$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa File: 4424548c-9e14-33ec-919d-7d3e1baa168f.roa (raw, json) Hash identifier: SfSeQd+1vAFGqgcFbtFLVyKDgwrWxZz5+vvF0e7hCtE= Subject key identifier: 2F:E4:00:2C:0C:C8:87:57:BF:78:DB:A0:7F:BA:9B:63:E8:47:BA:70 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C4C54AFF1488B277C280 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c4:c5:4a:ff:14:88:b2:77:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fd860c0d-2574-490b-a5be-94e8e725ceca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:5e:e5:00:41:56:d1:fb:f9:dc:c9:9d:e5: 7b:b9:7e:95:68:e8:40:2f:82:fb:2f:16:c3:36:f6: 1a:3c:da:bd:2b:7d:8d:11:31:15:31:88:a4:a3:d1: b7:87:7e:ab:6f:35:2a:75:de:96:1e:4f:80:4b:23: 7f:52:ed:17:20:9d:8e:d6:21:63:ad:18:b8:86:99: 85:dc:eb:93:b4:36:d6:4f:9f:0f:90:4b:de:50:50: 6d:a6:7c:23:92:29:a1:35:c7:2c:8c:c2:8a:5b:78: 26:17:39:df:44:19:2d:6a:4c:75:1b:d2:8c:56:bd: 36:cc:0b:cc:8e:9a:51:05:c4:06:f0:29:09:44:32: f5:11:6a:eb:33:7e:9d:fa:f3:91:93:5c:58:07:37: e4:12:c8:a5:af:74:3b:85:e0:c0:c2:69:41:9c:fe: fd:d5:3e:67:ff:c5:65:4d:a3:5d:ba:a4:44:e0:e0: 09:dd:66:ea:1a:81:ed:60:0b:d3:7f:71:71:be:f9: 50:b6:15:ae:a7:af:07:19:d1:dc:c3:91:fc:10:d5: 4f:5d:7c:4c:bd:02:51:97:41:c1:93:9a:c5:f1:20: 20:d8:88:bb:d7:c3:39:0e:79:7f:ed:26:36:5e:fa: a8:66:cc:6e:4a:56:2e:45:30:6f:2f:27:bc:7b:3c: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E4:00:2C:0C:C8:87:57:BF:78:DB:A0:7F:BA:9B:63:E8:47:BA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:13:02:b3:b9:11:26:bb:15:ea:a1:03:e4:71:88:18:a1:da: d4:d4:bb:80:80:13:76:25:76:bb:f5:f0:6d:46:97:9a:79:1a: c7:ea:15:1c:83:97:cf:b2:14:d9:3c:a7:11:32:68:5a:72:76: 77:97:88:fe:8b:18:18:48:2d:20:45:45:61:82:ec:a0:32:ec: a7:15:48:2f:8c:8a:aa:20:c3:df:2d:84:72:67:98:63:d4:a5: f3:13:d0:28:bf:c3:b8:cc:00:22:1d:1f:ce:40:48:5b:91:65: d7:05:01:21:85:ea:69:bc:83:3d:7b:88:45:2d:97:c7:a9:53: c8:7a:b3:1e:91:cf:cf:f8:30:90:f2:5f:de:59:4e:bc:ef:44: 91:b8:44:71:bc:77:72:12:2f:d6:a1:d8:6e:51:ae:17:05:64: d4:04:6f:da:30:32:6c:28:06:1f:f0:27:e5:42:b8:15:4e:70: 92:f5:7a:83:01:be:36:22:a0:16:e6:b6:6e:46:b3:8f:c9:a7: 66:ac:ff:71:db:fc:d4:3f:6f:92:c7:33:18:ce:5c:51:c3:48: cd:1f:11:3f:4b:39:d2:be:28:13:00:17:ba:a7:2b:19:b8:24: 61:76:85:cd:0c:1b:86:5e:91:3a:04:2e:ec:59:7e:6b:55:37: 26:b0:39:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8TFSv8UiLJ3woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmQ4NjBjMGQtMjU3NC00OTBiLWE1YmUtOTRlOGU3MjVjZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUhe5QBBVtH7+dzJneV7uX6VaOhAL4L7LxbD NvYaPNq9K32NETEVMYiko9G3h36rbzUqdd6WHk+ASyN/Uu0XIJ2O1iFjrRi4hpmF 3OuTtDbWT58PkEveUFBtpnwjkimhNccsjMKKW3gmFznfRBktakx1G9KMVr02zAvM jppRBcQG8CkJRDL1EWrrM36d+vORk1xYBzfkEsilr3Q7heDAwmlBnP791T5n/8Vl TaNduqRE4OAJ3WbqGoHtYAvTf3FxvvlQthWup68HGdHcw5H8ENVPXXxMvQJRl0HB k5rF8SAg2Ii718M5Dnl/7SY2XvqoZsxuSlYuRTBvLye8ezxLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/kACwMyIdXv3jboH+6m2PoR7pwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDQyNDU0OGMtOWUxNC0z M2VjLTkxOWQtN2QzZTFiYWExNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFETArO5ESa7FeqhA+RxiBih2tTUu4CAE3Yldrv18G1Gl5p5GsfqFRyD l8+yFNk8pxEyaFpydneXiP6LGBhILSBFRWGC7KAy7KcVSC+Miqogw98thHJnmGPU pfMT0Ci/w7jMACIdH85ASFuRZdcFASGF6mm8gz17iEUtl8epU8h6sx6Rz8/4MJDy X95ZTrzvRJG4RHG8d3ISL9ah2G5RrhcFZNQEb9owMmwoBh/wJ+VCuBVOcJL1eoMB vjYioBbmtm5Gs4/Jp2as/3Hb/NQ/b5LHMxjOXFHDSM0fET9LOdK+KBMAF7qnKxm4 JGF2hc0MG4ZekToELuxZfmtVNyawOXY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:47 2025 by rpki-client