$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d69d50bb-629f-34ed-aee7-306d25344506.roa File: d69d50bb-629f-34ed-aee7-306d25344506.roa (raw, json) Hash identifier: A9VWUCmlnXMzmRY/WznfEWP9rU+krohulQ39oHPMuB0= Subject key identifier: E0:00:19:D8:AE:2A:39:F7:10:1F:49:31:DF:01:84:8A:7E:57:E8:7D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C2DEFC16B9A8BEEF0B00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d69d50bb-629f-34ed-aee7-306d25344506.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:de:fc:16:b9:a8:be:ef:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=592c3480-ab13-43c9-827e-9d027c7316d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:92:3e:39:ad:a7:bf:b6:0e:ee:6f:24:e5: cd:c9:2f:1d:45:1e:3d:af:4b:7b:01:cf:81:4c:24: 74:33:99:92:68:2c:aa:43:59:97:68:8b:7e:f3:94: 96:e8:44:11:b3:fb:b1:52:d9:48:9a:40:f4:97:26: 62:a1:52:4a:ab:ba:d7:d3:59:70:70:bb:aa:81:ab: 2f:37:bb:89:f7:a2:25:88:a3:99:4c:08:76:1b:13: a6:f0:0a:79:76:a4:e3:53:12:86:56:73:f3:5c:f8: d2:e9:f5:d7:e9:67:48:e5:08:ac:98:03:51:2b:89: 72:10:e4:7a:d0:4a:d6:6b:21:c7:10:6c:38:a3:91: 1a:91:0e:45:7d:7f:f7:c7:26:b9:c3:1a:c7:16:4c: af:8b:d0:08:e3:b8:2c:ac:d4:d5:6d:73:2b:81:ba: 16:eb:10:a3:3c:6a:53:e9:d4:ef:e8:2f:6b:b6:94: cb:36:84:84:e7:07:88:10:46:11:13:52:a2:f2:9b: 9f:12:60:f7:32:d7:c5:a8:16:55:2d:e1:f0:19:f7: c1:2e:ef:59:8a:dd:3f:cc:25:46:d2:7b:0f:35:09: 3b:7f:71:ac:70:d6:36:37:cc:e1:a9:b9:a8:13:93: e5:d3:1a:d9:f4:90:9d:a2:87:4e:38:cd:f7:a7:4a: 9f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:00:19:D8:AE:2A:39:F7:10:1F:49:31:DF:01:84:8A:7E:57:E8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d69d50bb-629f-34ed-aee7-306d25344506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:60:31:fb:ba:d1:c3:8a:a8:7d:6b:94:03:ad:4f:43:9f:45: 48:e4:66:e6:92:80:bf:d6:82:e5:79:d4:55:24:64:a8:76:eb: f1:30:62:02:76:3b:44:c8:94:b9:5d:47:b5:59:c4:19:ed:05: ed:a6:14:81:4d:e1:bf:c4:0d:08:05:3e:0d:e1:e9:70:ff:b9: ad:97:fd:d7:6d:10:ca:db:47:fa:5e:6c:1c:0a:a3:1e:d8:f1: 22:e0:d7:c4:a2:a8:6f:76:29:3b:42:b4:f8:b0:a3:9b:bf:b6: 49:d6:b7:30:f5:02:ea:bc:8b:73:66:cd:8f:55:64:06:af:13: 52:20:73:c0:06:52:07:f3:09:7c:5e:13:0b:02:bd:95:4c:e9: ed:c2:ec:fb:e0:38:26:ff:4a:e7:7a:73:17:bf:ea:9a:98:bd: 01:7d:28:2d:5c:f7:a9:19:79:d9:e9:6c:2f:1d:30:c6:f1:89: 1f:cf:f2:01:90:b5:a6:81:08:1b:3c:ef:1e:45:b8:18:d3:4a: f3:20:30:87:80:61:49:c2:48:df:1a:a7:64:0d:79:33:61:58: d5:fa:b3:14:d1:fa:f6:b8:10:0b:17:83:c3:26:9b:91:6e:da: 85:e4:7c:b7:e3:d0:10:ca:46:dd:45:9b:17:9d:7c:fa:27:d3: db:c9:75:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8Le/Ba5qL7vCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTkyYzM0ODAtYWIxMy00M2M5LTgyN2UtOWQwMjdjNzMxNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwySPjmtp7+2Du5vJOXNyS8dRR49r0t7Ac+B TCR0M5mSaCyqQ1mXaIt+85SW6EQRs/uxUtlImkD0lyZioVJKq7rX01lwcLuqgasv N7uJ96IliKOZTAh2GxOm8Ap5dqTjUxKGVnPzXPjS6fXX6WdI5QismANRK4lyEOR6 0ErWayHHEGw4o5EakQ5FfX/3xya5wxrHFkyvi9AI47gsrNTVbXMrgboW6xCjPGpT 6dTv6C9rtpTLNoSE5weIEEYRE1Ki8pufEmD3MtfFqBZVLeHwGffBLu9Zit0/zCVG 0nsPNQk7f3GscNY2N8zhqbmoE5Pl0xrZ9JCdoodOOM33p0qfMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAAGdiuKjn3EB9JMd8BhIp+V+h9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDY5ZDUwYmItNjI5Zi0z NGVkLWFlZTctMzA2ZDI1MzQ0NTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlgMfu60cOKqH1rlAOtT0OfRUjkZuaSgL/WguV51FUkZKh26/EwYgJ2 O0TIlLldR7VZxBntBe2mFIFN4b/EDQgFPg3h6XD/ua2X/ddtEMrbR/pebBwKox7Y 8SLg18SiqG92KTtCtPiwo5u/tknWtzD1Auq8i3NmzY9VZAavE1Igc8AGUgfzCXxe EwsCvZVM6e3C7PvgOCb/Sud6cxe/6pqYvQF9KC1c96kZednpbC8dMMbxiR/P8gGQ taaBCBs87x5FuBjTSvMgMIeAYUnCSN8ap2QNeTNhWNX6sxTR+va4EAsXg8Mmm5Fu 2oXkfLfj0BDKRt1FmxedfPon09vJdbI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:41 2025 by rpki-client