$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa File: 9434e6dc-d860-3378-b9ed-0912c88bab1b.roa (raw, json) Hash identifier: /36qlC2bSWKLrm4GwAVNhgDlhNnVteI7Ysa44tEOmC0= Subject key identifier: CC:6C:EB:DB:0A:E4:45:05:BC:CE:50:E8:72:AF:92:2D:67:AD:77:F5 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C3BF6A8F25C1AA94BB00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:bf:6a:8f:25:c1:aa:94:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=08031316-86d7-4f83-89a9-c8af2c522d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:91:1a:bc:cf:d6:f2:67:6a:3a:84:da:fa: f9:a9:5b:8f:99:5c:ee:ea:69:ca:6f:46:1b:f8:5a: 6d:58:ce:1b:cd:70:ed:50:d4:f3:68:9f:c8:07:3f: 13:25:24:3a:d6:6f:13:02:87:20:4d:80:44:b0:58: c5:d2:d8:de:97:c3:1f:5f:32:ad:74:ed:81:5f:53: 18:b7:57:3a:33:7d:ce:80:7c:2d:24:32:8d:74:fd: 29:90:af:80:27:cc:af:d7:f8:e9:b3:1c:a5:31:6a: 8c:95:cc:2c:65:3a:40:a9:01:9b:a4:69:1f:f2:06: 52:81:50:fb:27:ea:82:a3:99:46:7e:2e:47:1c:69: 06:e3:23:64:d8:22:03:1d:33:66:d1:1f:cc:0f:c6: a7:23:c3:95:b1:45:ce:54:e8:ea:e5:83:07:e0:f7: ab:77:a2:e0:07:ab:32:10:6c:11:04:f5:48:bc:04: bc:87:fb:48:ce:1f:07:be:85:f7:97:e4:fb:69:db: 70:6f:d8:43:a0:3c:1a:00:44:a1:92:22:c8:e3:d6: 4e:ad:bc:bd:ff:e4:62:cf:99:c2:37:56:14:ec:6a: 39:e6:22:03:f8:6e:39:a5:90:50:9f:40:6c:d3:58: 6a:21:68:8f:55:a3:c3:52:13:47:56:7a:d3:8f:39: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6C:EB:DB:0A:E4:45:05:BC:CE:50:E8:72:AF:92:2D:67:AD:77:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0d:bd:56:09:83:28:a3:27:f7:b1:e2:10:56:34:4f:84:08: 4b:0c:0f:00:a1:cc:17:1e:32:f0:6a:f6:0e:81:1d:af:d7:dc: 11:a7:c4:62:f9:0b:f5:b1:f5:df:5f:23:d5:2d:47:d3:9b:7f: d7:41:4e:3b:71:d0:6c:f4:81:f6:ef:3e:c4:36:cb:8b:73:8f: 43:fb:72:42:a2:1b:f5:b9:b4:79:3d:6d:03:84:44:0e:d1:db: cc:5f:66:c0:3e:36:06:2e:5f:0d:00:8b:67:30:2c:9a:93:f2: 47:a6:c6:25:02:a2:83:45:85:af:ca:1c:c5:d3:7d:60:1c:8a: c3:40:89:57:48:82:16:e9:c9:31:fc:d7:cb:b1:c0:76:e8:d5: a5:26:c5:79:5e:3d:99:39:76:6c:37:5c:77:61:c8:9d:76:52: 84:da:b4:6f:50:39:79:55:ac:67:29:a3:37:97:5d:3b:23:b4: 1e:e4:31:a2:78:f4:37:28:2f:ac:4d:7a:79:ea:5a:49:86:f8: 5a:00:14:ea:f3:a8:7c:5c:b9:42:bf:b6:ef:ff:5a:65:f0:09: e2:0a:10:58:12:da:e7:0c:c1:86:97:21:1c:6f:0c:f6:4b:98: b9:10:1b:0a:3c:e6:39:79:2a:05:1c:08:b6:2f:98:ca:89:44: bc:e4:b6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8O/ao8lwaqUuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDgwMzEzMTYtODZkNy00ZjgzLTg5YTktYzhhZjJjNTIyZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOiRGrzP1vJnajqE2vr5qVuPmVzu6mnKb0Yb +FptWM4bzXDtUNTzaJ/IBz8TJSQ61m8TAocgTYBEsFjF0tjel8MfXzKtdO2BX1MY t1c6M33OgHwtJDKNdP0pkK+AJ8yv1/jpsxylMWqMlcwsZTpAqQGbpGkf8gZSgVD7 J+qCo5lGfi5HHGkG4yNk2CIDHTNm0R/MD8anI8OVsUXOVOjq5YMH4Perd6LgB6sy EGwRBPVIvAS8h/tIzh8HvoX3l+T7adtwb9hDoDwaAEShkiLI49ZOrby9/+Riz5nC N1YU7Go55iID+G45pZBQn0Bs01hqIWiPVaPDUhNHVnrTjzm2mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxs69sK5EUFvM5Q6HKvki1nrXf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOTQzNGU2ZGMtZDg2MC0z Mzc4LWI5ZWQtMDkxMmM4OGJhYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwNvVYJgyijJ/ex4hBWNE+ECEsMDwChzBceMvBq9g6BHa/X3BGnxGL5 C/Wx9d9fI9UtR9Obf9dBTjtx0Gz0gfbvPsQ2y4tzj0P7ckKiG/W5tHk9bQOERA7R 28xfZsA+NgYuXw0Ai2cwLJqT8kemxiUCooNFha/KHMXTfWAcisNAiVdIghbpyTH8 18uxwHbo1aUmxXlePZk5dmw3XHdhyJ12UoTatG9QOXlVrGcpozeXXTsjtB7kMaJ4 9DcoL6xNennqWkmG+FoAFOrzqHxcuUK/tu//WmXwCeIKEFgS2ucMwYaXIRxvDPZL mLkQGwo85jl5KgUcCLYvmMqJRLzktuo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:19:26 2025 by rpki-client