$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa File: d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa (raw, json) Hash identifier: 3iXMe8bNeJXGGtHMiYvXYRtxUezjlxMKoGwilQp/jCE= Subject key identifier: 08:32:7B:26:76:7E:86:C4:3A:ED:A5:39:42:BE:5B:A2:7D:CC:46:1A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C38E162A4CCB0E8E97E0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:8e:16:2a:4c:cb:0e:8e:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=5d2db02d-87bb-4017-984f-e48be5a033f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:48:f3:7c:b1:5c:f8:19:ab:12:46:73:3e: 11:a4:76:6b:40:ef:64:c1:bc:9d:0e:e8:33:08:1f: 77:71:75:f8:1e:88:7f:e2:62:0c:ba:21:1f:dc:44: 62:79:9a:73:24:d5:16:2e:58:d2:e7:c1:db:06:35: e2:10:60:84:19:8b:9a:90:51:c1:73:46:f9:f7:f2: d9:36:e6:21:aa:52:56:c6:2d:6e:f9:86:28:4d:90: 47:9c:e6:03:5c:f6:92:98:1c:fe:58:eb:a0:ff:ae: 31:c7:fc:52:b4:02:36:28:ba:1b:7c:29:cc:da:8e: 3b:14:fd:06:d0:6e:12:27:70:b4:4e:ed:ea:1c:bf: cb:a4:22:ac:59:9c:b4:20:d1:d7:bb:39:3f:94:8a: 43:d8:db:2f:6d:41:02:30:bd:73:86:89:57:02:1e: 31:c7:7c:6e:b3:4f:f2:b3:79:a3:04:b7:b8:44:fe: d8:3a:ee:b0:2a:b5:4c:87:19:5a:96:40:90:16:bb: d7:92:a0:8c:a1:43:55:34:6b:ef:ea:8b:88:11:d7: 6c:8d:8e:c0:3e:a1:98:0f:c4:15:dc:75:91:65:ed: 0f:10:ad:ed:db:52:e7:3f:d2:a8:43:bf:ab:af:7f: 3b:8d:cc:30:fb:72:ad:cf:fa:6a:bb:19:3f:b5:e0: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:7B:26:76:7E:86:C4:3A:ED:A5:39:42:BE:5B:A2:7D:CC:46:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b9:b6:78:7b:d5:e6:67:be:8a:6a:17:09:e4:b2:9b:ab:ec: 08:c2:a9:13:1c:72:1a:81:24:b9:04:6e:00:67:0d:d4:96:06: d1:b8:37:b4:ff:95:5c:42:38:e4:ad:d4:87:e8:b1:d2:a8:93: 6b:55:53:0f:ea:9b:de:2c:6f:f5:e9:1c:83:b8:b4:2e:fc:ec: 63:61:5c:f7:a8:72:0e:49:a0:ed:69:f1:42:fc:75:44:1c:a9: c5:46:fe:e1:af:87:02:8c:7f:88:f6:77:1d:ee:7e:ce:ae:e9: 6b:b8:cb:1c:af:14:fe:41:9d:c2:fd:40:2a:3a:39:0c:c9:01: 67:00:86:1a:57:69:15:6d:f6:4b:30:cb:b1:5b:0e:b6:72:2b: d0:2d:4e:2c:76:3c:c5:90:05:f1:22:19:db:e0:09:b5:03:b6: 03:f3:36:af:ea:58:1d:c2:0a:9a:8d:48:c3:12:d8:e5:f8:41: 21:10:4b:da:32:55:20:4d:2c:a9:ba:b9:d0:ae:66:81:c7:74: f1:6f:10:72:8f:62:2e:df:d2:6c:ed:8a:f5:c5:b7:fd:00:54: 30:8e:5d:0e:6f:38:37:1d:53:82:ee:b1:e2:58:e2:1f:4e:49: 89:6c:e1:35:83:da:76:1f:47:45:75:8b:e6:a5:7e:7b:81:96: 3f:13:47:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8OOFipMyw6Ol+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NWQyZGIwMmQtODdiYi00MDE3LTk4NGYtZTQ4YmU1YTAzM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+VI83yxXPgZqxJGcz4RpHZrQO9kwbydDugz CB93cXX4Hoh/4mIMuiEf3ERieZpzJNUWLljS58HbBjXiEGCEGYuakFHBc0b59/LZ NuYhqlJWxi1u+YYoTZBHnOYDXPaSmBz+WOug/64xx/xStAI2KLobfCnM2o47FP0G 0G4SJ3C0Tu3qHL/LpCKsWZy0INHXuzk/lIpD2NsvbUECML1zholXAh4xx3xus0/y s3mjBLe4RP7YOu6wKrVMhxlalkCQFrvXkqCMoUNVNGvv6ouIEddsjY7APqGYD8QV 3HWRZe0PEK3t21LnP9KoQ7+rr387jcww+3Ktz/pquxk/teDDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgyeyZ2fobEOu2lOUK+W6J9zEYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDE0M2UwNWMtMmZmNC0z ODRiLThkMmQtM2RmYzA1ZWJjNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu5tnh71eZnvopqFwnkspur7AjCqRMcchqBJLkEbgBnDdSWBtG4N7T/ lVxCOOSt1IfosdKok2tVUw/qm94sb/XpHIO4tC787GNhXPeocg5JoO1p8UL8dUQc qcVG/uGvhwKMf4j2dx3ufs6u6Wu4yxyvFP5BncL9QCo6OQzJAWcAhhpXaRVt9ksw y7FbDrZyK9AtTix2PMWQBfEiGdvgCbUDtgPzNq/qWB3CCpqNSMMS2OX4QSEQS9oy VSBNLKm6udCuZoHHdPFvEHKPYi7f0mztivXFt/0AVDCOXQ5vODcdU4LuseJY4h9O SYls4TWD2nYfR0V1i+alfnuBlj8TR2o= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:29 2025 by rpki-client