$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa File: 81af0be6-f23c-30fe-8f01-107b7f0d4738.roa (raw, json) Hash identifier: 87tetSjBBxTBwMrW4Q4y0n7CAL/pK2Y+klIbB5lUO/A= Subject key identifier: CD:20:E8:D9:0B:ED:37:D2:70:FA:5A:93:90:D4:92:47:80:FE:F2:C8 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A70135DA423A48D331200 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:13:5d:a4:23:a4:8d:33:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=3aa8b235-9d47-4cc5-9c3c-c1fbc93065aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:d7:4e:83:75:02:68:65:82:bc:c6:10:cd: f9:f0:d8:00:50:fd:f5:08:82:82:d1:83:f9:6b:8e: 5e:9f:15:83:80:95:88:90:36:44:af:3a:63:ca:bd: 32:fc:9a:ba:bd:ff:b1:12:f3:cc:de:20:34:2b:eb: 4f:f4:79:28:4e:81:e4:d0:b1:e4:48:29:6f:09:11: 70:cd:4f:0c:e1:36:fd:e4:d2:bc:fb:3d:48:92:f8: 51:4c:55:ad:04:9e:b7:06:76:b5:58:da:78:52:f1: 9a:a3:35:d0:18:65:64:72:8f:8b:01:a1:ee:6a:1d: e4:09:54:44:34:0b:ec:a1:5c:ab:30:9c:de:91:59: 89:a8:37:51:23:0b:47:24:ac:2b:f6:b5:9f:1f:71: 7d:f3:df:73:d0:cb:b7:74:78:93:70:2b:ba:61:8d: 50:86:f8:dc:58:b3:75:c4:aa:c5:bc:ba:c0:9a:59: 73:6a:0e:19:07:50:be:98:fc:54:6d:a5:a9:85:38: fd:d6:ac:35:8d:22:38:66:4d:3a:9b:0d:66:2a:01: 17:e6:bd:ac:71:46:51:cb:91:27:4d:1f:77:5a:dc: bb:86:f6:75:c6:94:6f:91:3e:3e:ce:68:ca:02:7a: 72:2d:b5:89:3f:4a:4b:94:76:53:51:8b:46:e3:c3: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:E8:D9:0B:ED:37:D2:70:FA:5A:93:90:D4:92:47:80:FE:F2:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:47:35:5a:a9:07:f3:b8:87:28:48:46:64:64:80:c4:ae:59: 50:4b:09:92:7a:41:a6:d4:72:17:be:78:e6:d0:df:91:44:0e: 09:59:09:45:03:75:d1:38:9f:0d:26:e2:6f:7d:c0:03:54:2c: c9:ce:4d:0f:7d:8b:eb:00:5e:be:ce:ee:00:92:a0:dc:88:06: 7c:26:73:23:58:c3:77:df:7f:84:6e:df:c2:03:a7:76:29:c1: 43:fb:fe:48:57:ab:7d:77:8b:3e:78:d2:71:75:28:9a:5b:22: ae:18:50:5f:56:4b:41:83:de:a9:5f:3e:96:a2:0c:83:55:8d: c7:81:6e:f2:fe:04:be:b4:f7:86:46:a4:37:d7:c7:4b:bd:3e: 1c:ce:86:98:a6:40:8d:1b:70:b7:82:2f:5a:4f:29:aa:04:c4: 37:09:a9:19:2d:d5:23:72:39:33:fa:bf:0d:49:bc:66:1e:03: 80:52:a8:ce:53:19:f2:25:d7:58:ec:eb:a9:44:6c:6f:ac:f3: 25:61:5c:67:14:b2:9a:b4:21:b3:49:31:02:1f:b7:d5:89:f1: 8c:d0:91:d4:fe:d2:a2:e1:e8:f7:e6:a3:22:c4:3c:f3:06:18: a1:e0:29:87:3b:43:1c:ab:27:b4:13:25:81:fb:51:59:ce:3c: 7a:ae:34:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnATXaQjpI0zEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk M2FhOGIyMzUtOWQ0Ny00Y2M1LTljM2MtYzFmYmM5MzA2NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRXXToN1AmhlgrzGEM358NgAUP31CIKC0YP5 a45enxWDgJWIkDZErzpjyr0y/Jq6vf+xEvPM3iA0K+tP9HkoToHk0LHkSClvCRFw zU8M4Tb95NK8+z1IkvhRTFWtBJ63Bna1WNp4UvGaozXQGGVkco+LAaHuah3kCVRE NAvsoVyrMJzekVmJqDdRIwtHJKwr9rWfH3F9899z0Mu3dHiTcCu6YY1QhvjcWLN1 xKrFvLrAmllzag4ZB1C+mPxUbaWphTj91qw1jSI4Zk06mw1mKgEX5r2scUZRy5En TR93Wty7hvZ1xpRvkT4+zmjKAnpyLbWJP0pLlHZTUYtG48MQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0g6NkL7TfScPpak5DUkkeA/vLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvODFhZjBiZTYtZjIzYy0z MGZlLThmMDEtMTA3YjdmMGQ0NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzv9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVHNVqpB/O4hyhIRmRkgMSuWVBLCZJ6QabUche+eObQ35FEDglZCUUD ddE4nw0m4m99wANULMnOTQ99i+sAXr7O7gCSoNyIBnwmcyNYw3fff4Ru38IDp3Yp wUP7/khXq313iz540nF1KJpbIq4YUF9WS0GD3qlfPpaiDINVjceBbvL+BL6094ZG pDfXx0u9PhzOhpimQI0bcLeCL1pPKaoExDcJqRkt1SNyOTP6vw1JvGYeA4BSqM5T GfIl11js66lEbG+s8yVhXGcUspq0IbNJMQIft9WJ8YzQkdT+0qLh6PfmoyLEPPMG GKHgKYc7QxyrJ7QTJYH7UVnOPHquNMs= -----END CERTIFICATE-----Generated at Wed Apr 8 23:01:04 2026 by rpki-client