$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3d9cde72-1f23-3b33-8eba-ae082602427a.roa File: 3d9cde72-1f23-3b33-8eba-ae082602427a.roa (raw, json) Hash identifier: Dn/gPXPNoOu89pfmpLwdvzr7Ec1DTjbUx3A5RCbchcA= Subject key identifier: A6:68:07:3A:EF:D6:27:34:CA:C9:08:88:E7:79:57:53:AD:FE:57:5D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C3D0C0BA8662E8001736 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3d9cde72-1f23-3b33-8eba-ae082602427a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:d0:c0:ba:86:62:e8:00:17:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d6861b73-74fe-43d5-8697-d39d6f186b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:8d:3c:70:77:53:de:ca:32:76:2f:80:e4: cc:c4:30:ec:0f:07:75:de:15:0e:51:14:9a:39:6f: 7c:be:dc:26:3f:83:c3:7b:f0:81:ee:08:de:3c:15: 64:74:33:99:78:e8:fe:2e:89:eb:48:4d:d3:4c:e4: 0d:76:3e:61:01:a7:5d:6a:aa:ec:f3:32:30:db:89: 69:93:4a:a5:7b:84:50:ee:97:d9:19:2c:ba:09:1f: 17:64:83:8f:ba:78:d3:ab:ae:d0:6f:e3:61:24:21: 7d:84:11:37:03:2a:59:f4:01:d3:7f:1a:1a:ad:f3: 93:87:3f:ff:ba:72:06:67:5a:bc:44:91:3e:69:9d: 7e:7c:4c:8c:29:1f:6e:a8:f5:67:91:fd:f4:f7:6c: 7b:72:4a:84:59:11:b7:aa:d5:e8:ad:6b:dc:a0:61: bb:d4:3a:0f:d4:b5:e4:df:ea:cd:b2:97:4f:01:99: f8:3d:a9:53:2d:74:4f:6a:57:7e:19:2d:14:ac:74: b9:ea:4b:83:c9:85:6f:33:d3:c2:6e:99:4d:f7:ba: ae:01:9d:15:18:ea:65:88:ae:0a:5d:5f:86:3b:85: e2:e3:51:46:70:78:c5:ce:ec:6a:2a:f2:dd:0c:53: 1f:da:d7:7b:c7:45:79:5b:98:53:d4:6a:5c:1e:4b: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:07:3A:EF:D6:27:34:CA:C9:08:88:E7:79:57:53:AD:FE:57:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3d9cde72-1f23-3b33-8eba-ae082602427a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cc:67:08:df:64:70:b8:d8:fd:09:9f:e4:9f:03:e6:86:64: 2c:bb:82:7d:cc:d3:68:17:d6:74:46:c3:a5:4c:67:21:d5:af: 02:19:ab:c4:f8:9a:e0:fb:e8:0a:73:14:82:55:07:56:9b:7d: 30:19:fd:60:f1:22:a1:6c:69:7d:0f:48:d4:0e:de:75:ff:dd: 3f:24:13:42:6a:e1:47:e2:9f:ec:3a:f8:15:27:b0:02:7c:18: 51:4f:b1:2f:a7:44:40:26:c8:ca:16:46:c5:41:07:a4:b7:54: 77:ca:2f:49:8c:8e:8e:ae:16:e4:86:ed:1f:62:4e:39:fc:a9: be:e7:e1:14:78:a9:35:09:9e:db:8b:f0:8e:8b:37:89:82:9c: c3:8b:bc:b2:0c:e0:4c:d8:f2:d0:32:5b:a9:cc:78:56:f4:3e: 16:26:51:04:09:19:9e:d2:1e:07:d2:68:cd:e8:99:c6:d0:1b: 3d:45:be:68:89:3c:f9:b5:fa:4d:7e:7d:d6:7d:87:35:82:fd: 95:be:e7:c7:35:1e:8c:bb:73:07:b5:db:0d:61:35:21:a9:c5: 4a:56:ef:e8:59:55:02:74:53:c8:a8:ac:0e:9f:d3:f3:3e:7f: a3:2b:27:77:82:bc:b7:7f:d8:9c:dc:8d:e8:6a:7b:26:42:7c: db:69:2d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8PQwLqGYugAFzYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDY4NjFiNzMtNzRmZS00M2Q1LTg2OTctZDM5ZDZmMTg2YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtKNPHB3U97KMnYvgOTMxDDsDwd13hUOURSa OW98vtwmP4PDe/CB7gjePBVkdDOZeOj+LonrSE3TTOQNdj5hAaddaqrs8zIw24lp k0qle4RQ7pfZGSy6CR8XZIOPunjTq67Qb+NhJCF9hBE3AypZ9AHTfxoarfOThz// unIGZ1q8RJE+aZ1+fEyMKR9uqPVnkf3092x7ckqEWRG3qtXorWvcoGG71DoP1LXk 3+rNspdPAZn4PalTLXRPald+GS0UrHS56kuDyYVvM9PCbplN97quAZ0VGOpliK4K XV+GO4Xi41FGcHjFzuxqKvLdDFMf2td7x0V5W5hT1GpcHkswaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZoBzrv1ic0yskIiOd5V1Ot/lddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2Q5Y2RlNzItMWYyMy0z YjMzLThlYmEtYWUwODI2MDI0MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLMZwjfZHC42P0Jn+SfA+aGZCy7gn3M02gX1nRGw6VMZyHVrwIZq8T4 muD76ApzFIJVB1abfTAZ/WDxIqFsaX0PSNQO3nX/3T8kE0Jq4Ufin+w6+BUnsAJ8 GFFPsS+nREAmyMoWRsVBB6S3VHfKL0mMjo6uFuSG7R9iTjn8qb7n4RR4qTUJntuL 8I6LN4mCnMOLvLIM4EzY8tAyW6nMeFb0PhYmUQQJGZ7SHgfSaM3omcbQGz1FvmiJ PPm1+k1+fdZ9hzWC/ZW+58c1Hoy7cwe12w1hNSGpxUpW7+hZVQJ0U8iorA6f0/M+ f6MrJ3eCvLd/2JzcjehqeyZCfNtpLeE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:21 2025 by rpki-client