$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa File: 8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa (raw, json) Hash identifier: KcYsG51pruB0ZP9yFExRikMUCUeBlzL9scoWYDtdwbA= Subject key identifier: 10:A7:D6:B4:45:E1:40:5D:25:7E:5C:23:76:72:0F:75:39:0A:4A:93 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B989F5D5BF3E1F9361C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b9:89:f5:d5:bf:3e:1f:93:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=6980dbe0-b72e-4085-978b-bac135bde3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:72:b2:f6:42:64:d4:7e:4a:49:e9:e8:19: 97:ae:64:98:b1:a1:a7:ee:be:a6:11:17:74:80:40: 77:15:6b:13:12:d4:53:c9:59:ac:c6:e9:92:e8:da: f3:ef:16:72:fb:95:5f:42:e6:c1:8b:66:b7:d3:2c: e6:44:41:fb:ec:a4:3d:d0:a4:7a:56:95:a0:30:ce: a0:4b:26:27:c3:4e:a7:e1:fa:cd:24:8b:b1:cf:00: 60:fa:5a:05:e0:9d:1a:25:74:3d:38:4a:3d:f9:61: d9:27:63:9c:94:a6:d2:6c:e1:c6:5a:be:53:9d:38: 62:6b:ab:e7:32:74:55:e1:e7:b4:23:8a:c1:41:65: 24:8c:2b:ba:3e:0e:5e:59:ba:29:dc:5f:9d:42:88: d7:e1:ff:24:ea:c8:16:4f:1f:96:36:92:83:91:28: 66:46:0d:a3:af:40:4c:5b:e9:e7:4f:01:87:d9:dc: 28:29:81:61:f7:8f:76:1d:e8:8c:cb:2a:12:25:c2: 7f:3f:73:44:32:fe:3a:07:65:0c:8e:cc:c8:d8:2d: b8:9b:1c:a6:4b:1c:1e:c6:b8:c8:22:99:a9:af:59: e7:cf:1b:f0:dc:35:98:16:0a:c0:5c:b9:4b:19:52: 1d:df:a6:f1:63:d1:5f:73:36:46:e9:5b:82:aa:95: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A7:D6:B4:45:E1:40:5D:25:7E:5C:23:76:72:0F:75:39:0A:4A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f1:52:33:ad:98:36:62:00:9f:22:45:16:c1:f3:08:c6:ee: 2a:76:b2:18:ff:48:e7:1f:20:99:97:0f:e6:e5:16:82:46:2a: cc:4d:62:b9:75:f1:8d:7c:4c:29:93:8f:52:aa:af:88:41:0a: ae:2c:5c:cc:f7:b7:6c:ef:e6:39:0b:6e:d5:bf:78:4b:75:10: 0e:05:c7:74:61:a7:7d:75:82:ac:31:c0:54:23:44:5c:e8:0c: b0:b7:b4:ab:30:23:53:b1:6e:55:39:46:62:7f:0a:be:45:6d: 06:f7:80:de:d5:66:b2:73:07:7b:6e:2f:2e:41:05:c4:fa:2b: d8:37:49:dd:3e:a1:0f:41:36:0b:e2:15:c9:97:17:33:51:71: 73:42:72:d4:15:a1:2a:af:7a:d2:5c:1e:24:07:7f:de:b7:88: 1d:a5:fa:1f:5c:a3:ca:98:73:41:1b:d0:8b:67:09:31:a0:c2: a4:20:12:4b:87:4e:9a:e4:2a:5f:a4:c6:84:7a:b5:77:3b:c1: 1e:8c:61:bf:4b:21:33:74:94:ba:31:97:1e:8c:09:53:15:80: ef:24:45:96:fc:9c:36:01:ed:1c:a9:73:e9:d7:c9:dc:fc:b7: 3e:39:75:d6:e3:32:3e:ec:51:21:eb:ad:bc:12:c3:66:96:ac: 9d:3e:6f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7mJ9dW/Ph+TYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Njk4MGRiZTAtYjcyZS00MDg1LTk3OGItYmFjMTM1YmRlM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNpysvZCZNR+Sknp6BmXrmSYsaGn7r6mERd0 gEB3FWsTEtRTyVmsxumS6Nrz7xZy+5VfQubBi2a30yzmREH77KQ90KR6VpWgMM6g SyYnw06n4frNJIuxzwBg+loF4J0aJXQ9OEo9+WHZJ2OclKbSbOHGWr5TnThia6vn MnRV4ee0I4rBQWUkjCu6Pg5eWbop3F+dQojX4f8k6sgWTx+WNpKDkShmRg2jr0BM W+nnTwGH2dwoKYFh9492HeiMyyoSJcJ/P3NEMv46B2UMjszI2C24mxymSxwexrjI Ipmpr1nnzxvw3DWYFgrAXLlLGVId36bxY9FfczZG6VuCqpU2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCn1rRF4UBdJX5cI3ZyD3U5CkqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOGUzYTU0Y2EtMGMwNy0z NjIzLWFhZjktNzE2N2U0NTI1ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjxUjOtmDZiAJ8iRRbB8wjG7ip2shj/SOcfIJmXD+blFoJGKsxNYrl1 8Y18TCmTj1Kqr4hBCq4sXMz3t2zv5jkLbtW/eEt1EA4Fx3Rhp311gqwxwFQjRFzo DLC3tKswI1OxblU5RmJ/Cr5FbQb3gN7VZrJzB3tuLy5BBcT6K9g3Sd0+oQ9BNgvi FcmXFzNRcXNCctQVoSqvetJcHiQHf963iB2l+h9co8qYc0Eb0ItnCTGgwqQgEkuH TprkKl+kxoR6tXc7wR6MYb9LITN0lLoxlx6MCVMVgO8kRZb8nDYB7Rypc+nXydz8 tz45ddbjMj7sUSHrrbwSw2aWrJ0+b+0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:35 2025 by rpki-client