$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa File: aae70563-797d-34b1-9db2-9978daa04520.roa (raw, json) Hash identifier: rZRnaV2wKuVc1iYXbftGnQK+DbD9XIAeLsx0sJuZ7GQ= Subject key identifier: 5C:4F:DD:47:2D:95:16:06:7B:6E:50:C8:9F:6F:08:62:D9:6C:D7:1C Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A7007F43803237A8045F8 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:07:f4:38:03:23:7a:80:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=d1779ed3-6971-4a44-b653-67c64d62c035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:46:92:6a:82:e7:3e:bf:1b:26:db:66:ea: 7c:2b:9d:82:19:b3:a2:06:89:65:44:bf:2d:bb:15: f4:b3:6b:91:e5:23:79:94:34:5c:6c:a5:4a:fe:3a: 96:6d:fb:3a:44:07:1b:ee:0d:26:89:ac:d5:94:b6: 53:03:60:e0:a4:ff:96:ea:12:e8:d3:f3:12:53:86: c8:e8:8c:6c:d1:49:f6:cc:23:1e:5a:9d:1f:22:bd: 74:72:8b:cb:12:cd:1f:2d:33:55:13:0a:19:a4:9f: 16:67:78:eb:bf:2a:87:4e:f0:64:0a:a9:33:07:47: 08:8c:94:92:8f:92:8a:5d:c6:65:11:d9:cb:40:00: fd:c5:ab:27:cb:c7:b9:40:f7:79:08:62:7c:fb:42: 78:30:88:98:eb:bc:48:2e:63:a0:dd:96:2b:5a:9f: 5d:cc:9f:01:d5:35:56:43:82:1b:fa:77:56:5c:77: bb:c3:b8:39:d0:57:dc:23:ec:18:85:03:7b:ef:ec: e2:a9:a4:1e:90:06:ed:a3:3a:00:c0:dc:22:b8:43: 34:c5:c5:75:b2:38:06:f1:f0:56:25:34:50:f8:6b: 59:7f:05:a5:d0:14:3b:66:b1:05:f5:43:0d:c1:bb: 14:1b:18:f3:9f:46:24:32:6b:c2:3c:53:0f:47:88: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4F:DD:47:2D:95:16:06:7B:6E:50:C8:9F:6F:08:62:D9:6C:D7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:18:46:af:88:0d:98:bd:3d:33:82:73:ab:60:30:33:da:2a: 7e:df:ed:50:e1:5b:66:1a:29:6d:19:09:48:64:34:75:6c:e9: 1f:ac:49:2c:2c:5b:cb:61:a7:cb:7c:1a:16:8f:45:49:b9:04: d3:b0:a3:de:49:9d:9a:5f:e3:90:97:f6:c8:d6:7e:eb:b1:0e: 20:5b:8f:a0:5f:bb:e4:09:bc:9b:d3:75:68:2f:8b:cf:92:19: 0a:7c:0a:d5:b3:87:52:d4:40:ad:a7:5f:0a:31:42:e0:96:a0: b1:57:2a:63:90:a5:26:d5:ad:f8:5f:67:2d:12:d8:f7:58:97: 45:1b:cb:f5:39:1a:a3:36:31:ba:9e:d0:b7:70:d1:34:a0:10: a5:cb:2e:77:b5:6a:a6:bb:30:ba:f8:5f:90:16:ea:9d:e4:d5: 7b:32:ff:31:25:b9:6d:87:85:43:a2:99:cf:04:cd:b7:3d:c6: b8:4a:19:3a:35:dc:4f:b5:98:61:7f:43:90:d4:d5:40:70:04: bc:49:f9:09:95:22:9e:92:d1:ca:75:de:fd:bc:3c:1d:76:8b: 56:d0:33:66:40:4e:4d:73:47:e9:8e:46:2b:21:f9:4d:18:ba: 9a:0d:cb:ce:03:ff:5b:48:81:43:f0:51:a3:e5:df:23:ec:00: dc:ce:7b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnAH9DgDI3qARfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDE3NzllZDMtNjk3MS00YTQ0LWI2NTMtNjdjNjRkNjJjMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftGkmqC5z6/GybbZup8K52CGbOiBollRL8t uxX0s2uR5SN5lDRcbKVK/jqWbfs6RAcb7g0miazVlLZTA2DgpP+W6hLo0/MSU4bI 6Ixs0Un2zCMeWp0fIr10covLEs0fLTNVEwoZpJ8WZ3jrvyqHTvBkCqkzB0cIjJSS j5KKXcZlEdnLQAD9xasny8e5QPd5CGJ8+0J4MIiY67xILmOg3ZYrWp9dzJ8B1TVW Q4Ib+ndWXHe7w7g50FfcI+wYhQN77+ziqaQekAbtozoAwNwiuEM0xcV1sjgG8fBW JTRQ+GtZfwWl0BQ7ZrEF9UMNwbsUGxjzn0YkMmvCPFMPR4gXzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxP3UctlRYGe25QyJ9vCGLZbNccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWFlNzA1NjMtNzk3ZC0z NGIxLTlkYjItOTk3OGRhYTA0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoYRq+IDZi9PTOCc6tgMDPaKn7f7VDhW2YaKW0ZCUhkNHVs6R+sSSws W8thp8t8GhaPRUm5BNOwo95JnZpf45CX9sjWfuuxDiBbj6Bfu+QJvJvTdWgvi8+S GQp8CtWzh1LUQK2nXwoxQuCWoLFXKmOQpSbVrfhfZy0S2PdYl0Uby/U5GqM2Mbqe 0Ldw0TSgEKXLLne1aqa7MLr4X5AW6p3k1Xsy/zEluW2HhUOimc8Ezbc9xrhKGTo1 3E+1mGF/Q5DU1UBwBLxJ+QmVIp6S0cp13v28PB12i1bQM2ZATk1zR+mORish+U0Y upoNy84D/1tIgUPwUaPl3yPsANzOe+Q= -----END CERTIFICATE-----Generated at Wed Apr 8 22:59:28 2026 by rpki-client