$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa File: a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa (raw, json) Hash identifier: kqeSb+5CYAZ2DwxVJR3JIQZllVWp6Ki3e7gtWyEjYwc= Subject key identifier: 4A:81:DC:33:EE:5E:BB:89:3C:D3:AE:5B:38:81:CF:F6:7F:19:15:F3 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C2CD17E55C2DD4BE9C90 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:cd:17:e5:5c:2d:d4:be:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=cded0e49-7a89-4632-a3d9-306b46a68d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:73:fb:a0:4f:08:a1:96:45:35:8b:7c:5e:d3: cf:40:a0:d3:4f:c7:26:09:28:f8:dc:19:d6:b7:51: 04:d9:7e:a7:68:04:2a:a7:4b:85:86:c1:fa:a1:d2: 1f:d1:fc:8e:a2:80:23:93:da:9c:7a:4c:00:c9:66: cf:bc:1e:57:c7:f3:22:9e:a4:e5:8f:c3:12:04:16: 54:49:58:33:e2:23:85:30:05:d5:29:3f:16:dc:5f: 68:06:27:4a:6b:87:e8:1a:43:e7:48:54:9b:0c:cf: fa:fe:3e:a8:8e:08:b4:40:37:c9:38:12:b9:c7:10: f3:03:05:c1:fc:ab:a9:29:09:fa:44:9b:61:47:0a: e3:77:0b:4b:f7:12:a1:62:a3:7d:80:de:c6:bb:be: fc:7d:db:16:5a:08:6a:88:a3:26:6e:f2:ee:fa:1f: 70:4b:a2:be:4b:bf:7e:3e:37:67:51:52:d3:2c:e3: ec:c2:90:2e:22:f7:b5:d7:3d:fd:7a:d2:5c:ef:5f: 16:19:bc:a4:f8:65:b6:e5:08:b6:9a:dd:09:3b:15: 7c:21:01:75:09:f3:fd:e1:60:5a:81:da:58:8a:89: 50:c7:4b:47:28:3c:54:56:f0:10:1f:53:ef:79:fd: b9:03:0d:98:9d:3f:a3:cf:23:1b:9f:9d:20:71:dc: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:DC:33:EE:5E:BB:89:3C:D3:AE:5B:38:81:CF:F6:7F:19:15:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4d:7b:12:45:3c:e3:8d:bf:38:86:47:7d:cb:34:38:1b:c6: fa:a6:e1:be:0a:d9:59:78:b3:99:75:29:e9:d3:45:63:6c:11: 3a:1e:c5:a6:31:ed:17:af:cc:4f:f4:a3:19:9f:3f:2f:66:ae: 08:76:77:46:f0:df:2f:1d:28:3d:16:86:be:b5:2d:f4:c0:7d: b0:12:29:cb:bd:d7:0a:bd:d0:58:87:99:12:bb:00:3b:18:e0: 3d:97:cb:63:29:2c:b5:28:16:f7:6f:98:93:41:cd:ea:79:02: f9:2b:e5:b7:ab:38:32:a8:a7:92:c7:4b:b7:4d:1b:c5:e8:34: d5:21:0b:99:64:ec:4a:43:60:c0:c5:42:b9:37:51:de:09:8e: 99:f9:e7:01:71:8d:bb:ff:1a:e3:fb:25:69:0c:56:46:41:ff: 4f:c7:b1:26:98:36:af:ac:8d:f1:46:4d:76:cd:bf:b9:c7:20: 5e:77:c2:f7:33:20:58:38:67:85:fa:1e:9d:df:41:dc:06:4e: 98:f0:82:97:87:c8:82:9f:a4:36:2a:86:86:0e:31:59:67:bc: 54:e2:aa:fc:b1:d6:7c:1b:ec:37:df:83:b9:90:53:60:2c:f6: 64:b4:da:11:32:bc:a1:a2:9a:14:52:fb:e2:c9:32:1a:ff:fc: 5a:e4:5c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8LNF+VcLdS+nJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2RlZDBlNDktN2E4OS00NjMyLWEzZDktMzA2YjQ2YTY4ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HP7oE8IoZZFNYt8XtPPQKDTT8cmCSj43BnW t1EE2X6naAQqp0uFhsH6odIf0fyOooAjk9qcekwAyWbPvB5Xx/MinqTlj8MSBBZU SVgz4iOFMAXVKT8W3F9oBidKa4foGkPnSFSbDM/6/j6ojgi0QDfJOBK5xxDzAwXB /KupKQn6RJthRwrjdwtL9xKhYqN9gN7Gu778fdsWWghqiKMmbvLu+h9wS6K+S79+ PjdnUVLTLOPswpAuIve11z39etJc718WGbyk+GW25Qi2mt0JOxV8IQF1CfP94WBa gdpYiolQx0tHKDxUVvAQH1Pvef25Aw2YnT+jzyMbn50gcdwChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqB3DPuXruJPNOuWziBz/Z/GRXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTcxZTc1MmItMzAyMS0z ZDBhLThjN2YtY2Y4YTg2MmJhY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVNexJFPOONvziGR33LNDgbxvqm4b4K2Vl4s5l1KenTRWNsEToexaYx 7RevzE/0oxmfPy9mrgh2d0bw3y8dKD0Whr61LfTAfbASKcu91wq90FiHmRK7ADsY 4D2Xy2MpLLUoFvdvmJNBzep5Avkr5berODKop5LHS7dNG8XoNNUhC5lk7EpDYMDF Qrk3Ud4Jjpn55wFxjbv/GuP7JWkMVkZB/0/HsSaYNq+sjfFGTXbNv7nHIF53wvcz IFg4Z4X6Hp3fQdwGTpjwgpeHyIKfpDYqhoYOMVlnvFTiqvyx1nwb7Dffg7mQU2As 9mS02hEyvKGimhRS++LJMhr//FrkXPE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:46 2025 by rpki-client