43R4BXuY/N8FckxbD/ScyziXMuB2BMvJxVzQYPs toOV/E5/dLqf+2RJjYCZC5GdVdVnFrk= -----END CERTIFICATE-----Generated at Tue Sep 22 14:52:53 2026 by rpki-client