$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/cc61b9c1-989d-3b19-a4df-55c292d79503.roa File: cc61b9c1-989d-3b19-a4df-55c292d79503.roa (raw, json) Hash identifier: 4xOj3t3WARES1/MA45Dr/UUeP0p8V4ezH3uHeFZIYF4= Subject key identifier: 43:46:1D:7F:51:A0:CD:AA:81:94:A8:0B:4E:FA:BC:F6:B4:4B:CC:04 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A67584ABAD20A5263A700 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/cc61b9c1-989d-3b19-a4df-55c292d79503.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:67:58:4a:ba:d2:0a:52:63:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=73830894-73e6-49a9-ba47-93b10c26fa69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:10:41:91:f4:20:1a:81:b3:45:d7:85:eb: eb:d1:e4:cd:38:87:4c:64:17:27:c0:03:0a:90:0f: 32:bb:6c:c5:4b:a3:ad:6c:26:53:07:07:93:93:38: 0b:67:55:c7:57:6a:a8:7f:6c:d1:7c:95:18:98:bc: 26:d4:d0:b7:1c:b5:2a:d3:82:42:8d:02:3f:c6:db: 8b:2a:04:ef:98:68:c1:40:96:b5:fb:05:d7:b9:61: 09:04:dc:dc:7a:85:d8:6f:be:3a:77:38:f1:6a:b5: 87:a1:6e:00:da:3b:d9:f6:89:fa:6f:f0:98:de:f5: 45:a8:7b:2e:cf:90:fe:e8:25:8c:cb:0d:73:03:70: 56:db:96:b2:d1:8f:a8:9d:df:8b:bd:a7:8d:ea:b5: 76:f6:19:b7:2e:dc:a1:ed:aa:03:99:f4:b4:e6:7c: c5:c6:a9:23:ea:dc:f7:6f:ac:bc:90:ea:53:34:06: 9d:b3:95:e9:a0:d5:ef:44:e4:7b:14:9e:dd:7e:c5: b1:84:27:ea:bb:fa:72:77:49:f8:92:34:77:f8:81: ab:39:75:ef:b9:e3:1f:50:a5:a9:4b:f3:c3:c8:1b: fd:1f:6f:75:1c:5e:b1:a1:5a:fd:41:6b:18:38:f5: 62:8e:2a:d8:4f:69:52:ed:6e:b7:99:81:2d:9e:0f: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:1D:7F:51:A0:CD:AA:81:94:A8:0B:4E:FA:BC:F6:B4:4B:CC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/cc61b9c1-989d-3b19-a4df-55c292d79503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1d:60:b1:ae:b6:a3:3b:18:bd:90:1c:e0:3a:e2:67:82:4e: 6e:84:e2:fe:a9:fa:b8:93:8e:fb:fc:f5:67:38:63:3b:3d:f2: f3:fa:bc:d7:ca:45:ae:a9:42:3d:5e:18:3a:56:e7:e2:c7:68: 49:6c:a7:53:80:16:b8:ce:24:a6:bd:ab:80:36:69:6f:6e:d7: ab:29:03:94:1b:b2:71:ec:a5:19:1c:c1:39:3c:4f:ee:9f:b7: fb:ef:59:e1:8b:25:60:f7:e9:33:e4:71:a8:68:05:3d:0d:17: 6b:3c:11:4c:05:bc:80:21:3c:bd:aa:81:65:0d:5d:af:4f:07: 10:b2:43:1d:26:de:26:13:a5:7a:eb:3d:d7:4a:99:94:0f:e8: 72:05:8a:88:51:7f:d6:ed:03:31:d0:9c:81:5d:89:d1:3c:dc: 44:37:fd:41:6b:70:5a:de:3f:a2:f5:6e:9a:57:ff:7e:1e:1a: 4c:09:81:d8:60:87:48:c8:ca:ca:bf:e4:48:09:65:5c:7b:f9: c5:75:a7:e2:ed:e3:9d:bb:a5:27:9e:47:bb:49:a3:1f:7a:85: aa:ee:14:a2:1d:3c:6b:52:6a:d4:c8:79:e0:50:34:27:4a:2c: f0:98:50:27:90:c7:50:da:e8:a7:87:37:aa:b2:9a:1c:75:b2: 8f:01:d2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmdYSrrSClJjpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzM4MzA4OTQtNzNlNi00OWE5LWJhNDctOTNiMTBjMjZmYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt8QQZH0IBqBs0XXhevr0eTNOIdMZBcnwAMK kA8yu2zFS6OtbCZTBweTkzgLZ1XHV2qof2zRfJUYmLwm1NC3HLUq04JCjQI/xtuL KgTvmGjBQJa1+wXXuWEJBNzceoXYb746dzjxarWHoW4A2jvZ9on6b/CY3vVFqHsu z5D+6CWMyw1zA3BW25ay0Y+ond+LvaeN6rV29hm3Ltyh7aoDmfS05nzFxqkj6tz3 b6y8kOpTNAads5XpoNXvROR7FJ7dfsWxhCfqu/pyd0n4kjR3+IGrOXXvueMfUKWp S/PDyBv9H291HF6xoVr9QWsYOPVijirYT2lS7W63mYEtng8+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENGHX9RoM2qgZSoC076vPa0S8wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvY2M2MWI5YzEtOTg5ZC0z YjE5LWE0ZGYtNTVjMjkyZDc5NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkdYLGutqM7GL2QHOA64meCTm6E4v6p+riTjvv89Wc4Yzs98vP6vNfK Ra6pQj1eGDpW5+LHaElsp1OAFrjOJKa9q4A2aW9u16spA5QbsnHspRkcwTk8T+6f t/vvWeGLJWD36TPkcahoBT0NF2s8EUwFvIAhPL2qgWUNXa9PBxCyQx0m3iYTpXrr PddKmZQP6HIFiohRf9btAzHQnIFdidE83EQ3/UFrcFreP6L1bppX/34eGkwJgdhg h0jIysq/5EgJZVx7+cV1p+Lt4527pSeeR7tJox96haruFKIdPGtSatTIeeBQNCdK LPCYUCeQx1Da6KeHN6qymhx1so8B0gA= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:09 2026 by rpki-client