$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3d9cde72-1f23-3b33-8eba-ae082602427a.roa File: 3d9cde72-1f23-3b33-8eba-ae082602427a.roa (raw, json) Hash identifier: VCL6kNiaMbOt3TZJWYS7n9HDBHZQSPDzZ2dnCIGtaNg= Subject key identifier: 9E:57:A1:FE:FC:89:BA:6D:9B:C7:C3:47:2B:CD:5A:89:23:62:4C:16 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C210075920B0A39CDFC1C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3d9cde72-1f23-3b33-8eba-ae082602427a.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:10:07:59:20:b0:a3:9c:df:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=603c8e72-0198-4d8a-b763-3cf25192d78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:d0:b8:83:db:60:9c:63:60:1e:19:5f:41: b0:7a:31:94:40:ee:ae:c5:22:8c:cd:af:d3:e8:c3: c6:21:47:ee:3d:05:aa:7c:96:04:b4:8c:64:33:9b: 88:3f:dc:8c:1d:dd:a7:d3:fe:42:1b:3e:74:da:2f: 23:61:63:de:50:00:92:81:30:2a:93:b6:8c:a7:26: db:6d:2b:69:34:f1:ba:2a:1a:e8:d0:21:0b:65:c0: 29:16:fa:32:ea:1b:70:d7:0c:18:5f:a8:67:3f:9c: c0:ac:8b:0d:31:ac:5e:0b:86:9a:34:c4:f0:fc:ae: 68:65:44:41:95:96:43:fd:0a:5d:34:85:f3:56:bf: d9:26:01:5d:89:d3:45:06:d8:3a:60:64:43:f4:2c: 85:6c:fe:6f:f6:7b:de:86:b3:ea:ce:62:bd:3a:68: 0b:bd:8b:18:3a:8c:1d:81:a6:e9:79:4b:e7:52:e7: cb:a2:c5:a8:bd:c6:77:9e:82:7e:f8:e6:e2:50:b7: 77:fc:9f:a4:d0:8e:24:2d:21:45:40:37:48:8d:b8: 76:3f:c6:f1:50:43:d1:65:9b:18:96:22:54:11:8f: 19:f2:16:76:77:c8:1a:d8:5c:db:76:d2:fe:c4:99: 32:e5:01:9c:be:32:26:a1:12:c5:32:00:f5:2a:80: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:A1:FE:FC:89:BA:6D:9B:C7:C3:47:2B:CD:5A:89:23:62:4C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3d9cde72-1f23-3b33-8eba-ae082602427a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:14:1b:4f:93:7b:2e:07:0c:3b:28:d0:2c:e5:ab:cd:79:f5: 99:a3:3c:96:5b:87:a6:0d:4d:58:e6:34:3b:51:ab:b7:c6:7d: 10:8d:51:f6:84:60:14:50:39:1d:26:55:f7:b5:63:00:a5:e3: 5b:6d:fb:c0:97:4f:83:47:a9:df:38:e8:be:84:ff:b2:0a:2f: bd:c0:39:b6:f4:c3:f0:21:a0:fd:4b:b4:0d:45:56:4c:a3:4c: 4c:f5:27:b4:7a:d8:69:4d:0b:12:49:d3:72:57:4e:77:44:40: 12:b0:b4:35:5a:5d:59:04:22:62:74:25:fa:9a:18:af:fd:25: 82:61:07:d8:7c:82:b7:80:2e:21:90:c4:55:45:29:d7:63:8f: f1:e4:07:a6:10:09:9b:d1:ae:ff:f1:2f:9c:d7:a2:01:21:4f: 93:0c:9e:71:cc:a8:1a:26:9d:34:f4:3d:32:b6:14:78:2c:cb: 93:6b:85:b3:b2:09:14:e0:0e:30:19:82:0d:0e:16:2f:1f:4c: 17:59:94:f4:77:b8:fd:fd:0f:1b:da:95:12:1b:9b:4f:5a:6f: 77:d5:18:68:d1:d2:36:f1:be:19:74:ee:b5:a7:5e:c2:7a:09: ea:eb:dd:38:d9:31:61:f5:c0:26:39:84:a7:d7:5a:d8:44:93: a2:98:42:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhAHWSCwo5zfwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NjAzYzhlNzItMDE5OC00ZDhhLWI3NjMtM2NmMjUxOTJkNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnQuIPbYJxjYB4ZX0GwejGUQO6uxSKMza/T 6MPGIUfuPQWqfJYEtIxkM5uIP9yMHd2n0/5CGz502i8jYWPeUACSgTAqk7aMpybb bStpNPG6Khro0CELZcApFvoy6htw1wwYX6hnP5zArIsNMaxeC4aaNMTw/K5oZURB lZZD/QpdNIXzVr/ZJgFdidNFBtg6YGRD9CyFbP5v9nvehrPqzmK9OmgLvYsYOowd gabpeUvnUufLosWovcZ3noJ++ObiULd3/J+k0I4kLSFFQDdIjbh2P8bxUEPRZZsY liJUEY8Z8hZ2d8ga2FzbdtL+xJky5QGcvjImoRLFMgD1KoDN9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5Xof78ibptm8fDRyvNWokjYkwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2Q5Y2RlNzItMWYyMy0z YjMzLThlYmEtYWUwODI2MDI0MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcUG0+Tey4HDDso0Czlq8159ZmjPJZbh6YNTVjmNDtRq7fGfRCNUfaE YBRQOR0mVfe1YwCl41tt+8CXT4NHqd846L6E/7IKL73AObb0w/AhoP1LtA1FVkyj TEz1J7R62GlNCxJJ03JXTndEQBKwtDVaXVkEImJ0JfqaGK/9JYJhB9h8greALiGQ xFVFKddjj/HkB6YQCZvRrv/xL5zXogEhT5MMnnHMqBomnTT0PTK2FHgsy5NrhbOy CRTgDjAZgg0OFi8fTBdZlPR3uP39DxvalRIbm09ab3fVGGjR0jbxvhl07rWnXsJ6 Cerr3TjZMWH1wCY5hKfXWthEk6KYQsM= -----END CERTIFICATE-----Generated at Sun Oct 4 22:05:55 2026 by rpki-client