$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa File: 7e2175eb-4a04-310c-b9fd-72861a506b88.roa (raw, json) Hash identifier: vCzW8X3mnmV5qCIlazRqMGA07jOIyZhpuvOEpMZmIR8= Subject key identifier: 97:18:F3:5B:8D:A1:DA:59:1B:0B:A4:C8:7A:AE:40:9F:64:8A:01:8D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B830A6D1771B36283600 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:30:a6:d1:77:1b:36:28:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b8a6a33c-1dd6-4f46-a13d-e9a9b3e5e04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:16:95:65:f2:1f:b5:8d:ec:60:b9:88:21: 54:4b:d6:09:9b:77:69:a5:c5:52:c2:3a:df:be:11: 3d:e6:d1:6e:27:21:73:d6:fa:88:d1:77:f0:7c:51: ec:94:6c:be:92:96:22:61:e4:af:33:40:ae:dd:cb: 49:c8:88:9e:fa:6c:7d:8f:0c:10:2c:be:c4:da:f5: 7f:99:89:98:3b:ba:56:2e:15:60:21:11:d6:3e:46: 28:c5:6d:a1:ae:ec:c3:c3:71:1b:db:91:80:f3:99: 18:44:ea:7d:67:1b:65:7f:d0:1a:0c:d7:37:1a:8c: 07:8f:b2:f7:92:b7:68:f2:bf:6f:10:0f:90:86:cf: 48:a2:3c:e6:97:2c:3f:36:75:42:f4:11:c3:b4:ef: 46:75:79:a2:ba:51:dc:15:bc:1a:46:1c:00:78:4b: 4a:76:39:20:94:83:23:9c:3d:3b:cd:93:98:3c:89: 95:2f:4e:aa:02:d6:8f:3d:99:7c:7a:5a:c6:5e:42: 9c:b8:f0:ae:50:06:c6:59:a4:8b:a9:32:a0:19:72: a2:5f:99:f4:ba:c4:16:31:31:51:7c:38:8c:9e:af: 46:9d:8d:d1:af:30:75:e3:a8:a6:0e:f4:94:b3:11: 96:f4:a6:e5:4a:c0:1e:53:4f:83:d3:b8:41:1f:fa: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:18:F3:5B:8D:A1:DA:59:1B:0B:A4:C8:7A:AE:40:9F:64:8A:01:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0d:6e:8e:b9:ad:30:54:3d:4e:b3:03:16:1d:54:3d:ad:1a: af:f9:f9:c0:69:0f:10:1b:91:4f:e3:34:59:55:d9:22:ef:8f: cc:d6:8d:fe:06:bc:33:f3:32:d8:ea:80:6d:2b:7b:24:17:e0: 97:fa:f8:1c:e5:85:67:ea:7f:d8:bb:55:59:4a:d7:0c:0c:45: ca:82:2f:59:15:ad:2e:ad:f2:95:ff:64:01:8e:95:05:fb:2f: 69:7f:08:98:3c:29:f6:10:01:52:3b:c7:e5:70:38:38:75:55: e8:a0:ec:63:ec:d6:44:56:ec:14:06:b8:5c:f2:d3:2b:51:8b: b5:66:06:f1:05:40:5a:8e:54:03:3d:cc:8a:95:95:56:ee:55: d9:5c:66:a0:66:63:7c:eb:0e:75:e1:71:ce:76:8e:d3:95:b2: 04:42:23:13:41:f0:1d:f7:d5:01:84:06:cd:2a:13:c3:c7:5f: ca:73:52:88:ac:a7:36:34:32:e5:88:16:2e:9f:79:48:00:ac: 71:ce:0e:8a:eb:79:c0:48:2d:7c:e5:1c:80:4c:f7:2b:23:6d: 81:76:ed:f2:e5:0d:fa:d1:23:c7:28:54:a0:61:ed:bc:dd:5b: 1d:83:b1:01:5d:66:a0:93:12:9a:14:a3:47:d1:d0:0e:5b:73: e5:ec:1d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7gwptF3GzYoNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjhhNmEzM2MtMWRkNi00ZjQ2LWExM2QtZTlhOWIzZTVlMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFUWlWXyH7WN7GC5iCFUS9YJm3dppcVSwjrf vhE95tFuJyFz1vqI0XfwfFHslGy+kpYiYeSvM0Cu3ctJyIie+mx9jwwQLL7E2vV/ mYmYO7pWLhVgIRHWPkYoxW2hruzDw3Eb25GA85kYROp9Zxtlf9AaDNc3GowHj7L3 krdo8r9vEA+Qhs9Iojzmlyw/NnVC9BHDtO9GdXmiulHcFbwaRhwAeEtKdjkglIMj nD07zZOYPImVL06qAtaPPZl8elrGXkKcuPCuUAbGWaSLqTKgGXKiX5n0usQWMTFR fDiMnq9GnY3RrzB146imDvSUsxGW9KblSsAeU0+D07hBH/rpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcY81uNodpZGwukyHquQJ9kigGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvN2UyMTc1ZWItNGEwNC0z MTBjLWI5ZmQtNzI4NjFhNTA2Yjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzv8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYNbo65rTBUPU6zAxYdVD2tGq/5+cBpDxAbkU/jNFlV2SLvj8zWjf4G vDPzMtjqgG0reyQX4Jf6+BzlhWfqf9i7VVlK1wwMRcqCL1kVrS6t8pX/ZAGOlQX7 L2l/CJg8KfYQAVI7x+VwODh1Veig7GPs1kRW7BQGuFzy0ytRi7VmBvEFQFqOVAM9 zIqVlVbuVdlcZqBmY3zrDnXhcc52jtOVsgRCIxNB8B331QGEBs0qE8PHX8pzUois pzY0MuWIFi6feUgArHHODorrecBILXzlHIBM9ysjbYF27fLlDfrRI8coVKBh7bzd Wx2DsQFdZqCTEpoUo0fR0A5bc+XsHbA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:47:13 2025 by rpki-client