$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa File: a22ff12a-0371-3319-88d2-f5e344b13f6c.roa (raw, json) Hash identifier: MlmsyBCM1d5eieCdcOCpitljEvZZ3OpxBg7WRycjhf4= Subject key identifier: 95:88:10:05:3E:5E:EF:6E:37:D8:2F:13:CE:58:3E:84:E1:96:DB:23 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B9C13BF8EDA874C505C8 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b9:c1:3b:f8:ed:a8:74:c5:05:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=9b7cac52-24a6-43b1-a672-38c9e6712a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:7d:0c:b9:dd:77:a2:64:5b:47:24:5d:44: 1a:37:90:70:59:36:c4:1c:19:8b:a0:ee:57:6f:56: d8:2c:d5:5f:9c:f4:17:19:23:03:3a:e7:d8:03:1c: a8:79:e5:61:90:2b:85:74:16:82:2b:fb:8a:2d:b5: 12:9e:cd:b9:a0:24:96:b5:95:47:aa:5d:35:21:58: 60:8e:db:e6:1b:4c:e7:29:1b:e3:77:12:2b:4c:d6: bf:24:84:f2:2b:39:b5:7f:cb:c8:42:69:f4:6b:e7: 8a:65:5e:de:53:39:3d:4c:17:c8:9c:ab:f6:e7:f8: 0e:0e:4d:7a:30:a2:c3:62:a6:14:8b:88:01:6c:97: 74:6b:11:49:0c:f1:fb:86:5c:58:5d:d9:81:6d:5e: cc:05:17:3c:cd:48:be:16:3b:85:fc:de:56:ee:be: bf:da:a8:24:37:c6:66:de:c8:d3:db:e3:17:63:b5: 10:94:3a:23:9f:bb:9a:f7:78:53:0f:da:e3:aa:20: 3f:b3:3e:34:a3:35:60:08:0c:5b:a8:be:cd:c7:9e: 71:34:76:b5:35:4b:d5:b7:47:4b:c3:b6:4b:95:26: 9a:49:c4:f4:c7:9a:6e:c1:89:ab:a6:77:b1:c3:01: bd:bb:67:bc:f3:30:5a:88:17:fa:dc:49:c4:f0:e3: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:88:10:05:3E:5E:EF:6E:37:D8:2F:13:CE:58:3E:84:E1:96:DB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:9c:6b:38:22:c0:ef:85:cc:40:34:4e:4a:52:93:ad:8a:0b: 1b:55:f6:6c:d7:cf:54:4d:20:7f:91:72:60:57:61:83:59:b8: df:ec:9b:f2:4e:b9:0f:76:27:cb:8f:8d:5e:66:de:82:a9:f6: c8:04:41:a3:6f:df:aa:77:12:cf:77:d7:f6:be:b6:3f:1d:ca: 59:79:b5:52:85:49:3d:50:24:65:d4:53:9a:4e:79:b9:5e:0b: fc:bf:dd:14:0e:fb:23:47:d5:fd:48:03:25:9d:c0:69:7d:4d: 97:71:41:63:8a:84:27:79:e1:bd:05:2b:a4:50:66:d3:08:e1: b1:9c:fa:82:7c:6d:36:57:a3:84:be:1e:76:61:07:c8:24:04: 3d:40:a5:0e:c8:48:6b:e5:8c:89:70:e4:6e:b6:1b:61:79:bf: 8e:7f:89:4d:6c:e8:8e:73:b9:9c:a8:dd:2b:fe:ee:63:89:70: 17:99:da:ab:54:47:e5:5d:83:12:81:09:76:74:15:73:ca:05: 8c:b3:ee:56:92:02:bb:54:33:18:56:bf:3d:c4:8a:19:c6:e2: 13:eb:2c:f0:74:0a:0c:d4:b8:39:37:35:53:5d:85:c3:d5:95: 11:59:13:f2:24:78:41:64:e7:ef:f5:27:f8:63:f1:09:4a:e2: 2d:0b:44:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7nBO/jtqHTFBcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OWI3Y2FjNTItMjRhNi00M2IxLWE2NzItMzhjOWU2NzEyYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mp9DLndd6JkW0ckXUQaN5BwWTbEHBmLoO5X b1bYLNVfnPQXGSMDOufYAxyoeeVhkCuFdBaCK/uKLbUSns25oCSWtZVHql01IVhg jtvmG0znKRvjdxIrTNa/JITyKzm1f8vIQmn0a+eKZV7eUzk9TBfInKv25/gODk16 MKLDYqYUi4gBbJd0axFJDPH7hlxYXdmBbV7MBRc8zUi+FjuF/N5W7r6/2qgkN8Zm 3sjT2+MXY7UQlDojn7ua93hTD9rjqiA/sz40ozVgCAxbqL7Nx55xNHa1NUvVt0dL w7ZLlSaaScT0x5puwYmrpnexwwG9u2e88zBaiBf63EnE8OMWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWIEAU+Xu9uN9gvE85YPoThltsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTIyZmYxMmEtMDM3MS0z MzE5LTg4ZDItZjVlMzQ0YjEzZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWcazgiwO+FzEA0TkpSk62KCxtV9mzXz1RNIH+RcmBXYYNZuN/sm/JO uQ92J8uPjV5m3oKp9sgEQaNv36p3Es931/a+tj8dyll5tVKFST1QJGXUU5pOeble C/y/3RQO+yNH1f1IAyWdwGl9TZdxQWOKhCd54b0FK6RQZtMI4bGc+oJ8bTZXo4S+ HnZhB8gkBD1ApQ7ISGvljIlw5G62G2F5v45/iU1s6I5zuZyo3Sv+7mOJcBeZ2qtU R+VdgxKBCXZ0FXPKBYyz7laSArtUMxhWvz3EihnG4hPrLPB0CgzUuDk3NVNdhcPV lRFZE/IkeEFk5+/1J/hj8QlK4i0LRCo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:18 2025 by rpki-client