$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b722a42a-039a-3687-b638-a1755957a7d2.roa File: b722a42a-039a-3687-b638-a1755957a7d2.roa (raw, json) Hash identifier: zUCFd7/5JtOfgMxlwIzfqpGbvM0OZ6bg2RBq2RLw+pM= Subject key identifier: FC:8C:16:27:17:A4:8A:7B:1D:84:59:ED:CE:46:39:B7:61:08:48:F1 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C2115323D23B3AB8620380 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b722a42a-039a-3687-b638-a1755957a7d2.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 1651 IP address blocks: 206.255.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:11:53:23:d2:3b:3a:b8:62:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=a9256ab0-ccb5-4ac7-b507-f28e7d0f55e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:2a:59:df:37:3b:9a:23:b0:b2:5a:4c:33: 6b:1c:0b:9a:f7:a0:06:61:a1:47:ff:35:e0:9b:ec: 39:36:ac:88:9e:be:71:69:14:f9:a3:ea:6c:1d:ce: cd:6c:cc:a6:b4:0c:df:42:4c:ea:d3:c6:3d:cc:fa: b6:fe:1c:47:73:1a:30:8d:ab:1f:44:28:0a:e9:3f: b6:6f:37:c9:91:db:bb:e2:55:97:99:da:2e:52:7d: 81:1d:fc:7d:cd:9d:56:20:cd:1c:e0:dc:86:26:eb: 23:83:9a:66:af:e9:4d:8d:56:b0:1d:3d:db:4d:92: 2e:29:c2:dd:0d:67:93:de:91:59:51:ce:a2:7a:09: 75:f0:36:71:d4:0a:99:d5:4c:7b:5b:1e:f1:fc:4e: 96:f3:ae:04:46:59:9d:f7:35:c8:b5:91:91:94:7d: c3:40:1a:36:d8:9c:db:95:de:c6:a8:86:73:5a:18: 78:e4:e8:23:e6:cb:cc:2b:fe:e0:b1:bd:df:e5:68: ca:19:55:b3:d6:e9:c4:a4:c2:a5:9a:4d:dd:ec:76: 37:bf:eb:3d:45:c0:c3:5e:74:ae:f0:ff:cb:27:3c: 35:cb:fc:4e:eb:7d:32:e4:26:47:ee:12:41:b9:78: 34:d6:a7:a3:01:f2:cc:72:c4:76:cc:ff:3a:43:61: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8C:16:27:17:A4:8A:7B:1D:84:59:ED:CE:46:39:B7:61:08:48:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b722a42a-039a-3687-b638-a1755957a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:02:73:1d:67:d7:d2:80:86:b1:83:b1:2f:28:d5:14:88:97: c4:bb:64:4b:4d:53:a6:28:9e:50:20:dd:ae:46:16:cf:22:e0: 45:d6:35:90:b8:13:28:46:d5:a3:a0:23:5a:f4:1d:18:55:da: 7d:89:b3:ce:06:64:a3:b7:ab:1f:eb:6e:b5:9d:2d:84:a9:48: 7d:ed:04:f0:8d:59:98:d9:e8:28:77:5c:e5:c8:34:a5:79:f8: 9f:77:52:4f:5c:fc:f7:84:74:75:dd:a1:d9:04:e7:53:d8:5f: 28:61:00:39:df:ad:a4:7e:e3:ad:97:d8:9f:b3:e4:4c:cc:b6: 99:18:5b:9b:bc:3e:0d:de:4f:d5:31:e2:6a:20:3a:aa:b0:ba: 62:c8:3a:1f:f0:2c:1e:ed:13:7b:41:9c:73:16:9b:82:ee:14: 47:07:ee:8d:24:58:cb:62:6f:84:e2:67:4e:81:2f:28:20:f1: 12:54:c7:36:4a:10:7a:e7:88:02:27:c3:97:f7:b4:87:3c:d6: db:d9:b6:15:27:5d:14:fb:9b:27:10:f9:03:db:e5:c9:d6:3e: 8d:67:87:da:cf:2a:9a:4b:99:c7:40:54:19:dd:fc:71:00:12: fb:5c:cc:65:57:23:e2:b5:03:00:c5:68:e0:49:53:16:f3:21: 59:f9:78:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhFTI9I7OrhiA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YTkyNTZhYjAtY2NiNS00YWM3LWI1MDctZjI4ZTdkMGY1NWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGIqWd83O5ojsLJaTDNrHAua96AGYaFH/zXg m+w5NqyInr5xaRT5o+psHc7NbMymtAzfQkzq08Y9zPq2/hxHcxowjasfRCgK6T+2 bzfJkdu74lWXmdouUn2BHfx9zZ1WIM0c4NyGJusjg5pmr+lNjVawHT3bTZIuKcLd DWeT3pFZUc6iegl18DZx1AqZ1Ux7Wx7x/E6W864ERlmd9zXItZGRlH3DQBo22Jzb ld7GqIZzWhh45Ogj5svMK/7gsb3f5WjKGVWz1unEpMKlmk3d7HY3v+s9RcDDXnSu 8P/LJzw1y/xO630y5CZH7hJBuXg01qejAfLMcsR2zP86Q2GnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyMFicXpIp7HYRZ7c5GObdhCEjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjcyMmE0MmEtMDM5YS0z Njg3LWI2MzgtYTE3NTU5NTdhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8Ccx1n19KAhrGDsS8o1RSIl8S7ZEtNU6YonlAg3a5GFs8i4EXWNZC4 EyhG1aOgI1r0HRhV2n2Js84GZKO3qx/rbrWdLYSpSH3tBPCNWZjZ6Ch3XOXINKV5 +J93Uk9c/PeEdHXdodkE51PYXyhhADnfraR+462X2J+z5EzMtpkYW5u8Pg3eT9Ux 4mogOqqwumLIOh/wLB7tE3tBnHMWm4LuFEcH7o0kWMtib4TiZ06BLygg8RJUxzZK EHrniAInw5f3tIc81tvZthUnXRT7mycQ+QPb5cnWPo1nh9rPKppLmcdAVBnd/HEA EvtczGVXI+K1AwDFaOBJUxbzIVn5eOg= -----END CERTIFICATE-----Generated at Mon Oct 5 00:07:50 2026 by rpki-client