$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/cc61b9c1-989d-3b19-a4df-55c292d79503.roa File: cc61b9c1-989d-3b19-a4df-55c292d79503.roa (raw, json) Hash identifier: wCHpmTCSCnO2HevsQZPo1yTcEoVcPDNjZo0ir4F2g8U= Subject key identifier: F2:BB:66:17:3C:0E:51:BB:70:8F:AD:57:13:C4:68:67:63:59:E5:4A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8D3D3EA5210BBCF3180 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/cc61b9c1-989d-3b19-a4df-55c292d79503.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:d3:d3:ea:52:10:bb:cf:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8fd00fa2-ae85-4abb-a3a4-3ca41b04b50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:15:74:21:f8:94:dd:1b:58:bb:93:91:3c: e8:1d:48:85:48:6c:24:9a:41:5b:5e:13:6f:21:54: 6d:b0:d5:e8:bf:49:88:3e:1e:44:1e:6e:ad:d4:ef: 18:85:db:d0:33:6d:f0:62:e2:78:12:6a:90:ed:c8: 1d:a4:ab:2a:34:56:10:60:04:04:57:59:65:43:80: 81:b2:02:59:d6:65:8d:71:0a:00:20:45:91:71:94: 22:a2:ce:92:ab:26:ba:77:6d:05:b7:de:7e:74:12: b0:1e:4d:6e:90:02:33:1c:74:cf:2d:5d:55:2a:3d: 74:ae:10:d0:99:1b:37:00:37:0c:3f:29:62:80:27: f7:ae:19:ea:61:4f:89:95:a6:48:9b:94:d3:c5:3a: bc:44:04:3a:a3:dd:21:fe:cf:3f:8b:cd:20:15:04: 27:84:52:9b:88:55:2f:67:56:eb:01:23:58:a9:a7: 55:d8:9b:ae:8f:cc:4b:42:17:67:67:15:d7:d9:62: 59:64:ee:9d:6b:c4:65:1e:fd:1c:47:6c:39:eb:22: 70:8d:cd:30:6f:12:3b:43:19:85:6b:37:c0:9d:3d: fa:91:6a:02:9c:89:73:e5:b4:ea:d8:79:f6:7c:27: bb:82:2f:12:53:f3:7e:14:aa:0d:b8:40:29:9f:b4: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:66:17:3C:0E:51:BB:70:8F:AD:57:13:C4:68:67:63:59:E5:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/cc61b9c1-989d-3b19-a4df-55c292d79503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:88:b0:de:dc:ae:56:d3:e8:4f:de:e6:49:c6:29:f8:6e:52: e2:1d:c1:08:f7:da:91:00:59:e3:01:a6:60:65:7e:5d:ab:2b: 2d:60:f0:4e:99:06:12:41:b2:4c:8b:5c:8a:3d:d0:d3:a4:ae: 1e:a5:b8:c6:95:db:6c:ce:84:18:dd:2d:ef:80:2d:49:ed:ba: 56:72:4c:3c:34:01:db:96:a1:af:02:aa:18:02:c5:48:f5:6a: 20:05:ae:f6:e9:f6:57:45:45:a2:b2:06:b7:92:db:a6:b9:b8: 02:cd:2b:c9:a5:9f:aa:eb:82:5c:88:cd:e2:e6:5f:c2:87:e1: 2c:a0:0e:0a:61:40:bd:9a:35:56:18:83:52:57:8c:bb:54:f3: d9:bb:0f:06:e9:0f:02:a9:01:67:3b:32:37:46:cb:91:fb:7f: 75:c5:41:d1:dd:f7:90:65:e2:7e:29:3c:f8:36:fa:42:5d:53: 9a:05:ff:82:09:a7:d4:3c:5c:d3:44:a2:30:85:03:0d:d2:ea: 23:15:3d:4c:18:69:0a:63:34:e9:e8:e3:65:7a:77:a0:99:c1: 0c:7b:4b:17:c1:ec:c4:7b:f3:ce:54:70:35:18:3b:e8:eb:d7: c3:1d:66:6e:76:05:60:0f:43:0e:d9:82:dd:67:6f:10:af:70: 00:9a:9c:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7jT0+pSELvPMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGZkMDBmYTItYWU4NS00YWJiLWEzYTQtM2NhNDFiMDRiNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvEVdCH4lN0bWLuTkTzoHUiFSGwkmkFbXhNv IVRtsNXov0mIPh5EHm6t1O8YhdvQM23wYuJ4EmqQ7cgdpKsqNFYQYAQEV1llQ4CB sgJZ1mWNcQoAIEWRcZQios6Sqya6d20Ft95+dBKwHk1ukAIzHHTPLV1VKj10rhDQ mRs3ADcMPyligCf3rhnqYU+JlaZIm5TTxTq8RAQ6o90h/s8/i80gFQQnhFKbiFUv Z1brASNYqadV2Juuj8xLQhdnZxXX2WJZZO6da8RlHv0cR2w56yJwjc0wbxI7QxmF azfAnT36kWoCnIlz5bTq2Hn2fCe7gi8SU/N+FKoNuEApn7T3jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK7Zhc8DlG7cI+tVxPEaGdjWeVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvY2M2MWI5YzEtOTg5ZC0z YjE5LWE0ZGYtNTVjMjkyZDc5NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGIsN7crlbT6E/e5knGKfhuUuIdwQj32pEAWeMBpmBlfl2rKy1g8E6Z BhJBskyLXIo90NOkrh6luMaV22zOhBjdLe+ALUntulZyTDw0AduWoa8CqhgCxUj1 aiAFrvbp9ldFRaKyBreS26a5uALNK8mln6rrglyIzeLmX8KH4SygDgphQL2aNVYY g1JXjLtU89m7DwbpDwKpAWc7MjdGy5H7f3XFQdHd95Bl4n4pPPg2+kJdU5oF/4IJ p9Q8XNNEojCFAw3S6iMVPUwYaQpjNOno42V6d6CZwQx7SxfB7MR7885UcDUYO+jr 18MdZm52BWAPQw7Zgt1nbxCvcACanPY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:11:13 2025 by rpki-client