$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa File: e3017d68-56f8-3650-bbac-2453ed2c4df7.roa (raw, json) Hash identifier: zptCmQ9cTA70+rJg44ewpG5W+MgckRHyrwvo8nJF7bA= Subject key identifier: C2:52:19:87:0E:49:3C:B5:18:57:B4:81:01:28:67:C1:09:59:FF:68 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584C7D7C6C06DB738FB82D44C000 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 53508 IP address blocks: 206.255.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:6c:06:db:73:8f:b8:2d:44:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=8a43e8ed-aade-4b07-b7ba-de19459d18b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:3d:4c:1c:c6:de:cd:1a:09:09:90:85:b1: fe:75:c6:50:97:a4:76:c8:c1:bc:5e:b9:6f:d2:d7: 66:85:09:67:aa:0f:57:4e:b6:77:9a:e9:63:8f:bc: 18:19:cd:99:30:3f:ca:62:8a:ef:f5:3b:09:9c:42: 3e:62:54:0e:ae:5c:9c:de:93:33:c9:d6:14:5f:4d: 24:f9:fd:dc:3d:a7:b6:d8:92:c1:84:94:28:a9:a5: fa:08:ce:54:38:0d:b2:b9:7e:30:16:bc:d5:b8:4c: 97:5a:df:be:d3:8b:8c:3e:e5:72:76:bf:56:01:29: bf:d6:8c:66:60:f6:5f:89:74:b8:f5:08:4e:21:8a: a2:af:79:04:3a:74:c0:d3:9e:e8:5c:4a:60:b6:95: 42:62:82:f0:fb:dc:2b:9b:04:e8:e6:69:93:7b:7e: 25:1b:2c:2b:06:09:a4:e6:d7:23:e0:79:29:da:0a: 3e:95:0c:a8:7d:35:40:ac:65:17:fd:98:53:22:ed: 44:6f:5c:9e:f9:eb:14:3c:6a:11:22:ff:13:77:47: 19:82:ec:01:7f:3b:bc:39:40:8e:f8:c4:79:2c:32: e4:b4:f8:0b:47:64:d7:a1:96:8f:33:03:8f:91:9e: 12:11:b7:48:1c:b8:bd:05:37:5a:9d:0d:0c:0c:83: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:19:87:0E:49:3C:B5:18:57:B4:81:01:28:67:C1:09:59:FF:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9b:07:35:a7:61:ba:0d:eb:eb:e1:c3:53:f5:cb:48:29:13: 65:e4:7e:3d:a7:26:99:56:1c:a9:f8:27:b8:ce:9f:1f:6e:d9: 25:fc:ef:8c:27:3c:2c:96:cf:b2:48:9d:62:fa:e6:c0:71:47: 33:4f:e0:02:b5:c7:45:12:03:e1:91:bb:9e:d7:2f:86:b8:63: c7:70:4e:c1:1f:3a:ba:16:e5:58:6e:10:cb:82:2c:bf:bd:b9: 87:19:dd:7f:d4:e0:16:df:15:ea:51:eb:4b:d5:77:1b:9a:bc: 00:d3:e6:26:ed:03:ef:09:8c:6f:17:93:43:26:ce:98:0a:0e: a3:a2:75:3c:11:bf:81:f4:43:1d:22:92:22:cc:c5:48:a9:9a: fa:c0:21:af:c4:eb:a3:8c:23:f9:0c:52:a0:d6:a3:78:b0:a6: a2:17:89:df:72:c1:06:10:16:a4:d8:27:4d:af:00:ec:bc:cb: d7:cb:39:94:8b:34:82:ad:8c:3b:51:58:5c:07:0f:2d:c0:ac: 87:c0:06:6f:48:ca:95:76:f8:5d:65:aa:d0:98:a6:f7:94:11: 12:d5:57:9b:47:10:51:94:5c:c5:ae:69:f8:5e:11:89:0b:a6: 5c:60:93:c3:3b:07:4c:ae:a9:31:9a:6c:66:f5:6a:d9:e9:29: 02:29:3a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGwG23OPuC1EwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk OGE0M2U4ZWQtYWFkZS00YjA3LWI3YmEtZGUxOTQ1OWQxOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKM9TBzG3s0aCQmQhbH+dcZQl6R2yMG8Xrlv 0tdmhQlnqg9XTrZ3muljj7wYGc2ZMD/KYorv9TsJnEI+YlQOrlyc3pMzydYUX00k +f3cPae22JLBhJQoqaX6CM5UOA2yuX4wFrzVuEyXWt++04uMPuVydr9WASm/1oxm YPZfiXS49QhOIYqir3kEOnTA057oXEpgtpVCYoLw+9wrmwTo5mmTe34lGywrBgmk 5tcj4Hkp2go+lQyofTVArGUX/ZhTIu1Eb1ye+esUPGoRIv8Td0cZguwBfzu8OUCO +MR5LDLktPgLR2TXoZaPMwOPkZ4SEbdIHLi9BTdanQ0MDIOQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJSGYcOSTy1GFe0gQEoZ8EJWf9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZTMwMTdkNjgtNTZmOC0z NjUwLWJiYWMtMjQ1M2VkMmM0ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv//MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6bBzWnYboN6+vhw1P1y0gpE2Xkfj2nJplWHKn4J7jOnx9u2SX874wn PCyWz7JInWL65sBxRzNP4AK1x0USA+GRu57XL4a4Y8dwTsEfOroW5VhuEMuCLL+9 uYcZ3X/U4BbfFepR60vVdxuavADT5ibtA+8JjG8Xk0MmzpgKDqOidTwRv4H0Qx0i kiLMxUipmvrAIa/E66OMI/kMUqDWo3iwpqIXid9ywQYQFqTYJ02vAOy8y9fLOZSL NIKtjDtRWFwHDy3ArIfABm9IypV2+F1lqtCYpveUERLVV5tHEFGUXMWuafheEYkL plxgk8M7B0yuqTGabGb1atnpKQIpOvY= -----END CERTIFICATE-----Generated at Mon Mar 2 08:32:52 2026 by rpki-client