$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/95046647-8acc-37d8-ac31-873a1a69ae01.roa File: 95046647-8acc-37d8-ac31-873a1a69ae01.roa (raw, json) Hash identifier: yOuVBuLe50Kvy54HUvzPT27Dig3XwDo7wW0miu7Uvng= Subject key identifier: B5:60:6A:AB:E1:87:8F:C7:BE:D4:A4:F3:F5:A3:EF:18:E5:48:09:D0 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A716ED36C4F4B44D60848 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/95046647-8acc-37d8-ac31-873a1a69ae01.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:71:6e:d3:6c:4f:4b:44:d6:08:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=9e120e03-a955-4bc1-919d-bef91aac2632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:fd:b1:d3:90:4b:4f:5c:d9:43:78:dc:a0: c6:a9:89:b3:11:79:d7:b3:50:5f:bb:3a:93:eb:eb: 66:0e:2b:c9:81:60:fa:cf:0a:5e:d3:31:b1:0b:63: ff:16:49:3d:7d:8f:19:c0:87:60:40:fc:21:50:cb: a5:c9:09:89:36:d5:e7:9e:39:1c:76:f7:02:07:7f: e1:63:dc:31:86:80:72:25:b2:f2:c8:41:ed:fd:01: b4:09:cd:b8:cb:0d:07:54:ec:3a:d1:9b:96:4c:40: 33:8c:cd:bd:90:c2:5d:b4:39:c2:ba:cb:d4:11:ba: ca:dd:67:fe:13:4b:eb:55:77:eb:43:6d:f2:82:0c: 48:5a:ca:26:b4:49:20:15:21:9d:f9:49:88:bd:4c: 0d:a7:41:df:88:95:76:64:e4:a9:1c:7d:e3:2e:2b: 60:e7:78:7f:55:84:96:7a:a2:7f:50:5e:f3:fe:bb: 70:e0:91:56:4d:4b:4c:f0:66:05:34:4d:fe:22:84: 6e:ca:51:00:aa:e9:53:29:09:2c:c2:e3:ce:78:fe: 24:26:2d:a8:48:3b:1c:ff:79:cf:79:d6:91:7b:4f: fe:fc:f0:9f:b7:0f:4f:04:d1:e3:52:7b:a3:be:44: 20:ca:39:68:ce:89:d4:0b:ce:f4:59:17:82:98:b0: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:60:6A:AB:E1:87:8F:C7:BE:D4:A4:F3:F5:A3:EF:18:E5:48:09:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/95046647-8acc-37d8-ac31-873a1a69ae01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:17:84:e6:28:d4:3b:1c:38:66:ea:6f:a4:49:60:d6:f3:17: 76:9c:e1:7a:9a:3a:5e:2b:09:28:ff:ea:74:c1:b0:c6:fa:ac: b9:6c:01:06:bd:f1:67:9c:e7:2b:98:be:4c:e5:cb:d7:3b:39: a0:49:c2:6a:9b:f8:d2:35:27:01:97:1a:14:16:5e:62:3d:48: 84:8b:5f:fb:f9:36:2c:35:3d:ef:45:70:19:f8:c1:29:ca:58: d2:7c:5b:71:f1:63:30:7a:69:04:8e:5e:aa:98:a9:ec:da:a4: fd:a2:7b:37:22:b7:50:ea:4f:6c:c2:11:fb:86:35:8d:5c:ce: d9:28:f5:ee:3c:d2:d0:fa:9c:e8:6a:ac:78:57:79:8d:f3:48: dd:0a:6e:32:b2:be:01:1e:d7:a2:2a:c2:40:71:72:b1:d0:fe: 2d:4d:47:0e:12:60:3d:30:25:e9:16:23:20:79:74:80:7a:a5: 0d:67:43:e8:c7:af:96:e3:86:7e:38:dc:25:05:1b:f3:fe:47: 54:f9:4f:07:8f:59:23:4a:84:04:93:18:c5:be:4c:d9:09:6c: 90:fa:fc:ad:ba:8c:13:bb:0c:c1:22:b7:39:44:6e:45:3c:ef: d6:82:ce:73:80:f2:0f:26:8b:6e:ec:be:34:bd:2c:8a:5a:dc: b1:f4:fe:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnFu02xPS0TWCEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OWUxMjBlMDMtYTk1NS00YmMxLTkxOWQtYmVmOTFhYWMyNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvT9sdOQS09c2UN43KDGqYmzEXnXs1BfuzqT 6+tmDivJgWD6zwpe0zGxC2P/Fkk9fY8ZwIdgQPwhUMulyQmJNtXnnjkcdvcCB3/h Y9wxhoByJbLyyEHt/QG0Cc24yw0HVOw60ZuWTEAzjM29kMJdtDnCusvUEbrK3Wf+ E0vrVXfrQ23yggxIWsomtEkgFSGd+UmIvUwNp0HfiJV2ZOSpHH3jLitg53h/VYSW eqJ/UF7z/rtw4JFWTUtM8GYFNE3+IoRuylEAqulTKQkswuPOeP4kJi2oSDsc/3nP edaRe0/+/PCftw9PBNHjUnujvkQgyjlozonUC870WReCmLDDPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVgaqvhh4/HvtSk8/Wj7xjlSAnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOTUwNDY2NDctOGFjYy0z N2Q4LWFjMzEtODczYTFhNjlhZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcXhOYo1DscOGbqb6RJYNbzF3ac4XqaOl4rCSj/6nTBsMb6rLlsAQa9 8Wec5yuYvkzly9c7OaBJwmqb+NI1JwGXGhQWXmI9SISLX/v5Niw1Pe9FcBn4wSnK WNJ8W3HxYzB6aQSOXqqYqezapP2iezcit1DqT2zCEfuGNY1cztko9e480tD6nOhq rHhXeY3zSN0KbjKyvgEe16IqwkBxcrHQ/i1NRw4SYD0wJekWIyB5dIB6pQ1nQ+jH r5bjhn443CUFG/P+R1T5TwePWSNKhASTGMW+TNkJbJD6/K26jBO7DMEitzlEbkU8 79aCznOA8g8mi27svjS9LIpa3LH0/oE= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:22 2026 by rpki-client