$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa File: 90cfec58-4264-38d3-98a5-78ae8dc09541.roa (raw, json) Hash identifier: jv32FLylq7x3SFcEMFxj9UbntJvRGvVfezyiLr+lxyo= Subject key identifier: 42:82:4F:DA:D1:A7:0C:AC:43:06:CD:B8:AF:BD:4F:37:86:37:73:CC Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8782E3CC98ED9D4C770 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:78:2e:3c:c9:8e:d9:d4:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3e04b50d-72cd-4ab6-a8c2-fbd7286472c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:54:f0:02:f1:dc:22:09:10:34:0a:4e:f2: 98:2f:42:86:ea:3d:c9:73:d8:63:e5:26:22:8c:c2: 00:e0:5b:ba:4a:a2:23:08:02:89:88:dc:73:1d:57: 71:7a:d8:92:49:f3:f1:a9:a5:76:10:f1:60:4b:07: 9a:f0:5a:1b:ed:24:d2:0c:8c:5a:28:af:2d:bc:aa: 7e:70:75:63:04:06:84:e5:3d:e4:4a:0d:5e:20:6d: 4a:1e:1d:c6:3e:91:5a:79:f2:1d:47:72:03:07:05: e5:ba:0a:7f:b7:b7:4f:1e:ec:c7:0d:e6:2c:57:ad: 31:d0:ee:ce:c6:69:bb:4a:2e:db:8e:51:7e:d4:43: 21:a3:c2:91:24:1a:f8:7a:de:8a:3c:32:01:ad:a1: dc:ae:14:5e:9a:01:c8:d2:2a:ac:44:61:31:e4:3a: 04:69:27:15:5b:88:38:53:90:96:6f:0b:b3:b2:a2: ec:a3:e1:77:3a:ad:ec:bb:32:21:ba:af:79:e5:82: 52:49:ba:cf:be:b1:7a:ae:64:df:13:2a:72:25:38: 93:be:71:b7:6f:47:4a:49:eb:15:78:7b:18:6a:67: 1a:2e:a5:83:e7:0f:ae:8e:b8:56:76:ad:44:52:01: 2a:cf:98:2e:b3:b4:c7:c5:90:54:d5:15:31:81:d9: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:82:4F:DA:D1:A7:0C:AC:43:06:CD:B8:AF:BD:4F:37:86:37:73:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:79:26:50:19:4b:01:2f:a2:a3:c6:91:c9:74:5f:e7:5d:44: ca:61:d8:7d:5c:1b:cf:a6:5a:79:5e:eb:20:ac:d6:68:d6:b4: 41:c2:22:bd:ba:c5:d0:97:cd:da:03:0f:a0:b6:dc:9b:63:00: 19:00:6a:85:6f:50:4e:9d:de:60:d9:7a:71:b0:2f:47:27:91: 72:82:01:57:ab:f2:53:96:ec:ba:9c:3e:47:ca:be:2a:3a:54: f8:79:8d:a2:8f:aa:72:82:dd:ee:4b:b2:5c:d7:8e:7b:d0:5b: 2d:33:93:91:16:4a:26:b8:60:57:f0:5f:a6:34:71:7a:b4:44: c0:ef:14:e6:b1:fe:ca:2f:9b:a5:64:b3:5d:01:25:01:14:6c: 73:89:87:c3:8e:e4:30:fe:ac:4f:d9:95:e7:e7:fa:b1:7c:d4: c5:34:69:9f:3f:29:79:cf:68:10:d7:14:5f:ee:9c:bf:63:9d: d1:0a:91:73:cd:a1:05:d4:f5:c2:37:34:8d:c2:92:c6:16:d3: b6:8f:4c:84:c3:2e:95:c6:6f:f8:e7:81:08:a4:0a:eb:2b:d3: 8d:4e:ff:7a:e0:bc:cf:30:84:05:c3:ac:02:8f:f7:e4:53:df: cf:79:eb:69:43:cf:f1:29:83:63:1a:33:59:47:89:d5:bb:5d: 19:ad:05:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7h4LjzJjtnUx3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2UwNGI1MGQtNzJjZC00YWI2LWE4YzItZmJkNzI4NjQ3MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4tU8ALx3CIJEDQKTvKYL0KG6j3Jc9hj5SYi jMIA4Fu6SqIjCAKJiNxzHVdxetiSSfPxqaV2EPFgSwea8Fob7STSDIxaKK8tvKp+ cHVjBAaE5T3kSg1eIG1KHh3GPpFaefIdR3IDBwXlugp/t7dPHuzHDeYsV60x0O7O xmm7Si7bjlF+1EMho8KRJBr4et6KPDIBraHcrhRemgHI0iqsRGEx5DoEaScVW4g4 U5CWbwuzsqLso+F3Oq3suzIhuq955YJSSbrPvrF6rmTfEypyJTiTvnG3b0dKSesV eHsYamcaLqWD5w+ujrhWdq1EUgEqz5gus7THxZBU1RUxgdnc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKCT9rRpwysQwbNuK+9TzeGN3PMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOTBjZmVjNTgtNDI2NC0z OGQzLTk4YTUtNzhhZThkYzA5NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh5JlAZSwEvoqPGkcl0X+ddRMph2H1cG8+mWnle6yCs1mjWtEHCIr26 xdCXzdoDD6C23JtjABkAaoVvUE6d3mDZenGwL0cnkXKCAVer8lOW7LqcPkfKvio6 VPh5jaKPqnKC3e5LslzXjnvQWy0zk5EWSia4YFfwX6Y0cXq0RMDvFOax/sovm6Vk s10BJQEUbHOJh8OO5DD+rE/Zlefn+rF81MU0aZ8/KXnPaBDXFF/unL9jndEKkXPN oQXU9cI3NI3CksYW07aPTITDLpXGb/jngQikCusr041O/3rgvM8whAXDrAKP9+RT 389562lDz/Epg2MaM1lHidW7XRmtBY0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:28 2025 by rpki-client