$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa File: c0025222-3a7a-3299-b9e6-86ddb22829a5.roa (raw, json) Hash identifier: J5E100DSG734kC9YAt2wgbukdFwz6o4BJn+DfJFp58o= Subject key identifier: 22:02:87:AE:38:9D:1F:C4:95:B7:A4:09:D5:EA:D6:0D:FD:9A:4A:58 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B95A7A009D14FF10E32001700 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a0:09:d1:4f:f1:0e:32:00:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3afc8fc0-a078-4cdd-906a-796473fd557f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:ea:f8:35:d8:20:93:16:c2:4d:1b:68:69: 6b:61:99:27:e1:3e:c4:e0:e4:11:2c:01:d9:24:b5: 75:fb:70:da:0a:f0:11:e9:6d:d2:78:21:1f:9d:ad: ab:f9:d6:00:37:c8:66:5b:72:af:78:ca:e4:8f:c9: d4:b4:47:74:0b:01:61:75:fa:84:f7:e3:ac:97:13: 1b:59:66:ce:b2:f1:f2:ac:34:97:59:d7:c2:05:c4: 08:e8:45:95:9a:03:87:b1:33:2c:70:33:b0:db:36: 87:5e:46:50:1b:1d:6c:39:81:d0:19:e9:ae:6a:2a: 7b:d3:83:66:3e:f8:da:be:0a:1b:bb:98:ca:98:5c: 0a:78:1c:c9:fd:4c:bc:d5:6b:bd:57:bd:3b:92:dc: 5b:7d:da:ff:97:c3:16:a9:2c:2d:e8:2e:8b:54:63: dd:41:2e:4c:fa:df:6e:ad:0c:6b:b5:d7:61:6d:54: e5:e6:52:bd:56:c5:d2:3e:6f:b1:80:d0:27:f5:95: 08:cc:d7:71:6a:dd:bb:c9:77:20:57:bf:c7:7c:6a: ee:72:cc:58:8d:66:79:43:68:f6:b7:4b:71:d6:08: 1d:4c:5e:12:20:ac:b5:1c:80:d6:9a:8b:13:8a:0a: b3:9e:ec:d1:b5:0d:7f:7f:06:02:5f:0a:9c:85:8e: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:02:87:AE:38:9D:1F:C4:95:B7:A4:09:D5:EA:D6:0D:FD:9A:4A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:62:76:b3:47:d5:a7:73:8e:84:a7:21:b5:a5:86:bb:38:09: 3a:b9:f8:92:eb:c4:a8:ad:8d:4a:76:a5:43:32:e0:bc:9a:98: 1e:ae:25:c1:a9:bf:44:9a:51:99:70:9d:26:2d:65:23:10:03: a4:85:a7:c2:e5:3d:6e:fb:1f:bb:8d:41:6f:1e:52:48:2a:d4: d1:84:ba:85:c8:3d:d6:db:0a:1b:6f:33:3f:76:40:c4:1b:3b: 8b:ab:84:b1:d7:98:e1:81:60:75:72:69:55:88:74:20:bd:0a: 2d:23:c3:3c:ea:09:6e:74:21:86:08:ad:0f:40:90:d2:97:3a: cf:05:85:93:f3:c9:1a:8b:22:19:99:56:ab:ad:3a:17:6b:a2: 2b:6b:11:5b:d9:44:f2:9c:00:55:35:8f:40:9f:d0:77:8a:98: 3e:e5:71:59:dd:8b:98:70:91:bf:11:5f:89:10:eb:3c:f4:c5: 15:17:20:5f:9f:49:2e:fa:a3:d8:74:5a:33:0c:a8:3d:12:ab: 40:65:cc:da:6a:6a:66:b3:26:8e:b3:78:2b:80:35:69:c3:17: 8f:77:9b:c2:b8:ab:72:ce:57:e5:dc:e0:e4:9b:b5:f1:7f:c6: ae:79:6d:af:7b:c3:5b:c8:06:be:09:55:f0:0a:c8:f3:ca:a0: 86:fe:b4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6AJ0U/xDjIAFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2FmYzhmYzAtYTA3OC00Y2RkLTkwNmEtNzk2NDczZmQ1NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY3q+DXYIJMWwk0baGlrYZkn4T7E4OQRLAHZ JLV1+3DaCvAR6W3SeCEfna2r+dYAN8hmW3KveMrkj8nUtEd0CwFhdfqE9+OslxMb WWbOsvHyrDSXWdfCBcQI6EWVmgOHsTMscDOw2zaHXkZQGx1sOYHQGemuaip704Nm Pvjavgobu5jKmFwKeBzJ/Uy81Wu9V707ktxbfdr/l8MWqSwt6C6LVGPdQS5M+t9u rQxrtddhbVTl5lK9VsXSPm+xgNAn9ZUIzNdxat27yXcgV7/HfGrucsxYjWZ5Q2j2 t0tx1ggdTF4SIKy1HIDWmosTigqznuzRtQ1/fwYCXwqchY7HIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCICh644nR/ElbekCdXq1g39mkpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYzAwMjUyMjItM2E3YS0z Mjk5LWI5ZTYtODZkZGIyMjgyOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZidrNH1adzjoSnIbWlhrs4CTq5+JLrxKitjUp2pUMy4LyamB6uJcGp v0SaUZlwnSYtZSMQA6SFp8LlPW77H7uNQW8eUkgq1NGEuoXIPdbbChtvMz92QMQb O4urhLHXmOGBYHVyaVWIdCC9Ci0jwzzqCW50IYYIrQ9AkNKXOs8FhZPzyRqLIhmZ VqutOhdroitrEVvZRPKcAFU1j0Cf0HeKmD7lcVndi5hwkb8RX4kQ6zz0xRUXIF+f SS76o9h0WjMMqD0Sq0BlzNpqamazJo6zeCuANWnDF493m8K4q3LOV+Xc4OSbtfF/ xq55ba97w1vIBr4JVfAKyPPKoIb+tGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:13 2025 by rpki-client