$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa File: aae70563-797d-34b1-9db2-9978daa04520.roa (raw, json) Hash identifier: bhkI0Q5wFLvGyMdNbj35aNIIJPe6vGMButtCBJvranw= Subject key identifier: C5:A5:46:84:C3:F9:9D:C3:CB:73:C9:34:14:F9:A0:2A:4E:93:22:3C Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C20F76A22F7BFBFC2D7A00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0f:76:a2:2f:7b:fb:fc:2d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=38cdb7a4-c652-4d73-a16b-29008047892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:01:8e:c5:ba:46:1c:5b:c4:94:63:1c:ea: 98:82:aa:17:f5:4c:4a:02:7d:80:4c:ab:e5:b4:fb: c1:81:4d:94:2f:47:ec:53:69:bb:fc:af:a6:28:f9: 75:37:53:d4:37:0d:1a:42:7c:e2:58:e6:c7:89:e9: d1:84:20:27:f1:e1:ce:98:33:61:0b:5c:39:1b:8a: c7:35:b2:7e:9c:56:cb:74:04:19:6b:2d:e1:6e:a6: c8:7c:0d:89:20:3b:04:35:19:e5:06:9b:e8:7f:45: 3d:e5:e3:f1:91:a0:27:ba:be:53:6a:96:2c:ef:60: 62:3d:4e:81:6b:10:4b:d6:64:9a:19:3d:2b:32:90: 86:10:4f:23:98:3f:61:43:27:b8:60:59:4b:2d:e5: 5c:3b:a6:9f:14:97:58:b4:87:a2:c6:e9:4a:c0:74: 39:c1:05:b1:18:d6:49:5e:f1:86:62:b0:08:b9:3b: 12:ea:5d:75:d3:ad:1c:86:9a:d3:b1:cd:39:3f:6c: 2b:6b:81:be:84:40:19:0c:30:f2:00:06:cc:36:9a: 6f:ff:f6:c3:64:12:e5:1d:47:19:7c:a5:05:34:0d: 43:2d:01:7e:8c:da:78:0f:81:70:2c:9d:da:af:6f: 3c:a1:f6:07:ae:b3:cd:cc:95:99:20:38:5a:d3:04: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A5:46:84:C3:F9:9D:C3:CB:73:C9:34:14:F9:A0:2A:4E:93:22:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:66:75:7f:67:6f:65:6f:ac:a4:7c:ac:b1:fb:df:18:51:cb: cc:86:80:5f:a7:ad:05:06:43:40:1a:0a:65:92:48:05:41:38: f2:d1:88:b6:20:66:cd:16:85:a3:6f:26:2d:43:41:bc:9c:67: 87:72:cf:28:af:e9:3f:4a:95:9f:1c:65:ab:a0:3e:33:2d:a0: a2:46:c4:1a:a4:22:58:0e:7a:55:41:00:09:77:1c:02:34:1a: 1c:c6:2b:2e:15:38:1f:80:51:9b:5c:83:f5:99:c8:8d:6f:74: a8:ed:49:b7:6f:ee:06:cc:5b:d9:3f:c9:9a:53:dc:96:74:70: a0:7d:53:99:7e:f2:7e:3a:b7:80:c6:36:bd:6c:45:56:fe:98: 8c:f9:b2:df:90:dc:fc:0b:a0:79:db:1c:ce:30:bc:f7:4e:8f: fe:b4:ad:1b:b1:81:41:99:2a:7c:b7:28:45:bd:96:7b:ce:12: 76:d8:22:e5:12:a0:12:f4:4a:22:75:f8:b1:6d:80:c9:ee:16: d5:cd:9b:d5:fd:bf:8a:e1:3c:41:6c:0c:33:6a:0f:c9:b3:b2: 44:37:d8:e4:d6:2b:2b:f4:1a:26:d5:60:6c:57:f6:46:a7:3d: 9b:3d:0d:a3:f1:2b:9b:6e:de:9b:b3:94:21:fd:b3:14:99:7d: 1a:3b:7a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg92oi97+/wtegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MzhjZGI3YTQtYzY1Mi00ZDczLWExNmItMjkwMDgwNDc4OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8kBjsW6RhxbxJRjHOqYgqoX9UxKAn2ATKvl tPvBgU2UL0fsU2m7/K+mKPl1N1PUNw0aQnziWObHienRhCAn8eHOmDNhC1w5G4rH NbJ+nFbLdAQZay3hbqbIfA2JIDsENRnlBpvof0U95ePxkaAnur5TapYs72BiPU6B axBL1mSaGT0rMpCGEE8jmD9hQye4YFlLLeVcO6afFJdYtIeixulKwHQ5wQWxGNZJ XvGGYrAIuTsS6l11060chprTsc05P2wra4G+hEAZDDDyAAbMNppv//bDZBLlHUcZ fKUFNA1DLQF+jNp4D4FwLJ3ar288ofYHrrPNzJWZIDha0wSiHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWlRoTD+Z3Dy3PJNBT5oCpOkyI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWFlNzA1NjMtNzk3ZC0z NGIxLTlkYjItOTk3OGRhYTA0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJmdX9nb2VvrKR8rLH73xhRy8yGgF+nrQUGQ0AaCmWSSAVBOPLRiLYg Zs0WhaNvJi1DQbycZ4dyzyiv6T9KlZ8cZaugPjMtoKJGxBqkIlgOelVBAAl3HAI0 GhzGKy4VOB+AUZtcg/WZyI1vdKjtSbdv7gbMW9k/yZpT3JZ0cKB9U5l+8n46t4DG Nr1sRVb+mIz5st+Q3PwLoHnbHM4wvPdOj/60rRuxgUGZKny3KEW9lnvOEnbYIuUS oBL0SiJ1+LFtgMnuFtXNm9X9v4rhPEFsDDNqD8mzskQ32OTWKyv0GibVYGxX9kan PZs9DaPxK5tu3puzlCH9sxSZfRo7eg4= -----END CERTIFICATE-----Generated at Sun Sep 27 07:26:38 2026 by rpki-client