$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa File: 9100553e-9dda-370f-9c2d-8c5195e4e885.roa (raw, json) Hash identifier: 9kPbMJLZjIAFxUIWT7y313X2N8cYucgzUNLP1SJFB/4= Subject key identifier: 9C:9B:64:5F:0D:9C:99:CB:48:BC:B2:A4:17:6B:C6:3F:7F:EA:DD:09 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B95A7A06B676EC7C3C85F61C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a0:6b:67:6e:c7:c3:c8:5f:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6f188dfd-30b2-4a6e-8e41-6ab4664b7b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:16:ef:2a:a8:58:ac:8d:5d:73:61:c7:99:e1: 65:75:92:0a:13:f9:25:f1:9e:c2:09:40:81:95:33: 7b:13:57:aa:56:2b:03:b1:e0:14:c7:2c:d7:f8:c1: 44:0e:3a:8c:dc:6f:c9:16:a5:08:8c:86:cb:e7:d4: ab:c5:b2:fb:c3:81:2d:bc:e5:e8:40:6a:f0:6b:98: e8:aa:50:f6:f2:6e:c7:f5:5a:e8:98:85:8a:a9:77: 96:31:d2:e6:e1:17:cd:8d:c5:11:4c:e5:1d:77:c5: d3:0e:85:3b:2b:f0:94:2d:9b:c3:de:83:04:68:65: 99:6b:77:eb:cf:45:c5:a8:80:f7:15:87:7a:54:05: c5:cb:51:0e:a8:87:6c:2c:57:c2:55:eb:2a:8d:80: 64:3b:83:a0:6c:32:58:a0:27:13:4a:3e:e6:f3:32: 89:33:0f:78:9d:78:ba:14:8f:31:da:62:07:92:2b: da:be:96:9d:bb:44:0b:1f:0f:b4:ee:65:e0:55:24: 01:68:09:ad:ac:07:31:bc:5e:00:6d:50:d0:3a:de: 92:ca:59:f9:6a:2f:1c:e2:21:c0:ce:cf:76:e1:4c: a4:fe:bc:d0:54:b9:72:9c:df:f2:94:66:a8:ab:10: bc:5c:f5:20:fb:ff:cf:5b:17:2b:49:5d:ff:5c:58: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9B:64:5F:0D:9C:99:CB:48:BC:B2:A4:17:6B:C6:3F:7F:EA:DD:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:46:79:20:2e:c2:cb:24:42:8e:4b:bd:18:ab:63:76:dd:ce: bc:f9:21:1c:c9:c8:c1:d3:51:63:11:91:c3:47:b8:a1:63:6b: ed:01:2b:81:c3:20:f7:de:63:21:5d:aa:5f:61:31:ce:03:df: 02:68:28:51:d4:36:cb:cd:84:7e:5e:d5:02:20:2b:72:63:74: 7e:04:70:74:07:54:90:32:da:67:20:8a:c0:56:03:37:56:53: e1:cb:ee:d8:97:50:bf:01:8b:b2:79:90:2e:db:8a:9e:db:2d: be:c3:fd:4c:9a:3b:f3:a3:6d:fd:fc:3a:78:df:62:78:16:01: 9a:1a:d2:d6:e6:42:8d:85:0b:16:13:5b:7f:9c:8d:d2:3f:27: 8e:72:d9:cd:cc:36:16:62:47:8c:9a:d2:d0:ed:72:4d:55:c6: e1:12:68:40:22:cb:45:75:da:fe:90:54:09:03:2f:c5:63:8e: 77:dc:7e:96:1d:cc:f5:29:1e:ea:42:59:49:f8:b9:2b:0b:a5: 91:a0:c7:e9:9a:3b:a7:33:7e:31:cb:d0:d5:28:f7:b0:08:b5: 01:99:6c:4d:fe:52:f3:d9:4a:94:02:dd:92:91:ec:3e:ee:69: 2b:02:34:dc:5a:9c:01:ea:ca:2a:0c:f6:5b:72:69:37:8a:55: 0c:fc:d5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6BrZ27Hw8hfYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NmYxODhkZmQtMzBiMi00YTZlLThlNDEtNmFiNDY2NGI3YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BbvKqhYrI1dc2HHmeFldZIKE/kl8Z7CCUCB lTN7E1eqVisDseAUxyzX+MFEDjqM3G/JFqUIjIbL59SrxbL7w4EtvOXoQGrwa5jo qlD28m7H9VromIWKqXeWMdLm4RfNjcURTOUdd8XTDoU7K/CULZvD3oMEaGWZa3fr z0XFqID3FYd6VAXFy1EOqIdsLFfCVesqjYBkO4OgbDJYoCcTSj7m8zKJMw94nXi6 FI8x2mIHkivavpadu0QLHw+07mXgVSQBaAmtrAcxvF4AbVDQOt6Syln5ai8c4iHA zs924Uyk/rzQVLlynN/ylGaoqxC8XPUg+//PWxcrSV3/XFg90QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJybZF8NnJnLSLyypBdrxj9/6t0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOTEwMDU1M2UtOWRkYS0z NzBmLTljMmQtOGM1MTk1ZTRlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlGeSAuwsskQo5LvRirY3bdzrz5IRzJyMHTUWMRkcNHuKFja+0BK4HD IPfeYyFdql9hMc4D3wJoKFHUNsvNhH5e1QIgK3JjdH4EcHQHVJAy2mcgisBWAzdW U+HL7tiXUL8Bi7J5kC7bip7bLb7D/UyaO/Ojbf38OnjfYngWAZoa0tbmQo2FCxYT W3+cjdI/J45y2c3MNhZiR4ya0tDtck1VxuESaEAiy0V12v6QVAkDL8VjjnfcfpYd zPUpHupCWUn4uSsLpZGgx+maO6czfjHL0NUo97AItQGZbE3+UvPZSpQC3ZKR7D7u aSsCNNxanAHqyioM9ltyaTeKVQz81aI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:22 2025 by rpki-client