$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa File: aae70563-797d-34b1-9db2-9978daa04520.roa (raw, json) Hash identifier: 3pHxMYmo8ZJjbIjVTcwrhtl2ZAKLzPRjVMpXw+MKE6Y= Subject key identifier: F3:FD:58:0B:93:56:B7:64:C7:E2:8D:2D:F9:20:4C:83:65:73:C3:4A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C310E5576E2B76333E00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:10:e5:57:6e:2b:76:33:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=858d0f80-8931-4e97-95a9-e1d08a498e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:f2:68:7c:bf:40:5b:97:c3:ce:5d:3a:ad: e5:b3:6d:07:ba:4d:54:86:c1:64:5f:8e:6c:8e:4d: c6:31:19:0c:bc:3c:23:57:7c:b8:90:ab:37:f3:ac: b1:cb:17:92:4a:0b:35:f5:b4:e5:00:b6:fd:6d:3c: a2:b1:b8:78:9f:d5:5c:91:c5:45:79:84:15:9a:a2: 2d:2f:02:4e:97:00:ac:fe:52:74:c5:ba:8a:c0:f8: a8:87:a6:ae:6b:00:48:38:fe:bf:c6:e0:0e:61:88: d6:a4:2d:0c:8f:f4:68:ab:de:47:4a:b9:f5:a4:e4: 1b:37:d5:eb:68:dd:4b:0f:0f:52:3f:7a:38:a9:fb: 35:bb:6d:14:b6:48:64:4b:be:92:a7:42:fb:63:7c: 2f:93:fa:c6:86:31:3c:cf:22:be:ef:88:0f:9f:19: c5:ef:65:31:7f:90:c0:a4:cf:6e:0d:ff:0c:65:37: 54:43:43:f3:f5:b0:4d:0a:48:26:1e:35:a8:e4:ce: 09:69:b0:0f:5d:64:cf:cd:15:1d:7f:f5:ed:aa:a0: 60:d6:f5:df:d7:80:6f:3a:fe:f0:a6:28:3d:19:f7: 8c:60:56:65:67:44:83:53:11:85:14:a9:18:be:e3: cd:d9:47:cf:c1:ce:db:12:a3:43:e6:e6:49:5f:33: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FD:58:0B:93:56:B7:64:C7:E2:8D:2D:F9:20:4C:83:65:73:C3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:75:11:a7:44:c0:d7:dc:ca:9c:3c:ea:01:9a:71:a7:a4:e5: c5:88:41:41:71:96:34:64:59:93:da:fd:88:bb:8c:21:20:3e: 94:02:7f:e0:ff:c3:5f:0d:87:83:33:94:75:4f:25:fc:b4:ab: 52:5c:9c:9f:43:a0:2a:e3:d3:54:8b:6b:4b:09:48:ec:ee:b3: cf:fe:00:11:e4:5e:16:e9:b9:8e:ab:32:4b:7e:6d:b9:b9:38: 29:34:4f:88:33:85:9b:aa:a4:35:00:03:4d:b3:c6:89:70:d1: 07:19:75:6c:16:b6:bf:ff:bc:86:73:d5:a4:1a:7a:5d:cd:05: d2:f5:d7:54:6c:c8:7d:1c:5f:d7:78:ea:c0:62:32:e1:e8:af: 06:8d:3a:b6:17:5f:19:15:6a:07:04:48:f6:43:18:fd:d0:cd: 7c:cd:81:62:6f:92:fa:1d:54:55:50:64:d1:73:36:0d:0d:0e: a5:d8:26:5f:ea:68:75:c7:f2:f0:66:30:79:89:dd:fd:9d:3a: fe:5f:52:86:1f:27:71:ab:f9:de:a9:e5:93:83:af:04:72:6f: 06:25:63:78:be:2d:f8:87:a9:19:86:34:7a:b7:38:b5:61:29: 2a:d9:2a:f0:17:b1:d8:74:3e:f6:3b:d0:58:7a:aa:81:bf:b0: 6a:9e:65:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8MQ5VduK3YzPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODU4ZDBmODAtODkzMS00ZTk3LTk1YTktZTFkMDhhNDk4ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMHyaHy/QFuXw85dOq3ls20Huk1UhsFkX45s jk3GMRkMvDwjV3y4kKs386yxyxeSSgs19bTlALb9bTyisbh4n9VckcVFeYQVmqIt LwJOlwCs/lJ0xbqKwPioh6auawBIOP6/xuAOYYjWpC0Mj/Roq95HSrn1pOQbN9Xr aN1LDw9SP3o4qfs1u20UtkhkS76Sp0L7Y3wvk/rGhjE8zyK+74gPnxnF72Uxf5DA pM9uDf8MZTdUQ0Pz9bBNCkgmHjWo5M4JabAPXWTPzRUdf/XtqqBg1vXf14BvOv7w pig9GfeMYFZlZ0SDUxGFFKkYvuPN2UfPwc7bEqND5uZJXzODMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP9WAuTVrdkx+KNLfkgTINlc8NKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWFlNzA1NjMtNzk3ZC0z NGIxLTlkYjItOTk3OGRhYTA0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN1EadEwNfcypw86gGacaek5cWIQUFxljRkWZPa/Yi7jCEgPpQCf+D/ w18Nh4MzlHVPJfy0q1JcnJ9DoCrj01SLa0sJSOzus8/+ABHkXhbpuY6rMkt+bbm5 OCk0T4gzhZuqpDUAA02zxolw0QcZdWwWtr//vIZz1aQael3NBdL111RsyH0cX9d4 6sBiMuHorwaNOrYXXxkVagcESPZDGP3QzXzNgWJvkvodVFVQZNFzNg0NDqXYJl/q aHXH8vBmMHmJ3f2dOv5fUoYfJ3Gr+d6p5ZODrwRybwYlY3i+LfiHqRmGNHq3OLVh KSrZKvAXsdh0PvY70Fh6qoG/sGqeZfw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:32:28 2025 by rpki-client