$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa File: 9434e6dc-d860-3378-b9ed-0912c88bab1b.roa (raw, json) Hash identifier: /pe0EDdjvmglrRRkk6175eBNSp2dPV1kZ36wvl6WrP0= Subject key identifier: D4:0F:E1:C5:68:8F:D9:60:53:04:FF:6D:58:3A:B2:A3:BB:7A:6E:03 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A708A13AA0F0FF7190BC0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:8a:13:aa:0f:0f:f7:19:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7c7ef2bb-809b-4d2e-849b-279ada0cd0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:67:05:62:5b:d9:e4:6c:bb:61:26:8b:54:c2: 93:33:7a:9c:ff:5a:71:e2:9f:8b:ee:7a:f7:50:af: 76:f6:f8:b3:a5:4b:64:41:57:05:aa:1c:b5:3f:d6: e0:81:d8:5e:80:26:04:c7:5e:2c:8d:e8:b1:de:36: 70:3d:ba:8f:6b:5f:ba:4e:ff:85:b3:8b:24:2e:78: 1f:02:cc:79:e9:4c:d8:e2:d9:f8:de:2c:69:e9:75: 50:51:41:d0:ae:8a:e0:0a:c7:2b:55:c9:9f:8d:1a: 4a:6d:3a:3f:89:9a:21:76:d7:c5:01:d2:73:b0:ea: 39:1f:4d:e4:16:3e:39:bb:6c:9b:8f:ff:e0:9e:76: 24:cd:1e:aa:df:d0:93:03:a8:08:f6:1e:00:25:1b: e5:ff:1a:ab:6d:b1:fd:83:1b:9f:01:27:9f:7b:36: 2d:c1:c9:4e:2a:76:5e:27:8b:40:d1:96:ce:0b:bf: 2f:f5:cf:dd:d2:18:68:82:5c:fd:1c:2a:24:4a:f7: 8a:35:cc:9f:35:a0:d4:50:5c:7a:c4:8a:0d:7c:7e: 15:0d:1e:68:e2:83:78:f1:97:89:b0:d0:b7:b8:60: 84:87:7b:60:06:08:cd:66:e9:45:ad:53:7d:d9:0b: 20:b8:fe:47:9b:c9:07:fc:20:ae:de:6e:e5:7d:e9: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:E1:C5:68:8F:D9:60:53:04:FF:6D:58:3A:B2:A3:BB:7A:6E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a2:75:6d:62:1c:a5:72:44:71:87:9e:94:4a:02:9b:2f:2a: 30:8a:09:53:5f:40:09:4c:5b:56:b5:ae:25:69:55:70:27:b5: ac:b9:43:87:6c:c9:2d:17:55:68:85:c8:4e:8e:3d:46:b1:9c: b2:2a:65:ae:c8:44:29:07:71:82:da:34:0f:95:05:70:3e:b8: e2:62:81:28:19:41:f3:d4:06:de:7b:b7:5c:81:e7:76:2e:33: 8b:07:b3:22:2e:2b:e5:42:28:28:36:d5:c7:66:8b:66:b5:9e: b3:ae:63:5b:4f:bf:25:fb:13:c8:59:ea:81:b0:19:e0:82:05: 56:1b:90:86:0c:e7:7e:71:b8:e7:a8:df:90:b6:7d:2b:cb:d1: ed:c6:7e:e5:71:c8:cf:bb:6a:5b:56:8e:84:23:94:ec:63:6c: b6:3a:94:33:de:e5:75:7b:27:fb:d8:06:94:74:08:25:53:49: f2:5c:9d:20:a4:59:a6:d8:0f:ce:a3:a5:e1:1a:27:e7:5f:73: a6:01:94:e2:80:f3:a6:0e:ce:2b:2a:2d:95:1e:3a:7b:e3:cf: 4b:64:85:9b:a0:2e:a9:58:dd:8d:67:e8:48:d1:e8:f1:be:a4: 91:6b:eb:6c:57:e2:c2:76:6e:ec:fb:92:ed:f4:7f:4b:c5:93: f5:f9:f5:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnCKE6oPD/cZC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk N2M3ZWYyYmItODA5Yi00ZDJlLTg0OWItMjc5YWRhMGNkMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mcFYlvZ5Gy7YSaLVMKTM3qc/1px4p+L7nr3 UK929vizpUtkQVcFqhy1P9bggdhegCYEx14sjeix3jZwPbqPa1+6Tv+Fs4skLngf Asx56UzY4tn43ixp6XVQUUHQrorgCscrVcmfjRpKbTo/iZohdtfFAdJzsOo5H03k Fj45u2ybj//gnnYkzR6q39CTA6gI9h4AJRvl/xqrbbH9gxufASefezYtwclOKnZe J4tA0ZbOC78v9c/d0hhoglz9HCokSveKNcyfNaDUUFx6xIoNfH4VDR5o4oN48ZeJ sNC3uGCEh3tgBgjNZulFrVN92QsguP5Hm8kH/CCu3m7lfenW/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQP4cVoj9lgUwT/bVg6sqO7em4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOTQzNGU2ZGMtZDg2MC0z Mzc4LWI5ZWQtMDkxMmM4OGJhYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaidW1iHKVyRHGHnpRKApsvKjCKCVNfQAlMW1a1riVpVXAntay5Q4ds yS0XVWiFyE6OPUaxnLIqZa7IRCkHcYLaNA+VBXA+uOJigSgZQfPUBt57t1yB53Yu M4sHsyIuK+VCKCg21cdmi2a1nrOuY1tPvyX7E8hZ6oGwGeCCBVYbkIYM535xuOeo 35C2fSvL0e3GfuVxyM+7altWjoQjlOxjbLY6lDPe5XV7J/vYBpR0CCVTSfJcnSCk WabYD86jpeEaJ+dfc6YBlOKA86YOzisqLZUeOnvjz0tkhZugLqlY3Y1n6EjR6PG+ pJFr62xX4sJ2buz7ku30f0vFk/X59S0= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:23 2026 by rpki-client