$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4905d8ec-3c48-3233-ab75-82dbb1436b28.roa File: 4905d8ec-3c48-3233-ab75-82dbb1436b28.roa (raw, json) Hash identifier: Lvgcs/COPHM/hEBLXFX0FdrVrmpE77XiEvV9Ir57uV0= Subject key identifier: 5A:EF:0D:63:4C:58:A7:0A:6A:FF:8B:72:DF:4A:70:E0:A0:F4:CD:1A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8664C47D0460CD6BBE0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4905d8ec-3c48-3233-ab75-82dbb1436b28.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:66:4c:47:d0:46:0c:d6:bb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=727e7214-46df-4bce-874b-10c667df8b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b9:16:67:55:a1:28:1c:61:9a:ea:9e:07:e4: b5:89:01:f7:e9:24:e8:71:07:1f:7d:51:f1:52:a3: 8c:20:ed:b3:d6:cb:42:9b:96:96:47:28:ed:d9:01: fa:6c:74:69:5a:49:77:55:78:ae:07:3e:1f:83:a1: 82:e5:3b:43:4e:33:c3:6a:e4:64:dc:73:1e:a9:ec: 35:f2:1d:f4:7d:4b:b3:ff:70:b9:04:13:6c:dd:b2: c2:bb:31:c8:21:df:b3:38:d5:ec:78:4c:4c:4d:31: 5c:a1:96:68:0d:9e:20:1b:a8:76:36:6f:81:2b:fd: c5:32:51:56:58:03:7f:0d:dc:a8:ed:6e:77:1d:bd: e0:b1:a8:c0:17:49:91:28:66:88:f0:81:a2:3f:71: a3:99:09:8c:d5:15:09:ba:13:5b:e6:bf:cc:40:91: c2:7a:da:61:00:51:80:80:e1:b3:a3:e9:4d:3c:b3: e1:ca:d0:4b:9f:68:de:ea:97:c8:36:c8:d2:ec:d7: c1:34:4d:34:8d:65:55:76:6a:0c:e2:c5:98:7a:da: f8:a4:e4:24:a2:b7:26:ec:83:56:38:e7:25:90:04: 87:60:b3:0b:9d:23:c8:d3:f5:96:9a:b6:ad:e6:dc: ba:05:4b:75:0c:5a:fa:b4:3f:88:14:05:c3:ec:c3: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EF:0D:63:4C:58:A7:0A:6A:FF:8B:72:DF:4A:70:E0:A0:F4:CD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4905d8ec-3c48-3233-ab75-82dbb1436b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:2e:59:b9:92:2a:1f:32:2a:03:3a:b4:6a:d1:dd:b9:7e: e6:5a:b5:ba:f2:fb:c5:3e:d5:2d:f6:f4:6f:cf:83:71:76:f3: ff:90:b5:6e:44:f6:08:a8:47:bd:05:e4:99:12:6d:44:89:33: 8b:e2:7f:29:a4:27:08:0f:f7:39:9b:5f:d1:13:b4:24:b4:b5: 3f:6f:58:32:ca:b7:7d:e7:41:fd:58:e1:52:6f:82:14:c8:c8: db:02:82:10:b5:25:43:c9:54:c0:e8:f2:ce:51:77:d0:f7:ae: 2f:94:d8:d8:52:d8:a1:08:75:8d:91:89:7c:32:ff:24:81:8e: 54:e1:de:6b:14:09:16:db:9b:ab:55:bf:0a:e4:65:9c:37:fc: c3:4e:36:e4:74:65:da:20:6d:64:77:b6:dc:a7:73:60:b5:39: af:21:a6:cb:cc:b2:a5:ae:7d:9c:93:a2:94:56:8d:71:99:9d: ff:01:26:13:1f:f3:e9:6c:9d:b0:46:65:0a:c9:87:e9:7e:93: 7f:4f:b7:9b:0d:b3:d8:7f:c8:eb:dc:b6:b0:1f:ad:61:9f:65: 8e:00:d4:51:e1:96:df:4a:f7:00:b1:12:91:25:0b:c3:23:5c: 5a:cc:fd:fd:87:76:78:11:4f:d9:83:25:19:ad:17:4a:f8:c0: 57:87:d4:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7hmTEfQRgzWu+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzI3ZTcyMTQtNDZkZi00YmNlLTg3NGItMTBjNjY3ZGY4YjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLkWZ1WhKBxhmuqeB+S1iQH36STocQcffVHx UqOMIO2z1stCm5aWRyjt2QH6bHRpWkl3VXiuBz4fg6GC5TtDTjPDauRk3HMeqew1 8h30fUuz/3C5BBNs3bLCuzHIId+zONXseExMTTFcoZZoDZ4gG6h2Nm+BK/3FMlFW WAN/Ddyo7W53Hb3gsajAF0mRKGaI8IGiP3GjmQmM1RUJuhNb5r/MQJHCetphAFGA gOGzo+lNPLPhytBLn2je6pfINsjS7NfBNE00jWVVdmoM4sWYetr4pOQkorcm7INW OOclkASHYLMLnSPI0/WWmrat5ty6BUt1DFr6tD+IFAXD7MM9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrvDWNMWKcKav+Lct9KcOCg9M0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDkwNWQ4ZWMtM2M0OC0z MjMzLWFiNzUtODJkYmIxNDM2YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhDLlm5kiofMioDOrRq0d25fuZatbry+8U+1S329G/Pg3F28/+QtW5E 9gioR70F5JkSbUSJM4vifymkJwgP9zmbX9ETtCS0tT9vWDLKt33nQf1Y4VJvghTI yNsCghC1JUPJVMDo8s5Rd9D3ri+U2NhS2KEIdY2RiXwy/ySBjlTh3msUCRbbm6tV vwrkZZw3/MNONuR0ZdogbWR3ttync2C1Oa8hpsvMsqWufZyTopRWjXGZnf8BJhMf 8+lsnbBGZQrJh+l+k39Pt5sNs9h/yOvctrAfrWGfZY4A1FHhlt9K9wCxEpElC8Mj XFrM/f2HdngRT9mDJRmtF0r4wFeH1BU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:27 2025 by rpki-client