$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/36c4824c-38fb-301c-8454-da2ad9648693.roa File: 36c4824c-38fb-301c-8454-da2ad9648693.roa (raw, json) Hash identifier: rRyHDev/ygUfclo3qCW/toV88KtFNCv2/qtyLyeuI8g= Subject key identifier: DD:8D:E0:E3:57:7A:B6:06:10:26:24:1C:C8:61:ED:E5:45:33:DA:1D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A7156FEE36018F1AE0580 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/36c4824c-38fb-301c-8454-da2ad9648693.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.128.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:71:56:fe:e3:60:18:f1:ae:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=9af117d2-4b0b-4305-9968-b3d879957526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:fb:58:f4:08:b6:0a:58:db:eb:3c:5a:37: aa:82:ba:16:88:6f:4c:10:cf:8d:74:f9:20:88:c5: 40:24:10:8a:ae:44:35:75:82:0f:ce:27:ef:b8:b6: 16:d7:ac:65:eb:cc:f1:bb:1d:b0:cd:47:58:29:b3: cb:e2:a6:31:6a:a0:d1:78:40:16:8c:6d:04:fa:49: dd:b6:fc:91:dd:0d:b2:5e:af:c3:c4:d9:d9:03:6e: c8:73:45:5d:d6:cb:f1:be:cb:76:6e:0b:2b:7f:c5: 0d:39:79:52:66:03:cb:ef:86:79:4f:81:f7:5c:82: db:d2:d4:97:cd:a1:c7:43:fa:97:60:5e:3b:16:a9: c6:2d:8b:09:ff:54:fe:70:ab:58:1b:a6:88:11:1b: 9d:48:c6:9a:c2:fe:10:78:bb:b7:79:2c:d2:58:37: fe:6b:52:70:f0:b6:80:fb:fe:83:44:b9:38:11:78: 5c:d8:95:6f:76:f1:d7:d0:70:94:9a:3c:fc:db:40: be:57:d5:73:8f:a8:b2:b2:16:e0:82:93:7e:86:ad: ee:82:09:04:54:64:82:3a:44:b0:f7:1f:94:7f:cb: 5e:67:f6:69:94:51:a5:80:e9:f6:d8:4d:86:50:66: b7:9f:61:cf:12:1b:56:01:95:2f:51:86:af:2b:bb: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8D:E0:E3:57:7A:B6:06:10:26:24:1C:C8:61:ED:E5:45:33:DA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/36c4824c-38fb-301c-8454-da2ad9648693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:40:fe:68:69:49:1a:e1:9f:95:f7:ae:09:7e:e2:be:da:77: d3:e1:ce:40:b9:10:64:a2:ac:89:2a:0d:3f:36:04:c7:b8:e6: 45:d7:d8:10:71:90:4d:ba:b0:0c:42:12:3a:c9:d5:aa:af:80: f1:a4:6a:a8:01:76:05:4d:c2:19:20:10:55:48:e5:41:f6:3a: bd:3b:0b:67:b6:1c:61:41:ea:51:5f:74:bb:9a:ac:92:9b:cf: 16:9b:a8:be:f0:e4:03:9f:f8:e6:8d:12:36:33:f2:06:79:a9: 66:b1:ae:8b:0b:bc:ca:56:ea:7a:9c:ef:e4:4c:72:7e:47:9a: f4:ad:3f:2b:da:f0:b1:55:c9:6f:b3:2e:56:cc:f9:ce:93:17: ba:0b:35:16:4d:d7:42:08:02:19:35:3f:75:9a:59:27:d8:65: ca:ab:7f:7d:3d:84:68:5e:27:c3:77:37:4f:ed:e5:63:b8:a7: 61:7f:4e:31:a1:d5:12:52:cb:59:28:c7:58:d9:f2:29:cc:1d: ad:0c:e4:3b:37:46:aa:16:59:b4:b7:95:f2:2e:5b:e0:bb:3a: 26:0f:e8:39:b0:13:07:84:da:d3:f9:de:6b:9a:16:cc:6b:e6: 34:7a:f8:a6:bd:74:2e:ac:22:99:e3:55:8a:29:ac:c6:11:f6: 57:78:46:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnFW/uNgGPGuBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OWFmMTE3ZDItNGIwYi00MzA1LTk5NjgtYjNkODc5OTU3NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpn7WPQItgpY2+s8WjeqgroWiG9MEM+NdPkg iMVAJBCKrkQ1dYIPzifvuLYW16xl68zxux2wzUdYKbPL4qYxaqDReEAWjG0E+knd tvyR3Q2yXq/DxNnZA27Ic0Vd1svxvst2bgsrf8UNOXlSZgPL74Z5T4H3XILb0tSX zaHHQ/qXYF47FqnGLYsJ/1T+cKtYG6aIERudSMaawv4QeLu3eSzSWDf+a1Jw8LaA +/6DRLk4EXhc2JVvdvHX0HCUmjz820C+V9Vzj6iyshbggpN+hq3uggkEVGSCOkSw 9x+Uf8teZ/ZplFGlgOn22E2GUGa3n2HPEhtWAZUvUYavK7uo9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2N4ONXerYGECYkHMhh7eVFM9odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzZjNDgyNGMtMzhmYi0z MDFjLTg0NTQtZGEyYWQ5NjQ4NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5A/mhpSRrhn5X3rgl+4r7ad9PhzkC5EGSirIkqDT82BMe45kXX2BBx kE26sAxCEjrJ1aqvgPGkaqgBdgVNwhkgEFVI5UH2Or07C2e2HGFB6lFfdLuarJKb zxabqL7w5AOf+OaNEjYz8gZ5qWaxrosLvMpW6nqc7+RMcn5HmvStPyva8LFVyW+z LlbM+c6TF7oLNRZN10IIAhk1P3WaWSfYZcqrf309hGheJ8N3N0/t5WO4p2F/TjGh 1RJSy1kox1jZ8inMHa0M5Ds3RqoWWbS3lfIuW+C7OiYP6DmwEweE2tP53muaFsxr 5jR6+Ka9dC6sIpnjVYoprMYR9ld4Rlc= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:23 2026 by rpki-client