$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa File: ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa (raw, json) Hash identifier: 2XKy5pvbOlc9d87n94zJGCGRPtJFVl3joEvF+wQXLms= Subject key identifier: 04:E6:E8:E3:FA:E2:74:8A:66:89:F8:C9:CD:CD:52:E8:83:C3:02:5E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A6742122852EB8D76D180 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:67:42:12:28:52:eb:8d:76:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=849b7288-8692-4cb0-9bea-e691a6d3fedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:1e:bd:70:91:4f:14:bd:a6:d3:79:1c:f7: aa:d3:6a:93:23:db:5f:d5:51:c4:06:d2:c2:4b:1b: 84:db:61:43:9e:9e:7b:8d:d6:70:3f:28:e7:a7:67: bc:2b:25:d5:66:fa:e2:f0:c7:33:19:c0:b2:ad:8c: 2a:0c:19:63:72:5b:91:59:dd:45:c1:d4:23:72:75: 9d:f9:76:11:c1:2a:a9:f7:a5:9c:a7:8b:18:38:39: 1d:39:93:a7:99:d7:55:c5:6e:a8:09:c8:0c:7b:f7: 3a:45:dd:7a:dc:b4:29:2c:d5:c4:a0:2a:e7:5a:08: 95:4a:65:d9:63:99:17:df:0a:bd:7a:39:2a:d2:45: 1e:4e:75:fa:dc:2a:58:2f:42:34:07:00:3d:e0:b4: 93:82:15:7a:c2:e8:ed:16:3a:7e:0f:b8:03:f5:23: da:73:b3:ed:b1:dc:fa:5a:dd:15:34:19:cc:b5:64: 69:40:12:42:60:4b:83:9e:ef:17:a4:37:ac:95:e3: 3b:59:60:2a:4c:5e:92:9e:ae:15:85:dd:2a:cc:1f: 72:35:14:fa:75:b3:49:aa:e9:67:bd:7a:ef:fc:fa: 32:0a:f6:13:01:63:45:b0:8e:cd:2a:98:d2:74:66: b9:ec:01:87:6e:61:c6:56:f3:ae:d3:e3:01:35:ed: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E6:E8:E3:FA:E2:74:8A:66:89:F8:C9:CD:CD:52:E8:83:C3:02:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f4:ec:9a:63:d0:6a:e2:a5:45:79:ed:fa:49:97:6e:67:1c: dc:f0:8a:b4:96:28:a4:f1:3c:1e:b7:0f:8b:94:11:a8:f2:cb: dc:ee:fc:8f:6e:8b:ec:5d:e0:39:7e:70:23:16:7a:a2:a9:21: 5e:35:67:b2:3e:1b:7a:81:3d:e8:ba:f7:02:20:ac:80:3d:ac: 7a:5d:1b:db:37:ea:47:ee:ca:0e:ae:d6:7b:12:a0:04:73:05: b5:25:44:c0:69:ee:70:09:e7:91:6e:af:63:37:cc:93:20:4a: 57:18:f9:96:00:7e:5c:aa:63:bf:40:8b:40:4e:a4:01:91:0f: 23:6f:e3:b1:9d:2e:db:d2:81:e1:f7:1f:f5:6c:27:91:8d:d6: 75:fe:e2:b5:e2:27:55:7f:ce:4c:ec:cf:94:ef:56:71:ee:7f: 14:fb:fb:af:94:a2:d6:36:b8:c4:74:5c:3e:eb:4b:8f:19:d3: 7d:20:85:d5:7b:c9:e8:89:7c:1f:77:89:ac:52:34:a2:6d:19: 75:ae:fb:79:dc:db:0f:5a:12:92:c9:64:10:14:27:d8:6c:21: be:8c:e5:d9:aa:f0:2c:eb:40:07:40:fa:37:96:ce:15:9c:dc: fb:4c:cf:4f:66:c6:42:44:41:8f:6d:2b:8b:72:1e:5a:d5:f4: bd:02:62:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmdCEihS64120YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODQ5YjcyODgtODY5Mi00Y2IwLTliZWEtZTY5MWE2ZDNmZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogevXCRTxS9ptN5HPeq02qTI9tf1VHEBtLC SxuE22FDnp57jdZwPyjnp2e8KyXVZvri8MczGcCyrYwqDBljcluRWd1FwdQjcnWd +XYRwSqp96Wcp4sYODkdOZOnmddVxW6oCcgMe/c6Rd163LQpLNXEoCrnWgiVSmXZ Y5kX3wq9ejkq0kUeTnX63CpYL0I0BwA94LSTghV6wujtFjp+D7gD9SPac7Ptsdz6 Wt0VNBnMtWRpQBJCYEuDnu8XpDesleM7WWAqTF6Snq4Vhd0qzB9yNRT6dbNJquln vXrv/PoyCvYTAWNFsI7NKpjSdGa57AGHbmHGVvOu0+MBNe3OMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATm6OP64nSKZon4yc3NUuiDwwJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWIwNWYyZDQtZGM5Zi0z ODRmLWE1NzctN2JiMzlkOWJjNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr07Jpj0GripUV57fpJl25nHNzwirSWKKTxPB63D4uUEajyy9zu/I9u i+xd4Dl+cCMWeqKpIV41Z7I+G3qBPei69wIgrIA9rHpdG9s36kfuyg6u1nsSoARz BbUlRMBp7nAJ55Fur2M3zJMgSlcY+ZYAflyqY79Ai0BOpAGRDyNv47GdLtvSgeH3 H/VsJ5GN1nX+4rXiJ1V/zkzsz5TvVnHufxT7+6+UotY2uMR0XD7rS48Z030ghdV7 yeiJfB93iaxSNKJtGXWu+3nc2w9aEpLJZBAUJ9hsIb6M5dmq8CzrQAdA+jeWzhWc 3PtMz09mxkJEQY9tK4tyHlrV9L0CYoc= -----END CERTIFICATE-----Generated at Wed Apr 8 22:58:40 2026 by rpki-client