$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa File: d33ac72b-a2fd-3e99-9262-5396871638b8.roa (raw, json) Hash identifier: eqgo4DrkyNpiAWYVbJdBluG2/nLgTTsmKAkOeRu3xsU= Subject key identifier: 2F:EF:4E:2A:56:66:7B:C6:53:91:68:8B:DB:17:7A:97:71:E4:E5:49 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C45A7464A2EF3AEB9900 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c4:5a:74:64:a2:ef:3a:eb:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=01705272-1eef-4d0f-9446-386af70e1bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:76:e9:c5:8f:3a:11:9e:d9:ba:77:9f:90: 94:42:9e:fb:bd:8f:65:14:67:d7:d9:7f:23:67:8a: f9:ac:41:79:af:ad:98:b5:12:73:a0:16:e7:cc:f8: 4a:0b:fe:a5:91:f3:d0:ba:09:0b:52:45:9a:2f:23: dd:d9:0a:3d:1f:34:fc:0f:58:d4:59:2d:fc:10:d7: 7d:5a:12:06:e1:64:91:33:bb:65:a7:0c:83:8d:4c: e1:db:c2:73:93:b9:c8:cc:79:3f:e5:13:48:32:f1: 39:57:b2:fe:05:16:18:5d:97:9b:ec:9d:e8:3a:44: 93:01:07:77:ce:79:58:86:51:0d:92:bf:19:f6:9d: 85:4f:40:9e:f4:f0:0a:13:df:52:53:9d:06:1f:8a: d4:ce:07:a6:66:e0:19:7f:c3:a4:f7:f3:ae:49:5d: a9:8e:3b:45:64:d8:8a:8b:de:9d:e8:b1:14:62:76: 3a:57:ac:a7:18:8f:21:ee:d6:3a:ed:26:5c:5a:25: 20:32:a6:82:bf:e0:84:d6:e0:19:1a:c6:83:7c:29: e2:a6:9c:0d:e1:a4:0d:88:65:0c:37:36:76:69:ba: ee:02:7a:fd:ba:dd:0b:1e:ff:13:00:8e:ee:8d:c4: 67:f3:f8:ba:d0:d6:e9:7c:52:90:41:91:3c:c0:fd: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EF:4E:2A:56:66:7B:C6:53:91:68:8B:DB:17:7A:97:71:E4:E5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:89:22:f2:2f:a2:e3:52:4a:d5:4d:f1:3e:da:5c:74:d2:77: 3d:a0:35:08:6b:9a:71:1f:b2:45:ab:27:da:1f:2d:19:4e:63: 7d:49:ce:11:9b:86:be:85:1b:7b:5b:34:f7:8b:5f:bd:71:a3: 62:8c:51:86:fc:c1:34:3c:d3:75:42:3a:9c:4d:0b:3b:37:75: 67:fc:6a:a1:24:a9:5b:7a:ba:77:f4:5f:45:32:69:20:14:d7: 47:a9:6a:46:e8:3b:b1:9d:87:0c:f9:13:8a:d1:78:6a:0b:a5: f0:87:4e:27:3f:d8:38:2a:82:eb:27:9f:eb:c3:80:da:be:97: a6:9a:68:f4:cc:1b:73:51:5f:aa:d6:48:00:00:2c:14:86:84: a6:3d:02:7f:10:92:9b:c4:5c:29:e9:c3:dc:01:ae:b1:32:cf: b6:5e:a4:94:dd:a3:78:50:4b:00:cb:c0:09:a5:4f:2a:08:95: c9:0e:aa:41:3e:d6:83:a2:51:33:bf:71:66:ed:d9:fa:b9:1e: b2:d6:34:d8:c5:70:68:1e:38:5b:00:6c:3f:dd:79:73:bc:1e: cb:a4:6b:d6:08:10:6f:98:cc:af:ed:aa:77:44:34:99:d8:17: 24:28:70:da:f8:bc:6b:b3:da:d2:5b:53:60:f6:2d:03:d8:50: 27:7e:f4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8RadGSi7zrrmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MDE3MDUyNzItMWVlZi00ZDBmLTk0NDYtMzg2YWY3MGUxYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sp26cWPOhGe2bp3n5CUQp77vY9lFGfX2X8j Z4r5rEF5r62YtRJzoBbnzPhKC/6lkfPQugkLUkWaLyPd2Qo9HzT8D1jUWS38ENd9 WhIG4WSRM7tlpwyDjUzh28Jzk7nIzHk/5RNIMvE5V7L+BRYYXZeb7J3oOkSTAQd3 znlYhlENkr8Z9p2FT0Ce9PAKE99SU50GH4rUzgemZuAZf8Ok9/OuSV2pjjtFZNiK i96d6LEUYnY6V6ynGI8h7tY67SZcWiUgMqaCv+CE1uAZGsaDfCnippwN4aQNiGUM NzZ2abruAnr9ut0LHv8TAI7ujcRn8/i60NbpfFKQQZE8wP0oVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/vTipWZnvGU5Foi9sXepdx5OVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDMzYWM3MmItYTJmZC0z ZTk5LTkyNjItNTM5Njg3MTYzOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuJIvIvouNSStVN8T7aXHTSdz2gNQhrmnEfskWrJ9ofLRlOY31JzhGb hr6FG3tbNPeLX71xo2KMUYb8wTQ803VCOpxNCzs3dWf8aqEkqVt6unf0X0UyaSAU 10epakboO7Gdhwz5E4rReGoLpfCHTic/2Dgqgusnn+vDgNq+l6aaaPTMG3NRX6rW SAAALBSGhKY9An8QkpvEXCnpw9wBrrEyz7ZepJTdo3hQSwDLwAmlTyoIlckOqkE+ 1oOiUTO/cWbt2fq5HrLWNNjFcGgeOFsAbD/deXO8Hsuka9YIEG+YzK/tqndENJnY FyQocNr4vGuz2tJbU2D2LQPYUCd+9Ho= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:35 2025 by rpki-client