$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa File: dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa (raw, json) Hash identifier: 9bsFkXRsgGfHjbsQLADTlPQoUb3pv3dDeEJHQhztJ5I= Subject key identifier: D5:88:2F:27:E0:EA:5D:64:0C:C3:AD:7C:0C:92:E2:62:69:F3:19:1B Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C36A4F3D42A198E1E580 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c3:6a:4f:3d:42:a1:98:e1:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b970da3a-13f2-41e1-8fa0-83820040e98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:42:4f:52:cb:03:19:ea:5e:68:39:4f:e3: f9:85:2f:04:9e:1d:2e:50:1c:31:4e:c4:2a:ea:b9: 59:5d:c7:ca:21:19:b8:1b:de:93:10:02:06:13:ca: c3:49:d0:71:e7:c2:0b:51:91:04:df:1f:23:5e:17: 67:23:cc:d3:c0:b8:ee:81:33:4f:34:9a:d5:d3:a6: 0e:e9:a4:c6:01:ee:7f:2d:84:2d:af:f0:1a:bb:d1: b6:eb:9f:7a:43:77:b6:94:9e:1e:9a:14:7c:a0:0c: d1:36:72:e3:e2:35:31:12:99:10:7a:70:d5:33:fa: 49:8a:ff:34:72:dc:05:6c:c8:54:32:47:2e:f5:c5: 18:ff:ff:e5:a4:fa:9f:ca:78:6f:54:c8:70:90:c9: 10:96:fb:b1:53:c7:01:11:91:c7:74:b5:70:ee:fd: c9:56:28:ed:f7:f3:54:9c:10:64:61:6b:fb:ed:63: 40:fd:dc:a1:06:ad:0e:f7:95:9a:dc:4b:35:3c:21: 29:c3:33:02:45:5a:97:1c:2f:fe:27:cd:f0:0e:d4: 00:a2:54:87:89:9f:80:8a:54:7c:a7:db:f4:fd:fc: 6c:78:92:08:f6:a2:a7:0f:51:85:2c:ea:e1:bd:15: a3:2d:e2:3f:10:e3:c3:ec:7a:8b:28:81:58:c8:67: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:2F:27:E0:EA:5D:64:0C:C3:AD:7C:0C:92:E2:62:69:F3:19:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9b:6e:68:16:15:05:24:2d:6c:45:8c:3c:a1:22:84:58:41: ff:40:4d:d6:2f:ea:0a:5a:14:62:31:24:7e:95:bf:4f:78:f5: 41:98:aa:cb:b0:1a:8c:6e:8d:2e:cd:31:ed:42:18:3f:7e:13: e2:cd:96:23:4b:5f:78:a4:58:32:f5:27:f5:53:d0:dd:7b:1e: bc:d7:9b:f4:7a:fb:17:88:74:84:e4:c1:8f:e5:5a:1e:bf:7f: 80:ff:9e:cc:de:7c:67:e9:d8:d9:47:1b:34:7f:b6:40:ac:02: 30:fc:05:9f:bf:32:9b:f2:7d:0c:24:e9:db:d4:87:48:d1:5f: 6c:cc:23:31:5d:6f:51:0a:83:14:6c:82:aa:2d:cc:c6:6b:e2: 0c:10:2e:61:5d:36:cc:4d:97:8a:f8:d1:95:3f:05:2d:97:ff: c1:8f:39:5c:b1:5f:55:7c:15:c1:de:84:8b:f8:51:42:a2:b8: 3e:17:56:b1:4a:e7:82:3a:00:62:fa:5d:8c:b8:25:ec:c2:f4: c9:b8:31:f7:b9:c6:61:5c:a1:a5:67:02:3a:dc:a1:81:a9:25: 50:c6:a8:f3:e0:d4:9a:76:5a:70:8d:3e:8e:18:99:5b:b4:ce: 8e:95:43:ee:e1:0b:2d:a7:07:1a:97:7a:f8:f1:44:f9:47:98: 5d:21:df:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8NqTz1CoZjh5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Yjk3MGRhM2EtMTNmMi00MWUxLThmYTAtODM4MjAwNDBlOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVZCT1LLAxnqXmg5T+P5hS8Enh0uUBwxTsQq 6rlZXcfKIRm4G96TEAIGE8rDSdBx58ILUZEE3x8jXhdnI8zTwLjugTNPNJrV06YO 6aTGAe5/LYQtr/Aau9G26596Q3e2lJ4emhR8oAzRNnLj4jUxEpkQenDVM/pJiv80 ctwFbMhUMkcu9cUY///lpPqfynhvVMhwkMkQlvuxU8cBEZHHdLVw7v3JVijt9/NU nBBkYWv77WNA/dyhBq0O95Wa3Es1PCEpwzMCRVqXHC/+J83wDtQAolSHiZ+AilR8 p9v0/fxseJII9qKnD1GFLOrhvRWjLeI/EOPD7HqLKIFYyGccAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWILyfg6l1kDMOtfAyS4mJp8xkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGQwZTVmYTQtNjU3Mi0z NDNlLTg4YjMtMmMzMDlhYTlhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSbbmgWFQUkLWxFjDyhIoRYQf9ATdYv6gpaFGIxJH6Vv0949UGYqsuw GoxujS7NMe1CGD9+E+LNliNLX3ikWDL1J/VT0N17HrzXm/R6+xeIdITkwY/lWh6/ f4D/nszefGfp2NlHGzR/tkCsAjD8BZ+/MpvyfQwk6dvUh0jRX2zMIzFdb1EKgxRs gqotzMZr4gwQLmFdNsxNl4r40ZU/BS2X/8GPOVyxX1V8FcHehIv4UUKiuD4XVrFK 54I6AGL6XYy4JezC9Mm4Mfe5xmFcoaVnAjrcoYGpJVDGqPPg1Jp2WnCNPo4YmVu0 zo6VQ+7hCy2nBxqXevjxRPlHmF0h34Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:43 2025 by rpki-client