$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa File: 5db1674b-8b6d-35c1-8848-158cea416904.roa (raw, json) Hash identifier: +5sAP0XV/qNBM//5ff76M6R3ciYf6KnxFbK0YOyNOys= Subject key identifier: 0F:68:78:93:7E:67:67:76:D9:56:08:B2:83:55:15:BE:02:1E:81:53 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C343D864892C17249C80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:43:d8:64:89:2c:17:24:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=058d7c81-ce2d-43da-93cc-cf64ba728f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:44:ce:62:a8:a7:58:cf:21:ab:c6:77:53: bc:68:8a:5a:0c:c7:5f:90:cc:2c:ae:99:d1:41:20: 2b:53:c5:e9:fc:87:4b:29:c6:3e:20:6d:97:d6:93: 65:4f:57:ec:97:76:8e:ca:81:23:a8:62:3d:38:79: 4f:53:14:80:b3:ef:46:7a:72:76:1b:27:82:c4:b2: b1:39:e7:e0:b3:6d:7b:3e:ba:da:fa:d9:19:ee:b4: 58:80:91:6b:96:86:28:44:b8:53:83:ed:7b:23:5e: 2e:f3:2a:65:56:09:98:e1:7d:3e:3e:14:ba:7b:05: c5:45:05:20:4d:65:f5:80:22:b9:a2:c1:c8:34:e2: 75:95:01:01:ef:8a:21:3f:8a:a2:b4:4b:d5:1b:d4: 47:50:f9:f8:dd:8b:fc:2a:45:4f:93:6c:3a:71:96: 5b:f4:93:2b:a6:84:be:22:21:57:82:bd:a9:f6:7d: 81:fa:59:fe:2e:ae:ad:ec:7d:d7:a7:4c:e8:93:7f: f5:d6:32:c1:e5:22:70:2b:aa:95:9f:f2:62:43:16: 1b:10:54:08:7c:23:fc:c7:9d:65:51:08:9a:e4:33: 8c:bd:dc:79:9e:bf:7d:09:b0:f6:8a:33:81:ea:1c: 71:1d:eb:85:d8:07:bf:39:a1:42:f8:d8:a8:ff:a4: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:78:93:7E:67:67:76:D9:56:08:B2:83:55:15:BE:02:1E:81:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7c:59:cf:50:a0:9a:13:f5:45:26:bf:3f:21:39:28:5a:64: fb:76:a8:6c:67:06:b6:99:be:0d:08:af:df:98:d3:74:83:b0: 84:32:b9:83:be:ee:72:f0:d2:5b:3a:87:08:49:bc:72:68:4f: e9:c5:60:00:d3:f3:f3:76:6f:74:33:95:f8:4d:91:25:72:5d: 2c:06:96:3c:64:07:94:c1:67:38:dd:81:ed:2b:6c:bb:09:3a: b8:07:b3:f8:dc:23:9a:24:5d:04:b0:7a:e9:42:38:e5:e4:fa: b4:03:94:72:68:7b:ba:b9:c2:67:03:b8:30:d1:1d:f2:f0:0c: e0:80:e2:8d:d0:50:7a:6d:a6:7f:ed:99:9f:e7:11:29:91:5c: b5:9e:83:99:b4:7e:40:85:e1:d8:b6:b3:5d:1d:1f:1c:8e:c4: 9b:33:40:2a:99:c7:27:e5:6e:c0:33:2a:26:2f:22:c3:7b:0d: 09:9d:72:40:ee:0c:c8:d0:28:44:51:2e:5b:8e:93:43:5a:95: 51:42:a6:4b:c4:82:c9:21:a4:61:08:b4:79:b2:f1:81:b9:9a: 00:15:b1:81:d7:a3:89:5a:47:5e:db:98:ab:8f:f3:97:0f:58: b3:e5:61:b1:c8:28:ac:fc:29:9c:a4:aa:ab:be:c0:13:b8:7a: 97:d2:c4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8ND2GSJLBcknIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDU4ZDdjODEtY2UyZC00M2RhLTkzY2MtY2Y2NGJhNzI4Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DtEzmKop1jPIavGd1O8aIpaDMdfkMwsrpnR QSArU8Xp/IdLKcY+IG2X1pNlT1fsl3aOyoEjqGI9OHlPUxSAs+9GenJ2GyeCxLKx Oefgs217Prra+tkZ7rRYgJFrloYoRLhTg+17I14u8yplVgmY4X0+PhS6ewXFRQUg TWX1gCK5osHINOJ1lQEB74ohP4qitEvVG9RHUPn43Yv8KkVPk2w6cZZb9JMrpoS+ IiFXgr2p9n2B+ln+Lq6t7H3Xp0zok3/11jLB5SJwK6qVn/JiQxYbEFQIfCP8x51l UQia5DOMvdx5nr99CbD2ijOB6hxxHeuF2Ae/OaFC+Nio/6TusQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9oeJN+Z2d22VYIsoNVFb4CHoFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNWRiMTY3NGItOGI2ZC0z NWMxLTg4NDgtMTU4Y2VhNDE2OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh8Wc9QoJoT9UUmvz8hOShaZPt2qGxnBraZvg0Ir9+Y03SDsIQyuYO+ 7nLw0ls6hwhJvHJoT+nFYADT8/N2b3QzlfhNkSVyXSwGljxkB5TBZzjdge0rbLsJ OrgHs/jcI5okXQSweulCOOXk+rQDlHJoe7q5wmcDuDDRHfLwDOCA4o3QUHptpn/t mZ/nESmRXLWeg5m0fkCF4di2s10dHxyOxJszQCqZxyflbsAzKiYvIsN7DQmdckDu DMjQKERRLluOk0NalVFCpkvEgskhpGEItHmy8YG5mgAVsYHXo4laR17bmKuP85cP WLPlYbHIKKz8KZykqqu+wBO4epfSxFk= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:00 2025 by rpki-client