$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa File: d33ac72b-a2fd-3e99-9262-5396871638b8.roa (raw, json) Hash identifier: m3QU4+2BEv1SVCGYIOUrlx555L9loYyYcCy33vxP/Go= Subject key identifier: 45:81:B9:84:23:D7:86:C7:15:49:48:4D:FE:53:99:E3:A7:96:DC:0E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A70F5F6334AE33B67D340 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:f5:f6:33:4a:e3:3b:67:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=0d400c4e-a3df-411b-96c8-e24c028e110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:9f:f2:4d:e7:2c:82:5a:32:49:c5:21:eb: f3:c4:0c:50:09:dc:c4:b0:75:e9:a9:61:f2:05:e4: d2:38:64:5a:d3:50:8c:0d:0e:e6:db:ee:ae:80:7c: 60:0c:16:06:a2:ae:ea:2a:b5:56:47:bd:2a:29:f4: 4e:e0:1b:4b:a7:ba:6c:ab:e8:6b:08:1b:77:07:cc: 29:bb:7b:24:13:d5:55:f5:1f:d7:96:d3:d0:37:91: 37:be:c5:30:45:91:9a:e4:77:ae:61:4b:c2:83:13: 37:4a:03:a5:aa:d4:56:50:31:35:e5:fc:fd:03:97: b5:d0:66:02:8e:69:7a:ab:86:8d:da:06:6c:cd:10: 6b:16:9f:fe:80:25:6e:b8:b7:4e:81:d5:55:80:88: 80:f9:94:29:0f:fd:fb:f1:8f:45:28:64:54:86:bb: 36:6f:8b:be:dc:37:e6:71:84:a7:fc:26:5d:77:79: 5f:c0:0d:21:c0:d0:2c:26:a2:7c:d8:a3:02:a7:cc: 69:28:0a:61:4a:61:ce:90:a5:b5:f8:43:dd:67:31: ed:ce:79:2a:fb:01:0c:74:ed:c9:30:ac:a6:28:12: e3:c3:89:9d:6b:b0:74:2e:0c:9c:9e:64:d6:8c:1a: 68:72:0a:c6:bc:d2:4e:10:21:05:db:b2:81:07:33: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:B9:84:23:D7:86:C7:15:49:48:4D:FE:53:99:E3:A7:96:DC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f0:24:d7:ed:03:c5:3d:1f:9b:1a:ff:78:84:93:3a:fa:b3: 87:5f:4b:5c:e0:8c:9b:dc:a2:b9:43:8c:8b:fc:20:45:96:73: c6:ca:96:94:9f:e8:fc:92:0c:49:a9:a1:bd:62:4f:71:42:01: 1c:a9:74:f3:41:eb:c2:b6:9c:3b:55:e9:7a:b9:00:9d:df:f1: 0d:d0:26:d0:05:dc:26:92:c9:82:70:38:c7:48:41:9e:d3:fc: 02:70:25:e2:18:f2:35:fa:b5:67:81:75:69:10:ff:90:7f:9d: 1f:37:46:18:48:75:d2:e6:c5:e2:bb:cb:d2:4d:28:be:39:28: c1:bd:2d:06:8f:0c:df:42:c5:ac:2a:c3:fa:2a:b5:7d:d1:4b: 1d:84:b7:4a:8d:ed:ce:a2:43:0b:30:70:df:f3:40:75:c6:2a: 08:63:63:1b:7f:8d:15:5e:01:fa:cf:7d:26:8d:82:74:d3:5e: 6a:14:9e:7c:89:91:fa:b7:8a:9d:5c:e1:8b:6a:88:91:15:b8: de:94:a9:b4:75:e1:e7:02:03:de:b4:6d:79:eb:22:db:1e:aa: bf:da:14:a5:13:b9:87:5e:0a:38:c6:66:e8:32:58:b7:c8:0b: f7:b0:c3:63:de:fd:d2:2a:f6:7d:5a:90:68:bd:c6:27:09:27: 46:89:86:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnD19jNK4ztn00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MGQ0MDBjNGUtYTNkZi00MTFiLTk2YzgtZTI0YzAyOGUxMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fqf8k3nLIJaMknFIevzxAxQCdzEsHXpqWHy BeTSOGRa01CMDQ7m2+6ugHxgDBYGoq7qKrVWR70qKfRO4BtLp7psq+hrCBt3B8wp u3skE9VV9R/XltPQN5E3vsUwRZGa5HeuYUvCgxM3SgOlqtRWUDE15fz9A5e10GYC jml6q4aN2gZszRBrFp/+gCVuuLdOgdVVgIiA+ZQpD/378Y9FKGRUhrs2b4u+3Dfm cYSn/CZdd3lfwA0hwNAsJqJ82KMCp8xpKAphSmHOkKW1+EPdZzHtznkq+wEMdO3J MKymKBLjw4mda7B0LgycnmTWjBpocgrGvNJOECEF27KBBzOGpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWBuYQj14bHFUlITf5TmeOnltwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDMzYWM3MmItYTJmZC0z ZTk5LTkyNjItNTM5Njg3MTYzOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/wJNftA8U9H5sa/3iEkzr6s4dfS1zgjJvcorlDjIv8IEWWc8bKlpSf 6PySDEmpob1iT3FCARypdPNB68K2nDtV6Xq5AJ3f8Q3QJtAF3CaSyYJwOMdIQZ7T /AJwJeIY8jX6tWeBdWkQ/5B/nR83RhhIddLmxeK7y9JNKL45KMG9LQaPDN9Cxawq w/oqtX3RSx2Et0qN7c6iQwswcN/zQHXGKghjYxt/jRVeAfrPfSaNgnTTXmoUnnyJ kfq3ip1c4YtqiJEVuN6UqbR14ecCA960bXnrItseqr/aFKUTuYdeCjjGZugyWLfI C/eww2Pe/dIq9n1akGi9xicJJ0aJhuQ= -----END CERTIFICATE-----Generated at Wed Apr 8 22:59:41 2026 by rpki-client