$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa File: ecb1b9f1-b041-388f-9435-4d1d857917df.roa (raw, json) Hash identifier: qOTMEQJyohCNX/JrfeWhdzCFEo2wtJ0k3sFkc0i3i84= Subject key identifier: 8D:8C:28:6E:46:BE:E7:C1:30:FA:BC:BB:D0:58:EE:DE:4E:D2:86:CD Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8430DAB6C78E54940E0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 206.255.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:43:0d:ab:6c:78:e5:49:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=806b9112-9993-404a-9280-8e19b53681dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:02:64:45:4c:91:b4:b0:01:9e:39:31:8c: 4e:31:00:60:79:85:22:28:2a:9f:e0:fc:bb:4b:13: 29:a8:27:a2:3c:38:2a:e4:87:76:7e:13:a5:f7:0a: b2:3d:b3:68:8e:93:42:70:a4:b1:ba:fe:04:49:12: c4:87:39:fe:83:30:49:01:cb:c0:19:b2:9e:b6:4d: 9b:ba:70:38:cb:d3:cb:a2:a6:4c:b2:f9:75:6f:e5: 21:b1:5a:d5:1b:61:2f:e2:60:1b:f1:f7:10:c4:e0: 6c:42:18:df:fc:ff:72:64:56:77:d5:35:f3:08:94: fc:41:e0:cf:1c:f2:c9:de:a1:0c:39:82:76:a3:42: cb:6d:5f:89:6c:71:2c:7f:28:99:60:a3:bb:32:d8: 0c:9a:01:fa:d5:b9:65:d4:a7:92:9e:7b:c3:ad:b8: 2c:67:83:f7:4d:6c:78:bf:68:23:04:10:d1:b1:d5: f8:06:3c:bf:87:92:0d:eb:55:72:b8:fa:06:64:2a: 33:a2:41:d7:c6:cd:20:77:8d:7d:65:3c:b8:17:c0: 04:17:b0:15:a0:66:54:2a:2e:e1:e7:c3:0b:0c:eb: 4f:11:ee:40:b2:a0:c1:0c:50:c6:07:d2:2a:f3:9c: 3c:9d:62:2e:1b:f6:2d:b0:3e:bb:84:9f:c2:ce:9f: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8C:28:6E:46:BE:E7:C1:30:FA:BC:BB:D0:58:EE:DE:4E:D2:86:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ac:65:1f:78:32:8d:92:5e:2e:42:aa:d5:bb:40:6d:a9:cc: 63:5e:26:b8:b7:c6:47:26:aa:02:66:b4:5e:07:a6:14:54:af: d9:5b:75:99:9a:b8:bb:f8:4f:51:76:59:86:0c:82:24:0d:1d: fb:f7:f7:39:32:ef:cc:f0:c9:94:3c:3e:10:5e:1a:61:fc:07: c7:71:ec:3e:76:e0:08:62:ce:95:f5:44:7d:08:25:2a:3d:c7: df:61:4b:ee:48:1b:3d:2c:f3:07:9e:67:e1:c0:da:cc:39:62: 1d:77:af:f1:56:18:e1:88:c2:d0:da:37:19:43:eb:cc:4d:db: c6:2f:fc:fb:e9:ac:4b:c9:9f:2b:27:26:97:4e:a6:67:98:19: eb:c1:a6:d3:3f:89:1c:70:f3:c6:24:c0:6e:21:b4:2b:ce:ca: 71:75:ff:96:79:fe:f3:fe:5f:d0:4d:da:65:52:9f:9e:eb:25: f0:3a:c2:51:c3:f2:78:67:75:2c:d6:8b:cd:5a:e0:bd:fe:c4: 48:f8:83:b0:35:ca:0d:1d:d9:78:96:9a:39:cd:43:d3:d7:bc: 23:89:9b:37:f1:f3:76:57:50:8a:65:ee:d1:f2:0d:a7:a7:60: 8c:88:f6:54:a2:f1:c5:4a:67:da:0f:42:1f:ba:28:eb:12:83: 88:f0:7c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7hDDatseOVJQOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODA2YjkxMTItOTk5My00MDRhLTkyODAtOGUxOWI1MzY4MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx80CZEVMkbSwAZ45MYxOMQBgeYUiKCqf4Py7 SxMpqCeiPDgq5Id2fhOl9wqyPbNojpNCcKSxuv4ESRLEhzn+gzBJAcvAGbKetk2b unA4y9PLoqZMsvl1b+UhsVrVG2Ev4mAb8fcQxOBsQhjf/P9yZFZ31TXzCJT8QeDP HPLJ3qEMOYJ2o0LLbV+JbHEsfyiZYKO7MtgMmgH61bll1KeSnnvDrbgsZ4P3TWx4 v2gjBBDRsdX4Bjy/h5IN61VyuPoGZCozokHXxs0gd419ZTy4F8AEF7AVoGZUKi7h 58MLDOtPEe5AsqDBDFDGB9Iq85w8nWIuG/YtsD67hJ/Czp8nQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2MKG5GvufBMPq8u9BY7t5O0obNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWNiMWI5ZjEtYjA0MS0z ODhmLTk0MzUtNGQxZDg1NzkxN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAysZR94Mo2SXi5CqtW7QG2pzGNeJri3xkcmqgJmtF4HphRUr9lbdZma uLv4T1F2WYYMgiQNHfv39zky78zwyZQ8PhBeGmH8B8dx7D524AhizpX1RH0IJSo9 x99hS+5IGz0s8weeZ+HA2sw5Yh13r/FWGOGIwtDaNxlD68xN28Yv/PvprEvJnysn JpdOpmeYGevBptM/iRxw88YkwG4htCvOynF1/5Z5/vP+X9BN2mVSn57rJfA6wlHD 8nhndSzWi81a4L3+xEj4g7A1yg0d2XiWmjnNQ9PXvCOJmzfx83ZXUIpl7tHyDaen YIyI9lSi8cVKZ9oPQh+6KOsSg4jwfHU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:49 2025 by rpki-client