$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa File: e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa (raw, json) Hash identifier: QcdfqgrsdMxBiEoIsdjd4wW/NR90ZJPty/10FJexc7A= Subject key identifier: 87:30:65:FA:71:FF:73:45:3A:89:74:78:7A:4C:C8:80:82:4D:4C:A9 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8C38BCAC0A846A35B80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:c3:8b:ca:c0:a8:46:a3:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3267f5fe-1354-4a15-988e-a5696a16ff48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:9a:ef:3f:65:5b:42:79:15:b8:41:b2:35: 95:28:0a:ea:95:5a:64:13:cc:3b:3f:5f:36:c0:53: f0:9f:c1:02:96:a3:25:65:44:a9:ff:3d:f1:24:07: d2:f7:de:4e:84:ee:7f:f0:67:67:d5:e4:d6:ff:84: 7a:34:db:33:a4:e6:af:54:74:9f:22:e6:8c:df:e0: 06:cb:48:71:96:e9:31:d4:b7:44:8d:56:66:b1:92: 52:01:62:99:e2:38:f7:a4:fa:ac:d9:ad:cf:c4:2e: e5:1d:2b:c8:e3:86:2a:c8:3d:b6:f1:dc:5a:7c:19: fd:c0:0f:55:f3:ab:87:4f:18:e2:eb:45:b1:a0:a0: b2:d9:7a:bf:14:68:86:6e:6a:31:3d:d9:78:6c:f5: 88:d2:35:e0:fd:ef:68:56:13:85:c2:79:b0:00:b7: 0d:07:a0:79:8f:bc:26:f0:d2:e5:53:6f:ab:ca:ce: cc:0d:c1:25:af:0a:90:be:f4:9b:41:d1:4b:85:d9: 75:82:c4:94:dc:65:b4:06:89:db:ee:8c:15:5e:ba: d9:5f:fe:1a:cc:c1:a4:45:bb:75:47:e5:97:0e:53: 4d:ec:d5:c7:dd:04:88:f3:79:d8:a9:18:78:c5:a4: 99:41:f5:e3:2a:da:5c:c4:af:49:a7:35:b5:e1:18: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:30:65:FA:71:FF:73:45:3A:89:74:78:7A:4C:C8:80:82:4D:4C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d6:33:43:ed:50:d2:64:88:2f:c5:73:5a:d4:e3:cb:98:ea: 83:30:77:d4:76:5a:15:66:2a:1a:7b:09:d0:82:54:4a:04:bb: cb:43:1f:a3:29:57:80:bf:b6:c4:bf:b5:09:37:b4:8b:c9:72: 97:2e:34:85:0b:8b:c0:94:39:69:90:d9:6e:cd:78:b8:6d:cf: 74:7d:2c:27:31:79:e6:18:44:77:00:67:f8:27:2a:3a:f6:3c: c3:11:a6:91:26:16:55:ef:64:54:b8:7f:fd:ad:46:57:07:c2: e2:8f:25:6d:d6:8e:a3:c2:2c:77:41:1d:6a:e9:60:d2:b2:67: 5d:9a:a7:82:75:28:2d:12:31:2d:5b:3a:9e:7b:9b:02:7a:c3: ef:59:43:23:5d:5f:2e:07:e9:fb:c5:f9:74:fb:53:aa:06:8d: 74:10:58:f1:73:55:53:18:4c:a3:d9:67:6d:b9:fc:03:35:7c: 10:15:22:2c:28:0c:93:80:9e:9c:f6:8e:ca:bd:67:24:aa:37: 4c:d3:46:7a:1b:8c:04:bc:14:7f:4f:82:7c:5c:27:8e:8f:a8: 0c:78:39:6a:36:34:c6:ec:ea:9d:1a:15:d8:19:a6:0f:a6:75: 8f:c5:2d:c2:cd:18:58:c1:e7:35:8b:74:2e:b6:3b:df:fe:11: 97:f4:b0:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7jDi8rAqEajW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzI2N2Y1ZmUtMTM1NC00YTE1LTk4OGUtYTU2OTZhMTZmZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp26a7z9lW0J5FbhBsjWVKArqlVpkE8w7P182 wFPwn8EClqMlZUSp/z3xJAfS995OhO5/8Gdn1eTW/4R6NNszpOavVHSfIuaM3+AG y0hxlukx1LdEjVZmsZJSAWKZ4jj3pPqs2a3PxC7lHSvI44YqyD228dxafBn9wA9V 86uHTxji60WxoKCy2Xq/FGiGbmoxPdl4bPWI0jXg/e9oVhOFwnmwALcNB6B5j7wm 8NLlU2+rys7MDcElrwqQvvSbQdFLhdl1gsSU3GW0Bonb7owVXrrZX/4azMGkRbt1 R+WXDlNN7NXH3QSI83nYqRh4xaSZQfXjKtpcxK9JpzW14Ri+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcwZfpx/3NFOol0eHpMyICCTUypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZTRkODliODAtNDQ0OS0z MzMzLWJkYTktODJlZWRhMGM5ZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnWM0PtUNJkiC/Fc1rU48uY6oMwd9R2WhVmKhp7CdCCVEoEu8tDH6Mp V4C/tsS/tQk3tIvJcpcuNIULi8CUOWmQ2W7NeLhtz3R9LCcxeeYYRHcAZ/gnKjr2 PMMRppEmFlXvZFS4f/2tRlcHwuKPJW3WjqPCLHdBHWrpYNKyZ12ap4J1KC0SMS1b Op57mwJ6w+9ZQyNdXy4H6fvF+XT7U6oGjXQQWPFzVVMYTKPZZ225/AM1fBAVIiwo DJOAnpz2jsq9ZySqN0zTRnobjAS8FH9PgnxcJ46PqAx4OWo2NMbs6p0aFdgZpg+m dY/FLcLNGFjB5zWLdC62O9/+EZf0sOs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:20:57 2025 by rpki-client