$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3f38cbec-efb3-3fb3-87b7-00c1122a37ea.roa File: 3f38cbec-efb3-3fb3-87b7-00c1122a37ea.roa (raw, json) Hash identifier: NaV0wYgmvV5JgzKMRNHvbR2sBgn+6TMAF+WqAuPlFaM= Subject key identifier: 0A:A6:A3:40:23:08:57:12:9A:C6:31:D1:F9:02:5E:60:C6:74:86:B2 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A705A5AF3DF6D4DA63FF0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3f38cbec-efb3-3fb3-87b7-00c1122a37ea.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:5a:5a:f3:df:6d:4d:a6:3f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=63c99ec5-1a73-453a-9085-1e909285e0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:a2:20:5e:75:5b:de:06:2e:51:bb:c0:72: 50:44:aa:74:a4:b4:8f:9e:94:a6:f0:2a:82:1b:e5: 4c:c1:b2:ba:52:f7:a2:c5:82:28:b9:1d:e5:2f:e7: c7:fa:80:3b:ba:94:95:c9:17:9c:d3:a9:7d:d5:4b: 7d:0f:e3:ce:0c:7b:6a:a4:50:7a:68:8b:48:68:94: 96:d4:1c:f8:35:b5:8e:01:e0:fb:32:32:ca:67:e0: 58:c5:3f:65:71:9e:20:33:98:54:37:c1:20:8a:c0: ed:c8:90:e2:aa:9c:0a:2a:ca:d9:f4:0c:a5:de:a3: 33:a6:88:cf:c7:51:23:70:85:33:e7:06:fe:6e:eb: a8:5b:62:3b:e3:3e:c4:01:c2:f5:d0:31:c4:30:29: 0b:d0:18:d4:66:c2:eb:20:4b:76:14:c0:9e:32:4f: 3d:62:66:9e:48:c1:1a:62:0a:ef:2b:15:8a:3d:ae: fd:11:da:5d:2d:0a:9d:8b:c6:85:01:d9:67:8c:23: fa:ed:49:22:dc:2e:b1:d2:aa:bf:a0:f3:3e:53:59: c3:f4:92:8c:66:36:10:42:90:c7:1a:0a:f4:bf:57: b4:2f:46:20:69:10:bb:99:b2:18:9d:ec:d0:4c:01: 5c:dc:6f:6c:d5:88:d1:e6:ad:6f:21:83:72:c6:f7: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:A3:40:23:08:57:12:9A:C6:31:D1:F9:02:5E:60:C6:74:86:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3f38cbec-efb3-3fb3-87b7-00c1122a37ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:31:8b:a5:ea:c2:97:cd:b8:9f:80:8f:7f:f1:72:7d:b1:b4: 13:20:60:9e:40:c1:28:89:07:96:23:e4:1e:11:75:13:ac:79: 12:f7:3a:7e:04:2b:19:0f:ff:ba:66:a1:06:52:4a:1b:bb:78: e5:54:74:cf:6b:59:74:94:f3:d0:07:1a:d3:32:7d:c1:6e:7e: 55:fc:1a:ac:30:f0:15:2f:b4:fa:58:8f:17:f0:d4:c8:1d:b0: 7a:aa:1a:90:5a:38:21:d8:75:e7:10:5a:3b:e1:d7:52:5c:20: e8:a4:56:51:0f:d6:b0:5e:11:52:23:8b:be:e8:de:4e:34:71: 04:f6:3a:dd:5d:7b:4e:5a:6a:45:a0:5f:83:d4:a1:28:b4:09: ac:6e:76:30:ac:f5:15:e1:00:04:eb:60:43:e3:66:98:08:ef: a4:b0:15:72:b1:e9:0b:f5:4b:1a:9a:54:1b:f9:2c:3f:48:1a: 01:bf:6f:2e:f0:bc:a2:6e:72:19:b0:e0:bc:0b:f8:86:4a:6f: 62:6e:f5:27:7b:a8:6d:90:67:b5:ad:83:e5:4c:67:7d:34:c9: 4f:fc:4c:b1:b0:b8:31:24:c4:eb:f2:ef:00:11:a9:70:51:f5: c8:40:a3:7e:a6:d9:3f:bc:59:ec:dc:87:1f:7e:4b:ad:4f:39: e3:76:d2:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnBaWvPfbU2mP/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NjNjOTllYzUtMWE3My00NTNhLTkwODUtMWU5MDkyODVlMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+iiIF51W94GLlG7wHJQRKp0pLSPnpSm8CqC G+VMwbK6UveixYIouR3lL+fH+oA7upSVyRec06l91Ut9D+PODHtqpFB6aItIaJSW 1Bz4NbWOAeD7MjLKZ+BYxT9lcZ4gM5hUN8EgisDtyJDiqpwKKsrZ9Ayl3qMzpojP x1EjcIUz5wb+buuoW2I74z7EAcL10DHEMCkL0BjUZsLrIEt2FMCeMk89YmaeSMEa YgrvKxWKPa79EdpdLQqdi8aFAdlnjCP67Uki3C6x0qq/oPM+U1nD9JKMZjYQQpDH Ggr0v1e0L0YgaRC7mbIYnezQTAFc3G9s1YjR5q1vIYNyxvfelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqmo0AjCFcSmsYx0fkCXmDGdIayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2YzOGNiZWMtZWZiMy0z ZmIzLTg3YjctMDBjMTEyMmEzN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYxi6XqwpfNuJ+Aj3/xcn2xtBMgYJ5AwSiJB5Yj5B4RdROseRL3On4E KxkP/7pmoQZSShu7eOVUdM9rWXSU89AHGtMyfcFuflX8Gqww8BUvtPpYjxfw1Mgd sHqqGpBaOCHYdecQWjvh11JcIOikVlEP1rBeEVIji77o3k40cQT2Ot1de05aakWg X4PUoSi0CaxudjCs9RXhAATrYEPjZpgI76SwFXKx6Qv1SxqaVBv5LD9IGgG/by7w vKJuchmw4LwL+IZKb2Ju9Sd7qG2QZ7Wtg+VMZ300yU/8TLGwuDEkxOvy7wARqXBR 9chAo36m2T+8Wezchx9+S61POeN20mA= -----END CERTIFICATE-----Generated at Wed Apr 8 22:58:38 2026 by rpki-client