$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa File: e3017d68-56f8-3650-bbac-2453ed2c4df7.roa (raw, json) Hash identifier: WUgQprscI8lCmdvv/ixLpl5VCgoD5MZV6RoemGG0rLg= Subject key identifier: 6E:8C:89:E3:35:40:D5:9E:72:1C:CF:36:F0:98:A6:F8:09:AC:F8:BF Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C48547FD353CF8521380 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c4:85:47:fd:35:3c:f8:52:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=1f913fe8-0540-48bb-8a26-3dfd2c104cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:f7:cc:ab:00:4b:53:08:d3:51:e3:76:ff: c9:88:e6:24:59:c2:99:9b:61:ae:3d:2e:2c:4f:ac: 20:8b:18:c8:30:34:c8:68:ce:9d:8a:42:5b:7e:01: 6e:68:7b:6b:6e:71:bf:f4:40:62:c0:91:81:9f:84: c1:5b:f6:f2:e9:f2:45:c0:25:46:78:ef:58:4c:44: 03:7e:3d:e2:b8:54:61:ca:25:30:3c:e3:01:0c:79: ed:6e:ac:9f:51:a0:0f:f2:03:b0:c2:67:1f:51:92: 25:13:e9:b2:37:32:36:f4:f1:b0:ab:d7:45:a4:62: a7:c9:32:0a:00:42:b9:ac:58:67:c1:9d:a3:8d:64: 9a:e3:44:27:f3:35:81:ee:ed:31:d6:e9:dd:e9:31: 4c:37:39:01:1b:83:a9:b5:0d:e3:d3:aa:ea:0b:9c: 44:57:9f:a8:8c:26:3e:4e:4d:20:47:58:bb:d6:88: c6:e9:69:ea:fc:e8:1b:53:f1:ef:e5:d7:34:dd:14: e4:13:26:b1:56:3f:33:5f:d7:45:a0:2c:e1:56:6d: f5:ff:f4:38:9f:33:b2:83:64:c9:6f:74:5a:d9:3e: 8d:ae:4d:61:98:b5:a4:c2:4c:55:e2:f9:4f:19:d2: c8:6e:91:de:57:70:84:4a:76:48:15:07:e8:2b:23: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:89:E3:35:40:D5:9E:72:1C:CF:36:F0:98:A6:F8:09:AC:F8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:08:23:49:07:f8:a7:2c:9c:f7:72:8e:df:85:fc:29:a6:7e: 6c:63:6c:1f:b9:82:49:3d:26:73:e8:f4:27:83:30:fc:d6:c2: 4e:36:4c:2e:e9:c0:0b:95:6c:90:cb:bd:9a:ad:66:35:90:bc: 7a:18:8f:4e:d5:eb:da:ab:db:54:0e:4b:36:eb:c5:17:17:2e: be:13:9a:e8:38:77:51:53:75:e4:9e:d6:e4:b5:1f:72:7a:fc: 49:22:c8:08:d2:7c:fd:96:9d:01:99:00:37:90:27:8e:cb:35: 4f:0c:e8:45:88:49:fc:f8:68:b2:de:55:dc:65:88:a9:1c:7f: bc:f6:3d:0c:83:b1:c0:ac:e0:0c:3e:b0:0f:76:19:62:1c:9c: 85:d6:29:1b:8e:4d:31:fc:dd:05:92:ce:a6:9a:ad:77:2e:ae: 3d:39:ee:bb:a2:39:6d:74:2b:86:e1:62:48:c7:16:77:15:99: b4:06:01:70:83:5b:16:5e:ff:f3:5c:d1:22:f0:57:ee:27:f3: 1b:f7:10:9c:7d:d4:46:14:0e:9f:6c:55:93:38:cd:b0:19:c1: d6:d9:d8:b4:60:18:07:6a:5f:d6:a5:9a:27:f1:5b:69:06:4e: 18:9a:1a:2a:e6:29:cf:a1:c6:e0:89:a2:2e:d4:36:71:e1:52: 18:18:2f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8SFR/01PPhSE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MWY5MTNmZTgtMDU0MC00OGJiLThhMjYtM2RmZDJjMTA0Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApan3zKsAS1MI01Hjdv/JiOYkWcKZm2GuPS4s T6wgixjIMDTIaM6dikJbfgFuaHtrbnG/9EBiwJGBn4TBW/by6fJFwCVGeO9YTEQD fj3iuFRhyiUwPOMBDHntbqyfUaAP8gOwwmcfUZIlE+myNzI29PGwq9dFpGKnyTIK AEK5rFhnwZ2jjWSa40Qn8zWB7u0x1und6TFMNzkBG4OptQ3j06rqC5xEV5+ojCY+ Tk0gR1i71ojG6Wnq/OgbU/Hv5dc03RTkEyaxVj8zX9dFoCzhVm31//Q4nzOyg2TJ b3Ra2T6Nrk1hmLWkwkxV4vlPGdLIbpHeV3CESnZIFQfoKyMc6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6MieM1QNWechzPNvCYpvgJrPi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZTMwMTdkNjgtNTZmOC0z NjUwLWJiYWMtMjQ1M2VkMmM0ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv//MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgII0kH+KcsnPdyjt+F/CmmfmxjbB+5gkk9JnPo9CeDMPzWwk42TC7p wAuVbJDLvZqtZjWQvHoYj07V69qr21QOSzbrxRcXLr4Tmug4d1FTdeSe1uS1H3J6 /EkiyAjSfP2WnQGZADeQJ47LNU8M6EWISfz4aLLeVdxliKkcf7z2PQyDscCs4Aw+ sA92GWIcnIXWKRuOTTH83QWSzqaarXcurj057ruiOW10K4bhYkjHFncVmbQGAXCD WxZe//Nc0SLwV+4n8xv3EJx91EYUDp9sVZM4zbAZwdbZ2LRgGAdqX9almifxW2kG ThiaGirmKc+hxuCJoi7UNnHhUhgYL24= -----END CERTIFICATE-----Generated at Wed Nov 5 09:41:35 2025 by rpki-client