$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b722a42a-039a-3687-b638-a1755957a7d2.roa File: b722a42a-039a-3687-b638-a1755957a7d2.roa (raw, json) Hash identifier: xC/ZkxpihTFnd24t8j0ARIFUty7vUIU8Tp0CPiNU5ZA= Subject key identifier: 1A:64:27:57:87:93:12:01:09:C1:76:AB:AF:03:98:A4:40:15:7B:38 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C5A49BFE977DAA689180 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b722a42a-039a-3687-b638-a1755957a7d2.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 1651 IP address blocks: 206.255.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c5:a4:9b:fe:97:7d:aa:68:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=858188ac-9ae0-4979-845a-3722d744ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:60:20:5f:08:8a:49:6f:c1:c8:a4:d1:dd: 55:51:08:24:65:c5:c3:26:c8:5c:26:6e:58:84:f5: 7f:68:7f:bf:b7:c1:d3:8e:ec:97:fd:3d:a0:e6:47: c1:67:6f:18:f2:53:26:19:71:c7:a1:98:cc:f5:8a: 3f:b4:00:ea:47:f4:ec:1f:76:e1:1e:44:b8:90:eb: b3:35:91:fc:17:98:62:d0:bf:1f:2a:12:26:23:ce: f0:36:e6:c7:b3:cf:c6:4f:68:b3:43:f3:50:cd:4b: aa:e8:86:d5:d3:da:74:67:05:ce:d2:05:2b:5c:35: 40:2d:21:51:7d:48:de:e0:02:dc:a1:38:61:9a:a3: 03:0a:31:b3:d8:cf:3d:df:12:78:68:16:aa:ce:4a: 3b:06:df:06:0f:a5:2e:b9:da:44:90:6a:ab:f9:e8: 24:90:b2:ca:99:f0:03:c2:b1:78:9f:70:6a:05:5b: 29:bb:7b:c3:ea:98:42:b0:ec:52:e1:53:04:dd:b8: 9d:53:8f:83:ab:5d:80:3d:76:58:ec:88:ce:7c:8e: 0d:b9:5b:33:9f:13:66:0e:65:62:ac:b1:f8:90:a9: 40:10:1c:ed:89:4c:31:64:92:fd:50:05:e6:05:1f: 35:1f:a5:0d:b5:be:7e:df:5a:fd:97:d4:b5:a8:c6: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:64:27:57:87:93:12:01:09:C1:76:AB:AF:03:98:A4:40:15:7B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b722a42a-039a-3687-b638-a1755957a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1f:52:d7:07:f9:3b:17:3a:90:20:b1:ac:fa:2b:af:9a:8b: d2:39:13:2b:f7:6c:41:44:de:57:ff:be:ba:d2:f2:78:31:1e: 19:ab:88:37:2c:18:7f:19:ef:ba:4c:a4:eb:39:3a:67:77:f7: 6e:a4:a1:3d:01:91:a5:f1:8a:e7:1a:aa:79:62:20:1f:a0:9e: 8a:41:e5:98:1c:55:22:e2:90:44:63:e1:94:06:9c:a3:13:91: c6:52:c5:00:8e:46:23:34:e2:8f:e7:cd:33:ef:d3:53:8b:14: 59:7a:61:c4:0b:b7:2d:87:79:64:c3:dc:60:87:da:10:5f:5b: d1:4a:2d:2f:fd:d1:4f:fd:f2:bb:9a:5d:fb:9a:8e:2d:ac:fc: dd:54:69:66:34:c2:d1:47:ea:94:fa:36:fb:65:32:5c:4d:86: 77:05:74:da:80:23:b9:50:94:90:d8:38:2f:de:d0:a5:84:c7: 66:24:b0:45:f5:c8:89:47:88:47:f7:69:22:6c:00:c7:24:81: 22:ef:17:b4:7f:77:9d:e7:07:e1:05:a5:cd:80:ab:61:4b:37: fc:b1:a0:39:1e:f5:03:d6:f0:58:bf:92:98:78:4d:cd:eb:51: 35:ea:4b:7e:11:f6:9f:75:e6:56:52:0b:ce:83:80:37:c8:6c: 7e:53:a5:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8Wkm/6XfapokYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODU4MTg4YWMtOWFlMC00OTc5LTg0NWEtMzcyMmQ3NDRlZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzhgIF8Iiklvwcik0d1VUQgkZcXDJshcJm5Y hPV/aH+/t8HTjuyX/T2g5kfBZ28Y8lMmGXHHoZjM9Yo/tADqR/TsH3bhHkS4kOuz NZH8F5hi0L8fKhImI87wNubHs8/GT2izQ/NQzUuq6IbV09p0ZwXO0gUrXDVALSFR fUje4ALcoThhmqMDCjGz2M893xJ4aBaqzko7Bt8GD6UuudpEkGqr+egkkLLKmfAD wrF4n3BqBVspu3vD6phCsOxS4VME3bidU4+Dq12APXZY7IjOfI4NuVsznxNmDmVi rLH4kKlAEBztiUwxZJL9UAXmBR81H6UNtb5+31r9l9S1qMaB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpkJ1eHkxIBCcF2q68DmKRAFXs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjcyMmE0MmEtMDM5YS0z Njg3LWI2MzgtYTE3NTU5NTdhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIfUtcH+TsXOpAgsaz6K6+ai9I5Eyv3bEFE3lf/vrrS8ngxHhmriDcs GH8Z77pMpOs5Omd3926koT0BkaXxiucaqnliIB+gnopB5ZgcVSLikERj4ZQGnKMT kcZSxQCORiM04o/nzTPv01OLFFl6YcQLty2HeWTD3GCH2hBfW9FKLS/90U/98rua Xfuaji2s/N1UaWY0wtFH6pT6NvtlMlxNhncFdNqAI7lQlJDYOC/e0KWEx2YksEX1 yIlHiEf3aSJsAMckgSLvF7R/d53nB+EFpc2Aq2FLN/yxoDke9QPW8Fi/kph4Tc3r UTXqS34R9p915lZSC86DgDfIbH5TpQM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:23:26 2025 by rpki-client