$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa File: d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa (raw, json) Hash identifier: VJQm04UynHFjXhO0hTipCdly8TuICx8swaHH/V+DUYc= Subject key identifier: C9:98:2C:E9:ED:EF:B6:21:A4:A3:37:3D:E1:E7:17:BC:A9:D5:07:C5 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C20FD71E38B40EC74C8380 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0f:d7:1e:38:b4:0e:c7:4c:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=3ab6b9c7-3089-4b6a-8a04-949fceb15083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:1c:c6:4d:d7:c3:5c:ac:16:6e:00:0e:a7: 04:60:be:ab:48:bc:55:6a:a6:3b:a5:c8:1c:33:23: 21:75:dd:bb:c7:7f:ab:1f:7c:28:26:59:59:4c:2d: 21:cb:2c:7d:b3:3c:c9:ae:e6:be:ad:1a:2f:c6:d8: 17:b2:3b:6d:66:c2:35:7c:ae:47:3b:29:8b:af:b9: 30:53:5d:f7:1b:ed:17:e8:e0:13:1a:10:6a:0b:68: 4f:2a:a2:5e:a4:d7:93:d4:01:85:55:4f:47:9a:cc: 68:c9:e6:c7:8f:ee:e1:cf:6b:54:8f:45:ec:a5:69: 52:d7:2e:12:de:98:dc:5e:ee:10:f1:09:5d:6b:a8: 4e:c1:56:64:f2:fa:24:a9:35:95:2b:6a:2f:eb:97: 0b:2e:64:8b:35:83:ef:a1:c9:2f:59:31:21:db:14: a7:1f:52:c6:70:41:ad:3d:bf:3e:df:d9:cb:21:d4: 66:63:e5:8d:fb:38:55:ba:8f:75:3e:cd:b5:ca:4c: 92:ac:11:ad:bf:88:22:44:52:68:6d:54:32:06:e7: eb:d7:a6:47:d0:26:32:d5:60:ec:2c:68:ff:f3:8e: 02:4d:6a:a0:26:c2:70:d7:80:47:2d:72:d5:74:d9: 89:9b:79:ac:d1:ec:8a:60:ef:79:69:d0:3d:86:12: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:2C:E9:ED:EF:B6:21:A4:A3:37:3D:E1:E7:17:BC:A9:D5:07:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d143e05c-2ff4-384b-8d2d-3dfc05ebc531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:67:5d:53:33:e0:52:71:36:59:1b:99:df:c2:a8:7e:0c:1e: 47:96:32:a6:02:d6:97:85:41:6c:e6:08:73:81:cb:cf:f6:6b: 88:ed:e8:23:7d:45:0c:67:fc:de:30:5d:04:7e:db:30:54:4d: 5e:fc:48:4b:41:5d:5c:02:2f:b7:ab:60:0b:ea:60:a6:c2:8b: 49:ab:6e:98:ad:b5:69:33:99:18:f5:73:c6:c8:dc:30:d3:89: b8:81:5e:2b:2b:66:3f:f3:fa:ea:d6:62:77:9c:db:b9:06:93: b4:ce:d4:fc:75:0c:9a:bb:09:e9:de:4f:38:19:bc:57:44:71: 54:1d:48:e0:4c:fb:08:bf:b0:5f:c7:0f:19:bd:82:e5:c9:85: aa:8b:d4:bf:0b:76:3c:2f:53:d1:44:e3:57:35:74:b5:a4:65: 39:43:51:67:84:9a:0b:c3:54:9b:28:f2:7c:8a:8c:10:32:91: 79:8a:01:63:dc:f3:e1:f3:77:58:52:18:b0:31:00:22:28:fd: 8e:9a:d5:0b:ef:cc:58:c7:57:a2:f6:52:3a:eb:ab:9d:31:7d: ef:55:b4:b3:43:af:66:a9:85:f0:94:50:a6:5c:5b:d9:c3:81: 3e:b9:58:d8:13:35:95:61:92:a8:e4:e6:43:52:1f:ec:64:6f: f5:dc:6a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg/XHji0DsdMg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk M2FiNmI5YzctMzA4OS00YjZhLThhMDQtOTQ5ZmNlYjE1MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq4cxk3Xw1ysFm4ADqcEYL6rSLxVaqY7pcgc MyMhdd27x3+rH3woJllZTC0hyyx9szzJrua+rRovxtgXsjttZsI1fK5HOymLr7kw U133G+0X6OATGhBqC2hPKqJepNeT1AGFVU9HmsxoyebHj+7hz2tUj0XspWlS1y4S 3pjcXu4Q8Qlda6hOwVZk8vokqTWVK2ov65cLLmSLNYPvockvWTEh2xSnH1LGcEGt Pb8+39nLIdRmY+WN+zhVuo91Ps21ykySrBGtv4giRFJobVQyBufr16ZH0CYy1WDs LGj/844CTWqgJsJw14BHLXLVdNmJm3ms0eyKYO95adA9hhL2gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmYLOnt77YhpKM3PeHnF7yp1QfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDE0M2UwNWMtMmZmNC0z ODRiLThkMmQtM2RmYzA1ZWJjNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtnXVMz4FJxNlkbmd/CqH4MHkeWMqYC1peFQWzmCHOBy8/2a4jt6CN9 RQxn/N4wXQR+2zBUTV78SEtBXVwCL7erYAvqYKbCi0mrbpittWkzmRj1c8bI3DDT ibiBXisrZj/z+urWYnec27kGk7TO1Px1DJq7CeneTzgZvFdEcVQdSOBM+wi/sF/H Dxm9guXJhaqL1L8LdjwvU9FE41c1dLWkZTlDUWeEmgvDVJso8nyKjBAykXmKAWPc 8+Hzd1hSGLAxACIo/Y6a1QvvzFjHV6L2Ujrrq50xfe9VtLNDr2aphfCUUKZcW9nD gT65WNgTNZVhkqjk5kNSH+xkb/Xcal8= -----END CERTIFICATE-----Generated at Tue Sep 22 22:33:27 2026 by rpki-client