$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa File: a22ff12a-0371-3319-88d2-f5e344b13f6c.roa (raw, json) Hash identifier: Qc2cjbB33QmS4Gu2+BDV7hGY7sfIo7z8Zoamxr8PYVs= Subject key identifier: 8F:DE:BB:4D:8A:0D:2D:0B:D6:D8:A5:B9:69:6F:59:1B:8C:81:99:F9 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A67FC8FB684B82AFFD680 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:67:fc:8f:b6:84:b8:2a:ff:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=b6267151-0309-4365-8605-79c776c2a896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:14:a0:34:b3:79:ce:57:c0:e3:f5:6c:b5: a0:1d:5b:cf:99:eb:c4:16:8e:67:9f:31:0a:78:f4: 55:c3:eb:2b:84:41:73:3b:b4:98:1a:b3:fc:78:83: d6:a5:dd:6d:47:7d:79:34:87:41:d0:6b:64:95:30: 13:a5:89:24:aa:03:30:f3:33:58:0c:63:96:c2:3e: c1:dc:93:aa:aa:d8:d7:21:a6:4a:cd:13:66:15:84: 6f:e9:6c:92:12:f2:13:de:9c:82:35:e3:cb:a1:1a: 17:d2:6f:ac:86:b0:78:06:4d:3f:bd:f9:fc:01:31: 16:7d:42:e6:f4:8a:53:f7:62:57:60:19:14:6f:42: a6:97:a6:e6:3b:b1:c8:64:2c:f4:37:cb:ed:ec:f9: 13:33:ab:52:bd:b6:c6:79:8e:19:5f:9a:02:f3:9a: 90:40:ec:b6:b5:2b:60:77:81:72:fb:18:38:33:d4: 23:6e:33:cf:28:18:5d:31:fd:99:37:ad:8f:fc:9b: 26:4d:0b:cf:1c:c2:8c:64:50:7b:90:27:78:dd:c6: 90:99:f1:ab:98:10:04:c3:e5:4d:55:7f:14:b2:43: 27:28:da:3c:c9:92:c6:09:a8:22:41:f8:40:89:3d: 3f:55:75:5c:cd:b5:6d:ca:3b:fe:4a:9f:c1:06:a3: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DE:BB:4D:8A:0D:2D:0B:D6:D8:A5:B9:69:6F:59:1B:8C:81:99:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:50:b0:50:d7:1d:e9:0a:9a:d0:5b:c1:5c:d9:8c:ca:a0:5e: cb:46:3a:8b:eb:9d:c9:66:70:09:e6:be:f1:73:a8:18:c7:be: ba:ac:52:c5:22:0d:5c:71:69:95:b5:e3:48:99:4c:61:84:bd: 78:23:57:e2:8d:03:82:39:6a:49:fd:58:3a:28:3b:5b:84:ef: d8:9a:2c:e2:b4:9a:6c:1c:f0:b7:ff:66:d2:72:52:98:02:86: 9f:ec:00:60:1c:81:ec:e0:da:c2:c4:7f:0c:3a:17:78:04:4f: e6:25:a1:71:c0:95:df:75:6c:1b:8f:78:1b:95:9e:f3:23:1f: d6:c9:1b:a9:66:5c:78:b4:b3:21:b9:f7:7b:b6:1c:ef:2d:da: 47:72:ce:5a:11:01:c0:50:56:17:65:07:26:a9:f3:9e:45:c6: 7e:20:04:1d:57:25:27:86:18:8b:44:09:b7:47:8e:c5:1a:da: 8d:3a:64:6a:90:82:c2:bc:61:85:6f:94:9a:06:7d:ff:e7:ac: 0a:0c:ae:2e:2d:a7:74:74:2c:80:01:25:aa:f5:67:f6:3d:35: d0:7f:f2:7a:23:ad:ac:6e:6d:c3:09:ed:5e:e5:1d:55:02:e6: 4f:b4:d5:0e:86:ed:e6:f5:93:27:24:50:f8:7b:1e:92:e8:08: a6:c7:83:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmf8j7aEuCr/1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YjYyNjcxNTEtMDMwOS00MzY1LTg2MDUtNzljNzc2YzJhODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdYUoDSzec5XwOP1bLWgHVvPmevEFo5nnzEK ePRVw+srhEFzO7SYGrP8eIPWpd1tR315NIdB0GtklTATpYkkqgMw8zNYDGOWwj7B 3JOqqtjXIaZKzRNmFYRv6WySEvIT3pyCNePLoRoX0m+shrB4Bk0/vfn8ATEWfULm 9IpT92JXYBkUb0Kml6bmO7HIZCz0N8vt7PkTM6tSvbbGeY4ZX5oC85qQQOy2tStg d4Fy+xg4M9QjbjPPKBhdMf2ZN62P/JsmTQvPHMKMZFB7kCd43caQmfGrmBAEw+VN VX8UskMnKNo8yZLGCagiQfhAiT0/VXVczbVtyjv+Sp/BBqP1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/eu02KDS0L1tiluWlvWRuMgZn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTIyZmYxMmEtMDM3MS0z MzE5LTg4ZDItZjVlMzQ0YjEzZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJQsFDXHekKmtBbwVzZjMqgXstGOovrnclmcAnmvvFzqBjHvrqsUsUi DVxxaZW140iZTGGEvXgjV+KNA4I5akn9WDooO1uE79iaLOK0mmwc8Lf/ZtJyUpgC hp/sAGAcgezg2sLEfww6F3gET+YloXHAld91bBuPeBuVnvMjH9bJG6lmXHi0syG5 93u2HO8t2kdyzloRAcBQVhdlByap855Fxn4gBB1XJSeGGItECbdHjsUa2o06ZGqQ gsK8YYVvlJoGff/nrAoMri4tp3R0LIABJar1Z/Y9NdB/8nojraxubcMJ7V7lHVUC 5k+01Q6G7eb1kyckUPh7HpLoCKbHg1Q= -----END CERTIFICATE-----Generated at Wed Apr 8 23:01:04 2026 by rpki-client