$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa File: a72517c8-1d52-3d75-a9a7-f9badad56345.roa (raw, json) Hash identifier: vs8Ip47Kx3MDh2VE9yfOULrt/W+RDIJVgpwYyc/3Hc4= Subject key identifier: E1:53:B6:FA:8D:D0:A5:33:28:78:65:A3:B8:FE:D3:F2:53:FD:29:CF Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B95A79FF767D1AC9A46740380 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9f:f7:67:d1:ac:9a:46:74:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=83912689-4521-4ef0-bbb6-db5e0b2b939b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:b1:a1:13:9a:f7:dc:80:df:f1:2d:24:61: 45:db:9d:d7:d3:e9:05:df:f4:97:6a:a1:a7:67:6c: e2:8e:56:f3:51:6a:d7:10:f8:40:82:4e:79:6b:54: 55:01:2a:64:b4:d1:cc:3e:b7:79:3c:15:73:4e:49: 82:f4:01:e4:a4:c6:31:19:13:ce:34:3a:19:d6:5c: 36:62:f0:66:e1:27:59:d6:28:98:5f:96:ea:d2:a1: 95:30:a7:2f:f4:31:a4:58:47:11:83:e2:04:12:ed: c1:ee:23:6f:c2:9b:75:2d:97:ed:90:f2:38:a4:b0: bb:71:09:79:05:a6:58:8e:47:fd:06:4d:7b:8d:9a: 5c:7d:c9:f6:2b:7c:93:eb:31:e6:49:69:a1:1b:e6: 5f:9c:dc:73:91:9e:e3:38:1b:f9:41:bc:98:ac:0e: de:f7:9a:15:4f:d3:d3:c6:5f:8a:fd:54:15:f9:08: d8:8d:a8:b1:61:44:2d:37:ca:ee:01:d1:8c:bb:f8: 1c:1a:1c:20:c1:e6:bf:4c:a4:d0:c4:3f:8f:00:14: ec:7c:43:38:71:7c:48:1c:28:f2:b4:01:fd:33:f2: 56:ff:3d:bc:84:e1:f1:a3:85:eb:6a:8a:c5:6d:92: e7:b6:9b:12:58:aa:d7:17:6e:8a:4e:9b:e8:31:12: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:53:B6:FA:8D:D0:A5:33:28:78:65:A3:B8:FE:D3:F2:53:FD:29:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a4:b5:95:12:55:99:ff:12:9d:ce:e6:bd:a8:58:ae:e6:92: a2:d7:bc:3c:d8:87:78:c9:1f:54:7b:68:31:c9:98:00:1d:dd: ef:65:6b:5b:c4:a3:4a:ab:47:35:97:61:f6:93:f0:fb:c6:aa: 0f:87:0e:8a:63:dc:3e:41:cb:bb:e3:ce:06:37:8d:d6:b3:f2: 60:e1:b3:21:5e:1f:38:26:da:df:46:45:d8:4b:af:8e:d3:fb: 2d:e3:02:5f:eb:92:60:86:cb:3c:d0:2f:1f:24:c3:3e:90:4e: 5f:4f:96:6d:f4:cc:77:b3:15:5c:ae:97:b8:61:e0:b1:68:39: 88:b1:fa:15:6b:77:ee:8c:55:d7:4e:91:a1:72:4f:5b:6d:74: 5c:62:00:fc:c7:e4:ce:33:9e:c4:3a:10:ac:eb:40:3a:bf:30: db:a9:d5:d6:33:50:99:2f:72:67:90:1d:0d:8d:f9:9c:b1:0e: 8a:22:f8:19:ae:1d:e8:a8:70:11:51:87:34:cb:37:64:90:98: 2e:29:3b:b1:8d:18:2e:43:1f:63:40:08:69:d2:50:e5:53:d8: 86:11:42:d7:29:4e:e1:28:cf:5d:bb:4c:a2:6e:3d:e2:41:c0: 04:35:6a:a4:b0:95:67:62:82:8b:e8:72:a5:b4:39:7c:a4:69: c7:21:54:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5/3Z9GsmkZ0A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODM5MTI2ODktNDUyMS00ZWYwLWJiYjYtZGI1ZTBiMmI5MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsyxoROa99yA3/EtJGFF253X0+kF3/SXaqGn Z2zijlbzUWrXEPhAgk55a1RVASpktNHMPrd5PBVzTkmC9AHkpMYxGRPONDoZ1lw2 YvBm4SdZ1iiYX5bq0qGVMKcv9DGkWEcRg+IEEu3B7iNvwpt1LZftkPI4pLC7cQl5 BaZYjkf9Bk17jZpcfcn2K3yT6zHmSWmhG+ZfnNxzkZ7jOBv5QbyYrA7e95oVT9PT xl+K/VQV+QjYjaixYUQtN8ruAdGMu/gcGhwgwea/TKTQxD+PABTsfEM4cXxIHCjy tAH9M/JW/z28hOHxo4XraorFbZLntpsSWKrXF26KTpvoMRIuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFTtvqN0KUzKHhlo7j+0/JT/SnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTcyNTE3YzgtMWQ1Mi0z ZDc1LWE5YTctZjliYWRhZDU2MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImktZUSVZn/Ep3O5r2oWK7mkqLXvDzYh3jJH1R7aDHJmAAd3e9la1vE o0qrRzWXYfaT8PvGqg+HDopj3D5By7vjzgY3jdaz8mDhsyFeHzgm2t9GRdhLr47T +y3jAl/rkmCGyzzQLx8kwz6QTl9Plm30zHezFVyul7hh4LFoOYix+hVrd+6MVddO kaFyT1ttdFxiAPzH5M4znsQ6EKzrQDq/MNup1dYzUJkvcmeQHQ2N+ZyxDooi+Bmu HeiocBFRhzTLN2SQmC4pO7GNGC5DH2NACGnSUOVT2IYRQtcpTuEoz127TKJuPeJB wAQ1aqSwlWdigovocqW0OXykacchVHw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:26 2025 by rpki-client