$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json) Hash identifier: AON9UglGQgLTWLkq39W/H10ZF7C9lKy4ophZ5G01HZ8= Subject key identifier: 21:C5:8B:B2:CC:68:55:8B:32:7E:09:76:FA:23:65:7B:7E:C6:34:00 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A6736AA7E6AE7D396D680 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:67:36:aa:7e:6a:e7:d3:96:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=1efc4780-46e0-45d5-aa3e-d958fe24aa4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:df:d4:b9:8f:69:08:46:6d:43:09:8d:3f: e5:8a:b7:af:63:2c:6e:8e:49:0d:f3:58:6d:0e:d6: 3e:ea:35:1d:46:29:d7:5c:13:5c:33:a9:2b:d7:ba: 4c:f7:ad:b1:87:dc:18:a7:c4:76:73:67:cf:ab:de: 79:94:3f:15:bb:3f:a3:35:16:98:05:e1:22:39:d8: f4:44:bb:88:a5:66:6d:74:ba:cc:b4:d3:0c:18:1d: 05:54:34:47:75:cf:c2:fa:16:39:97:b9:e7:b3:3d: de:cb:70:dd:f5:83:d1:20:de:49:c7:13:e1:8c:4f: d6:85:c3:69:bc:9f:b9:c4:db:6e:45:e2:4a:bc:36: 80:00:9a:e0:3f:7e:23:fe:dd:fb:06:5d:a6:57:08: 8c:c2:0a:cb:f4:cb:61:3a:41:f8:d6:83:b7:55:e8: 6c:e2:7a:f2:09:8d:d5:52:b9:86:8e:1e:0a:b4:7b: 57:48:3d:dc:51:c8:36:74:83:66:63:4f:5a:69:16: 45:b4:19:e5:b0:89:9d:55:8b:13:a7:ac:3e:79:9e: 6d:fd:06:5f:d1:58:b6:ae:dd:ea:28:e5:f2:ce:e9: 69:22:05:92:35:46:2d:d0:ee:c2:f6:72:3c:82:26: 1f:b5:cc:c5:44:24:31:38:8c:18:cb:78:62:bc:04: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C5:8B:B2:CC:68:55:8B:32:7E:09:76:FA:23:65:7B:7E:C6:34:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:56:ec:36:d5:db:40:fd:f8:b6:f2:1b:b6:c2:54:cb:a6:8f: 26:cf:a4:d7:cd:a1:77:f2:71:10:17:d9:40:b2:ae:3f:c0:2d: 70:00:0c:4d:d4:0d:22:c6:af:8d:1e:b3:a3:28:9b:f4:23:ce: 90:50:63:08:1d:d2:d8:23:c2:5a:f1:12:12:e2:dc:8e:e4:3f: d0:9b:dd:eb:82:03:1a:83:3e:3d:da:d8:5c:e0:81:9b:1d:bf: 67:ac:f7:b9:6d:21:a8:7a:6a:a0:98:f7:11:e7:93:17:53:3c: 93:11:c7:f9:90:07:2b:43:23:83:7c:2f:bc:75:c3:00:13:1a: b7:ef:27:52:11:d0:04:40:9e:a2:ff:09:1b:e5:b6:aa:39:cc: fd:10:28:3f:5b:59:34:56:fb:06:39:a9:a3:33:30:6d:12:5a: 36:2a:aa:1c:73:01:a2:3d:0a:0e:da:3e:cc:18:9a:61:35:18: e4:04:34:e5:29:3f:8f:bb:bc:5b:3a:81:ef:db:26:93:cd:d7: 43:81:35:70:94:b1:fd:50:a6:e3:a0:90:f2:ec:84:72:83:c7: 56:4f:9a:f9:3c:57:62:4d:74:0f:ac:55:83:d3:5a:e6:ce:d6: 4d:08:d1:58:43:43:a3:55:7f:c1:2e:32:c9:b7:e6:7d:4b:4d: 09:69:4d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmc2qn5q59OW1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MWVmYzQ3ODAtNDZlMC00NWQ1LWFhM2UtZDk1OGZlMjRhYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vf1LmPaQhGbUMJjT/lirevYyxujkkN81ht DtY+6jUdRinXXBNcM6kr17pM962xh9wYp8R2c2fPq955lD8Vuz+jNRaYBeEiOdj0 RLuIpWZtdLrMtNMMGB0FVDRHdc/C+hY5l7nnsz3ey3Dd9YPRIN5JxxPhjE/WhcNp vJ+5xNtuReJKvDaAAJrgP34j/t37Bl2mVwiMwgrL9MthOkH41oO3Vehs4nryCY3V UrmGjh4KtHtXSD3cUcg2dINmY09aaRZFtBnlsImdVYsTp6w+eZ5t/QZf0Vi2rt3q KOXyzulpIgWSNUYt0O7C9nI8giYftczFRCQxOIwYy3hivARHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHFi7LMaFWLMn4JdvojZXt+xjQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZW7DbV20D9+LbyG7bCVMumjybPpNfNoXfycRAX2UCyrj/ALXAADE3U DSLGr40es6Mom/QjzpBQYwgd0tgjwlrxEhLi3I7kP9Cb3euCAxqDPj3a2FzggZsd v2es97ltIah6aqCY9xHnkxdTPJMRx/mQBytDI4N8L7x1wwATGrfvJ1IR0ARAnqL/ CRvltqo5zP0QKD9bWTRW+wY5qaMzMG0SWjYqqhxzAaI9Cg7aPswYmmE1GOQENOUp P4+7vFs6ge/bJpPN10OBNXCUsf1QpuOgkPLshHKDx1ZPmvk8V2JNdA+sVYPTWubO 1k0I0VhDQ6NVf8EuMsm35n1LTQlpTVs= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:05 2026 by rpki-client