$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa File: 67711168-57b6-3fb5-9d03-dd8b8f2377da.roa (raw, json) Hash identifier: 2i4Zjs8XIaKG0bA075LmgQm4o3D9fCDNYiNpKg5mmuA= Subject key identifier: 75:94:AC:62:65:64:93:9B:91:7D:EB:18:8A:AA:AE:32:6D:EC:D1:E8 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A70EA09E2FC2217F35A40 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:ea:09:e2:fc:22:17:f3:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=be67e7f6-1552-4edd-8d6d-fe8d2e4ec47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c4:4f:87:75:94:1c:2d:ea:1c:ec:40:2f:5b: f1:ce:cb:48:19:2a:b7:45:16:0e:23:b4:c3:e8:8c: f1:b3:e5:f9:ec:79:7c:0e:da:d0:29:be:9c:b9:92: 3b:79:e1:05:af:a8:2b:d3:0a:17:79:73:ec:84:41: de:58:4d:94:31:07:26:3f:76:89:e5:13:ba:77:32: c9:25:eb:76:e6:e0:60:bc:1b:86:90:9d:be:c7:2d: ca:d4:70:5d:be:0c:d9:b6:d0:62:0d:52:24:45:69: b4:b3:c0:36:56:95:c5:b4:b3:d0:ab:39:62:64:3f: 6a:f3:0d:6d:ad:6e:97:bb:05:e5:cf:fb:8a:5a:e4: 01:ef:2f:b1:27:98:2b:40:d8:c1:7f:76:8b:e3:a6: 26:bd:39:f7:74:b7:b3:2e:19:23:5d:36:c8:97:e5: 05:d7:2c:59:67:d2:3e:53:6a:2d:93:2c:72:77:76: ca:8c:7a:25:4a:1b:7d:2f:4a:d8:f7:39:6f:ff:8f: 29:b9:ba:b1:80:32:b2:68:fc:de:0c:50:8b:27:05: 15:a6:71:6a:73:c8:cb:54:8e:01:f8:a1:e5:19:1d: a1:67:69:a8:c1:ca:cb:c1:fb:1a:e6:40:21:e0:a5: 3e:2c:96:49:f2:5e:de:18:aa:9d:de:55:2c:21:ef: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:94:AC:62:65:64:93:9B:91:7D:EB:18:8A:AA:AE:32:6D:EC:D1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5c:5a:87:b4:b4:18:e7:ed:19:b6:20:83:a9:c2:cb:1c:0b: 0f:b8:ac:ff:2a:06:9c:23:81:ab:79:bb:5b:2d:1a:f0:1e:8b: 21:69:85:1e:bc:7b:36:e9:82:46:d2:2d:25:48:a7:7c:a4:51: 88:fd:d5:b5:f2:c5:eb:b4:81:cc:0b:bd:88:4b:84:2d:36:58: aa:e3:59:71:0d:19:84:27:ac:17:25:a7:64:ff:84:32:b7:97: 50:fd:dc:03:ed:4c:cb:dd:d1:d3:32:73:5c:7d:78:3d:e2:59: 44:31:32:32:1c:79:45:94:24:ec:5a:11:8c:df:a9:91:b7:41: d8:69:21:cc:51:8a:6e:de:da:ec:a8:f5:52:cf:26:43:cd:39: 7d:65:c8:37:1e:8f:ae:b5:5e:c9:10:93:a5:75:1f:6c:bd:ae: d0:99:64:3d:b0:0c:a6:66:ed:24:c7:a1:a8:1a:78:fb:91:2a: bb:35:d0:1d:ff:ca:fd:27:29:2e:fd:00:45:f8:65:41:a4:c4: d2:44:b0:72:f3:e1:bd:79:78:4e:ac:76:d3:8b:60:cc:89:be: 5e:bd:01:a1:d3:a2:94:78:17:af:50:5a:6e:b2:d5:57:c3:2b: 3a:54:90:46:39:d5:64:07:4c:69:2d:b2:a4:1b:f5:8a:8f:4f: 92:ba:83:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnDqCeL8IhfzWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmU2N2U3ZjYtMTU1Mi00ZWRkLThkNmQtZmU4ZDJlNGVjNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMRPh3WUHC3qHOxAL1vxzstIGSq3RRYOI7TD 6Izxs+X57Hl8DtrQKb6cuZI7eeEFr6gr0woXeXPshEHeWE2UMQcmP3aJ5RO6dzLJ Jet25uBgvBuGkJ2+xy3K1HBdvgzZttBiDVIkRWm0s8A2VpXFtLPQqzliZD9q8w1t rW6XuwXlz/uKWuQB7y+xJ5grQNjBf3aL46YmvTn3dLezLhkjXTbIl+UF1yxZZ9I+ U2otkyxyd3bKjHolSht9L0rY9zlv/48pubqxgDKyaPzeDFCLJwUVpnFqc8jLVI4B +KHlGR2hZ2mowcrLwfsa5kAh4KU+LJZJ8l7eGKqd3lUsIe8DFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWUrGJlZJObkX3rGIqqrjJt7NHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNjc3MTExNjgtNTdiNi0z ZmI1LTlkMDMtZGQ4YjhmMjM3N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxcWoe0tBjn7Rm2IIOpwsscCw+4rP8qBpwjgat5u1stGvAeiyFphR68 ezbpgkbSLSVIp3ykUYj91bXyxeu0gcwLvYhLhC02WKrjWXENGYQnrBclp2T/hDK3 l1D93APtTMvd0dMyc1x9eD3iWUQxMjIceUWUJOxaEYzfqZG3QdhpIcxRim7e2uyo 9VLPJkPNOX1lyDcej661XskQk6V1H2y9rtCZZD2wDKZm7STHoagaePuRKrs10B3/ yv0nKS79AEX4ZUGkxNJEsHLz4b15eE6sdtOLYMyJvl69AaHTopR4F69QWm6y1VfD KzpUkEY51WQHTGktsqQb9YqPT5K6gzA= -----END CERTIFICATE-----Generated at Wed Apr 8 23:01:10 2026 by rpki-client