$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa File: 4424548c-9e14-33ec-919d-7d3e1baa168f.roa (raw, json) Hash identifier: 04IQDbJPFEfyiDAVAWXoJtti25njUbCAr6AJ7Q5l+m8= Subject key identifier: 4A:F5:98:C5:F5:B9:41:06:0A:42:4A:C3:85:40:C5:63:FA:41:AA:5C Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A714B0E514613B3812740 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:71:4b:0e:51:46:13:b3:81:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=e7e75921-cef2-4f30-8067-f4c91837be48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c0:7e:4e:3c:95:b3:e2:57:b2:48:49:a7:6e: d2:dd:eb:0f:49:e9:15:7c:d1:7b:4a:b8:c2:4d:69: 90:ed:d5:a2:08:b2:da:49:25:b8:c4:9c:b9:c3:61: d0:99:3a:e2:61:17:21:8d:19:df:53:db:eb:38:ad: 6e:55:4d:9a:a3:c3:f0:b5:ef:c0:5a:6d:2e:f3:ca: 46:88:8c:8b:2a:44:d2:90:e6:80:43:7b:b9:26:3c: 7d:94:91:90:46:f6:36:9e:1e:02:7c:36:28:78:81: a0:6a:80:9a:5a:91:15:78:3f:bc:ae:37:b9:91:b5: 11:dc:f0:25:b1:cf:a9:b8:26:d0:3c:f2:dc:87:42: b3:c2:75:8f:ff:23:fa:79:64:5a:ac:dd:60:15:51: 51:29:74:7c:3d:bb:0f:49:d8:fc:8d:2d:16:d5:48: 60:b5:2b:3b:80:3d:bc:a3:43:ef:a6:0f:57:b7:ac: 19:f6:08:5c:a7:7c:5e:69:01:41:36:76:98:8e:08: 05:a1:25:d7:f3:38:8b:22:61:32:5b:84:2d:ae:8d: e7:eb:09:50:52:64:25:4f:2a:48:4f:40:12:b7:0a: 00:8a:c3:b5:69:be:8e:ab:9c:7a:97:7c:c0:b5:fe: aa:73:bd:59:cd:10:7b:24:e9:fe:a6:d4:5e:77:a3: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:98:C5:F5:B9:41:06:0A:42:4A:C3:85:40:C5:63:FA:41:AA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5f:7b:8b:25:a2:6c:66:90:14:09:7f:4b:ce:2f:d8:46:6e: 76:78:9e:f6:4e:ed:fd:3e:e9:3a:ae:65:93:2d:f4:18:bd:4f: ac:b8:f6:9d:a2:f4:03:c3:89:60:1b:1b:79:9c:a3:ca:b6:ce: 2d:8d:be:74:8d:1c:18:2a:44:d6:b8:1c:46:a7:aa:d5:0d:f5: d8:bd:b0:ce:cb:1a:72:ec:da:bc:e3:f0:d8:a9:df:2e:e4:a1: a9:75:ca:23:f7:9a:95:d9:ec:5f:bb:00:77:8a:54:d0:99:df: ff:31:5d:19:8b:28:6f:87:0e:10:fe:c5:20:a9:33:1f:d9:39: ac:03:45:18:ee:01:8d:ed:fe:b4:14:80:83:66:bb:31:7e:52: d5:ed:ce:9e:8e:e2:6c:3d:4c:5c:c8:0a:99:6f:30:88:bb:71: 8d:9c:8f:ea:8a:2d:31:9a:b4:7b:5a:27:b6:01:f1:3b:8d:0c: 45:2a:82:e5:ea:18:1e:ef:55:61:00:34:8d:6e:db:a5:23:d4: d0:cf:15:0c:36:19:c6:6f:23:34:ec:1c:3a:b2:a9:39:a6:4e: 45:e2:3c:3f:cd:16:47:b0:e8:a0:8f:e7:ce:12:31:3d:3f:5b: c8:96:cf:e6:ec:62:5c:5c:a2:17:11:1e:bb:19:e3:17:9a:1d: 97:88:9c:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnFLDlFGE7OBJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZTdlNzU5MjEtY2VmMi00ZjMwLTgwNjctZjRjOTE4MzdiZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MB+TjyVs+JXskhJp27S3esPSekVfNF7SrjC TWmQ7dWiCLLaSSW4xJy5w2HQmTriYRchjRnfU9vrOK1uVU2ao8Pwte/AWm0u88pG iIyLKkTSkOaAQ3u5Jjx9lJGQRvY2nh4CfDYoeIGgaoCaWpEVeD+8rje5kbUR3PAl sc+puCbQPPLch0KzwnWP/yP6eWRarN1gFVFRKXR8PbsPSdj8jS0W1UhgtSs7gD28 o0Pvpg9Xt6wZ9ghcp3xeaQFBNnaYjggFoSXX8ziLImEyW4Qtro3n6wlQUmQlTypI T0AStwoAisO1ab6Oq5x6l3zAtf6qc71ZzRB7JOn+ptRed6PtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr1mMX1uUEGCkJKw4VAxWP6QapcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDQyNDU0OGMtOWUxNC0z M2VjLTkxOWQtN2QzZTFiYWExNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlfe4slomxmkBQJf0vOL9hGbnZ4nvZO7f0+6TquZZMt9Bi9T6y49p2i 9APDiWAbG3mco8q2zi2NvnSNHBgqRNa4HEanqtUN9di9sM7LGnLs2rzj8Nip3y7k oal1yiP3mpXZ7F+7AHeKVNCZ3/8xXRmLKG+HDhD+xSCpMx/ZOawDRRjuAY3t/rQU gINmuzF+UtXtzp6O4mw9TFzICplvMIi7cY2cj+qKLTGatHtaJ7YB8TuNDEUqguXq GB7vVWEANI1u26Uj1NDPFQw2GcZvIzTsHDqyqTmmTkXiPD/NFkew6KCP584SMT0/ W8iWz+bsYlxcohcRHrsZ4xeaHZeInJs= -----END CERTIFICATE-----Generated at Wed Apr 8 22:59:43 2026 by rpki-client