$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa File: 025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa (raw, json) Hash identifier: /GorzEN2jH995g/FbsURlWdXeW1YxHR8zKjqG+tlnnE= Subject key identifier: 29:41:66:A4:AF:32:EA:C1:FC:28:AD:01:21:51:F1:82:11:79:AA:C8 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A66E5E48DA223F9050580 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:66:e5:e4:8d:a2:23:f9:05:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=4d3f97cb-dc3c-42aa-9014-80bf556aa003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:62:af:c5:ac:84:71:7b:9d:db:da:53:8b: 3d:ad:a3:b6:b2:90:e2:b7:23:46:ff:88:5f:54:48: 7b:5c:9d:23:2e:14:91:35:c7:2c:42:ef:76:e2:0c: e3:a5:e5:a8:28:d6:40:49:2f:5a:e4:26:28:36:ea: 45:89:e6:b2:9d:45:be:32:4b:d5:4c:e0:ad:ec:9d: f0:a9:90:f4:5e:07:af:8a:c6:1f:ee:03:83:a8:e4: 78:0a:1b:8f:13:9e:e7:91:4c:0b:91:cd:ab:f7:92: 07:af:0f:d7:d3:1c:65:05:f9:a4:82:10:11:68:c7: a0:fb:8d:d0:23:0a:6c:2e:b1:7c:4d:da:04:05:e5: cd:9a:82:23:b1:ad:04:2e:3f:a9:52:74:e9:f2:7e: fd:90:e9:7b:f7:1a:d1:24:e4:10:20:16:a9:bb:b9: b9:b0:57:7d:aa:6b:ad:a0:9d:1e:b5:3f:3c:b1:51: 8f:96:7a:b2:6a:e1:8f:3c:37:3e:d4:fa:32:33:12: d8:09:6b:05:52:c7:83:9c:7b:87:e8:59:41:73:3e: 4e:0f:6a:67:ab:33:fd:b8:53:0a:4b:a3:5f:6d:df: a8:45:71:36:3f:3b:4e:50:96:01:49:9d:b2:43:b5: f2:a6:44:d4:11:85:44:9c:40:8e:61:02:29:a5:ea: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:41:66:A4:AF:32:EA:C1:FC:28:AD:01:21:51:F1:82:11:79:AA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d9:74:59:73:f9:7c:21:7d:f2:51:c3:56:19:9b:75:5a:54: a9:8d:44:ed:b2:54:9a:40:69:ed:6d:fd:5c:0e:45:42:9f:de: 69:cb:b9:30:e5:46:6d:98:fe:e7:2b:3d:38:71:b0:e9:1d:5f: 9b:4f:7c:1b:55:97:73:c8:71:c1:56:37:c4:6d:56:ac:c9:73: 29:b5:77:6e:53:50:b0:f2:40:19:e7:79:4e:98:28:80:2f:2e: bb:8c:39:41:a7:c4:05:89:47:dd:4b:d4:c5:87:1e:83:51:75: c5:7b:27:8c:a5:d2:c1:64:e7:bb:7a:2f:4e:fa:94:22:75:5b: ab:ed:f1:e3:92:04:94:f4:4b:87:52:69:cc:5b:b5:70:88:c7: 93:83:f2:d0:d9:f8:03:7c:9b:4d:b1:23:ba:66:35:99:b0:ac: 21:39:6f:8b:eb:bf:35:fc:7b:5e:ee:8a:2e:75:e2:a2:53:d6: 7e:ce:d4:ef:52:74:57:b8:d0:55:df:9d:4d:c8:cc:45:bc:7d: 3f:aa:bc:97:b9:6d:f1:d7:da:54:eb:a6:38:7e:83:87:20:dc: f0:49:46:96:41:a5:6b:3a:28:b4:ba:ac:2b:13:c2:83:0b:97: 9c:e3:0e:79:2c:f3:31:18:c0:ea:7d:cc:8d:17:d3:b8:e8:ea: bc:af:34:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmbl5I2iI/kFBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NGQzZjk3Y2ItZGMzYy00MmFhLTkwMTQtODBiZjU1NmFhMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCNir8WshHF7ndvaU4s9raO2spDityNG/4hf VEh7XJ0jLhSRNccsQu924gzjpeWoKNZASS9a5CYoNupFieaynUW+MkvVTOCt7J3w qZD0XgevisYf7gODqOR4ChuPE57nkUwLkc2r95IHrw/X0xxlBfmkghARaMeg+43Q IwpsLrF8TdoEBeXNmoIjsa0ELj+pUnTp8n79kOl79xrRJOQQIBapu7m5sFd9qmut oJ0etT88sVGPlnqyauGPPDc+1PoyMxLYCWsFUseDnHuH6FlBcz5OD2pnqzP9uFMK S6Nfbd+oRXE2PztOUJYBSZ2yQ7XypkTUEYVEnECOYQIppeqswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClBZqSvMurB/CitASFR8YIRearIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDI1YzJlYTktZmI4OC0z M2Y3LThiYjgtODhhM2RiYTg3M2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzv8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnZdFlz+XwhffJRw1YZm3VaVKmNRO2yVJpAae1t/VwORUKf3mnLuTDl Rm2Y/ucrPThxsOkdX5tPfBtVl3PIccFWN8RtVqzJcym1d25TULDyQBnneU6YKIAv LruMOUGnxAWJR91L1MWHHoNRdcV7J4yl0sFk57t6L076lCJ1W6vt8eOSBJT0S4dS acxbtXCIx5OD8tDZ+AN8m02xI7pmNZmwrCE5b4vrvzX8e17uii514qJT1n7O1O9S dFe40FXfnU3IzEW8fT+qvJe5bfHX2lTrpjh+g4cg3PBJRpZBpWs6KLS6rCsTwoML l5zjDnks8zEYwOp9zI0X07jo6ryvNGY= -----END CERTIFICATE-----Generated at Wed Apr 8 22:58:52 2026 by rpki-client