$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa File: b39705dc-aa8e-3894-ae97-fe60e59e609d.roa (raw, json) Hash identifier: QcP9laE3YtDOLZmVkXe3WVrPaDEzb0utRX7iSrF5RYM= Subject key identifier: 05:7E:9C:4C:A7:5C:FB:B9:B2:2D:8D:7E:6F:E3:C0:AD:F7:EB:8B:E2 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C206C9A21D84AE54C26980 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:06:c9:a2:1d:84:ae:54:c2:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=3f6dfd88-573a-4a5d-83a2-419d6897f40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:b8:76:ab:50:54:be:ae:34:4a:d2:76:f5: d5:bf:23:a8:c4:8a:9c:59:18:ea:c0:4a:8f:4c:ac: c9:dc:22:2e:67:04:9c:dc:d7:cc:4f:7d:50:21:f6: 17:28:bd:7b:fb:d9:ad:95:f3:23:6f:3a:48:1c:d8: a0:e2:2e:67:78:a3:22:63:1c:ac:17:77:ff:ea:a3: a8:50:88:a7:05:0a:ba:84:82:a8:df:b4:6a:29:24: 21:86:6b:20:db:76:a1:b2:87:8d:70:1e:d4:f6:78: e5:3b:55:a0:27:c5:af:e8:d7:8d:a0:b4:ed:39:da: dd:6b:4b:ea:53:4f:0e:33:01:2b:19:99:3b:1b:50: 7f:2f:eb:e3:17:85:a0:33:40:86:ff:f1:27:2b:b0: 24:64:e1:19:72:92:eb:15:bd:23:37:d1:db:0c:1f: ec:75:c2:67:9a:44:b2:21:73:c7:be:e7:a2:37:ff: a5:26:f9:87:e9:c5:25:b1:0c:f2:9b:8c:d3:00:ae: e3:90:55:ca:4c:67:f9:86:b1:e3:bf:28:bd:72:88: f4:32:61:b1:c3:31:08:b0:cd:ac:55:31:e5:b7:c7: 2d:9a:e3:f9:31:fe:f1:6d:d2:8c:03:87:54:1d:fa: 86:f9:e9:71:d8:b1:a1:0e:cf:aa:ae:e9:dc:6f:fa: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:9C:4C:A7:5C:FB:B9:B2:2D:8D:7E:6F:E3:C0:AD:F7:EB:8B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:25:99:28:11:61:66:f8:ea:00:34:fc:7e:12:7d:1d:10:b6: b7:77:34:8d:dc:b6:4c:15:75:ae:72:da:dd:23:4c:91:5a:69: bb:a9:10:4d:8f:2c:87:98:05:04:3d:f8:22:28:03:7a:f0:50: 43:f4:97:58:30:2f:d7:aa:64:d5:4b:1e:23:3f:54:a8:47:be: 63:cf:f5:af:09:47:e5:38:79:0d:0e:f2:30:ba:c0:a2:ef:06: e0:c5:d3:15:19:cc:b8:f9:f3:c1:d1:43:a2:29:fd:f3:39:ee: 9c:70:a0:06:26:b5:2f:57:3d:00:73:a4:63:fd:ca:c3:ec:bc: 78:07:28:d1:35:c8:74:16:7d:47:f6:12:e8:bd:7a:c2:74:52: 69:0d:87:95:53:cf:ee:cb:b2:7a:45:70:d3:9b:65:c5:1d:40: 18:43:bb:69:1d:a6:59:e8:28:00:5f:e4:52:ca:be:f4:70:53: b4:34:5b:98:c8:99:83:7f:b0:4e:79:97:a8:d6:38:77:55:b5: be:35:99:c4:97:6b:51:2b:c3:19:d0:4a:69:05:e8:4d:16:8b: 2c:2c:26:df:b9:17:16:7a:1e:bb:d7:ec:8d:4a:1e:f9:51:70: a2:2e:bf:dd:80:38:45:de:1b:ec:7d:dd:88:cd:eb:b0:d6:10: cb:56:c0:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgbJoh2ErlTCaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk M2Y2ZGZkODgtNTczYS00YTVkLTgzYTItNDE5ZDY4OTdmNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5O4dqtQVL6uNErSdvXVvyOoxIqcWRjqwEqP TKzJ3CIuZwSc3NfMT31QIfYXKL17+9mtlfMjbzpIHNig4i5neKMiYxysF3f/6qOo UIinBQq6hIKo37RqKSQhhmsg23ahsoeNcB7U9njlO1WgJ8Wv6NeNoLTtOdrda0vq U08OMwErGZk7G1B/L+vjF4WgM0CG//EnK7AkZOEZcpLrFb0jN9HbDB/sdcJnmkSy IXPHvueiN/+lJvmH6cUlsQzym4zTAK7jkFXKTGf5hrHjvyi9coj0MmGxwzEIsM2s VTHlt8ctmuP5Mf7xbdKMA4dUHfqG+elx2LGhDs+qruncb/oZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV+nEynXPu5si2Nfm/jwK3364viMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjM5NzA1ZGMtYWE4ZS0z ODk0LWFlOTctZmU2MGU1OWU2MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIlmSgRYWb46gA0/H4SfR0Qtrd3NI3ctkwVda5y2t0jTJFaabupEE2P LIeYBQQ9+CIoA3rwUEP0l1gwL9eqZNVLHiM/VKhHvmPP9a8JR+U4eQ0O8jC6wKLv BuDF0xUZzLj588HRQ6Ip/fM57pxwoAYmtS9XPQBzpGP9ysPsvHgHKNE1yHQWfUf2 Eui9esJ0UmkNh5VTz+7LsnpFcNObZcUdQBhDu2kdplnoKABf5FLKvvRwU7Q0W5jI mYN/sE55l6jWOHdVtb41mcSXa1ErwxnQSmkF6E0WiywsJt+5FxZ6HrvX7I1KHvlR cKIuv92AOEXeG+x93YjN67DWEMtWwH8= -----END CERTIFICATE-----Generated at Fri Sep 25 01:45:12 2026 by rpki-client