$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa File: 39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa (raw, json) Hash identifier: ZpoxhS6UDgi/IWGv4c+P1AsWE1cxdQHXUAvSkfeKjqc= Subject key identifier: 89:73:A8:ED:70:29:8E:F0:26:33:E7:E1:22:5E:49:D5:C9:BA:00:9A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B946BAC2CB40607B7BA0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b9:46:ba:c2:cb:40:60:7b:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ff5a851c-e4da-4c1c-8b08-be83fbe2c4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:cf:9c:e6:50:e1:78:3f:44:04:b3:4c:6b: 7f:2f:d2:7f:f5:c1:6b:f6:93:c9:27:8f:d9:15:71: 0b:36:86:be:44:bb:d6:f2:e9:27:77:aa:00:57:aa: ce:2d:7f:a4:21:a4:19:79:55:66:8b:da:4d:51:72: f5:4d:4f:83:71:e7:90:9e:48:5e:b3:78:1d:a6:c5: 85:4f:92:5c:13:94:6c:e3:4a:86:d6:39:01:c8:4b: 4b:06:29:55:66:f0:4b:b9:ae:87:56:06:c7:52:e4: f6:17:c2:01:a4:bb:78:d9:ef:22:c6:c9:78:8a:50: bf:b3:d8:bf:ef:4c:d3:0a:52:82:9e:8d:53:2c:5b: de:ca:2b:17:e7:61:7f:5a:a8:07:5b:47:2c:09:68: e7:3f:46:e0:a8:e5:40:13:2a:a8:c7:87:7f:ed:3f: 3a:de:85:40:dc:15:12:10:d6:60:de:79:33:68:ed: 3f:57:94:f0:cc:fe:ff:a9:5d:bf:6b:3c:c4:de:bb: f2:9d:76:80:33:54:d7:fb:93:a6:10:6b:4b:1c:c2: c5:7e:cd:9f:81:46:59:36:f4:28:2e:ce:48:9b:ac: aa:96:9b:22:8d:bf:bf:fc:60:e0:92:8c:8a:e4:c4: a6:25:10:38:30:d8:19:2d:0f:e3:a6:6b:b4:36:87: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:A8:ED:70:29:8E:F0:26:33:E7:E1:22:5E:49:D5:C9:BA:00:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4d:b3:87:c2:05:9f:2e:02:46:38:34:ae:7c:88:83:6e:4a: ff:87:13:6a:18:5d:00:13:3d:a4:a1:ca:33:78:2c:5f:45:13: 08:30:9b:7b:60:e5:f5:b9:9a:8b:6e:fa:a7:5e:38:2e:fb:b7: 72:fe:41:bc:46:e0:28:79:16:9b:bd:64:50:58:4e:44:c5:bd: 4a:e8:65:b5:49:ad:2d:6c:94:65:a9:ae:26:0a:b5:43:20:85: 6b:29:77:d9:ab:90:f9:48:b2:39:8d:9d:e4:af:2e:bb:97:b7: 1b:ef:e2:d5:2a:11:4f:09:f6:5f:84:3f:71:84:f2:49:1b:b9: 93:61:4f:00:fb:33:02:82:e3:d7:ad:02:01:41:9b:e1:df:85: e6:31:76:5e:54:76:ac:46:62:b9:59:c1:0a:aa:b6:47:6d:0c: c1:fb:ff:33:90:a3:33:09:40:ac:43:3a:8d:b7:76:e4:ed:ba: ba:d7:28:73:0c:94:dd:e1:38:b3:87:b3:e3:bd:96:ce:d3:29: 34:4a:a0:81:0d:f7:cc:a8:e8:a0:47:a2:08:1c:c2:b5:b4:4c: 54:92:9c:80:5b:91:43:53:a5:d5:18:94:fb:77:a2:11:3e:7a: e7:07:1c:98:6c:e2:db:f6:1d:73:24:47:05:ff:99:2e:c3:ed: f1:db:06:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7lGusLLQGB7e6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmY1YTg1MWMtZTRkYS00YzFjLThiMDgtYmU4M2ZiZTJjNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8jPnOZQ4Xg/RASzTGt/L9J/9cFr9pPJJ4/Z FXELNoa+RLvW8uknd6oAV6rOLX+kIaQZeVVmi9pNUXL1TU+DceeQnkhes3gdpsWF T5JcE5Rs40qG1jkByEtLBilVZvBLua6HVgbHUuT2F8IBpLt42e8ixsl4ilC/s9i/ 70zTClKCno1TLFveyisX52F/WqgHW0csCWjnP0bgqOVAEyqox4d/7T863oVA3BUS ENZg3nkzaO0/V5TwzP7/qV2/azzE3rvynXaAM1TX+5OmEGtLHMLFfs2fgUZZNvQo Ls5Im6yqlpsijb+//GDgkoyK5MSmJRA4MNgZLQ/jpmu0NofABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlzqO1wKY7wJjPn4SJeSdXJugCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzllZjVmODUtNmVkNC0z ODczLTk3MzEtY2U5OWRjMWE2YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5Ns4fCBZ8uAkY4NK58iINuSv+HE2oYXQATPaShyjN4LF9FEwgwm3tg 5fW5motu+qdeOC77t3L+QbxG4Ch5Fpu9ZFBYTkTFvUroZbVJrS1slGWpriYKtUMg hWspd9mrkPlIsjmNneSvLruXtxvv4tUqEU8J9l+EP3GE8kkbuZNhTwD7MwKC49et AgFBm+HfheYxdl5UdqxGYrlZwQqqtkdtDMH7/zOQozMJQKxDOo23duTturrXKHMM lN3hOLOHs+O9ls7TKTRKoIEN98yo6KBHoggcwrW0TFSSnIBbkUNTpdUYlPt3ohE+ eucHHJhs4tv2HXMkRwX/mS7D7fHbBk0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:37 2025 by rpki-client