$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa File: d94b6283-583f-3eb5-a107-41ff8f762125.roa (raw, json) Hash identifier: kPsYCPw8+QcR1Sz5XBiYZXSvFm7f/Zl8eYMhqOFUQz4= Subject key identifier: 05:C4:AC:68:7E:5C:38:6D:50:B7:31:02:73:75:81:D3:A9:D6:85:92 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D55BA4AF3A8588BD448D3F500 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4a:f3:a8:58:8b:d4:48:d3:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=58637f08-562c-4887-a62e-c72456af499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:ff:9f:fd:55:4d:ee:68:85:af:db:2f:6b: fc:0a:91:72:4c:ea:cc:63:d8:b1:bb:87:c3:8b:23: 29:06:21:5a:99:35:ce:17:2c:f4:aa:50:69:57:85: 37:c2:df:91:a4:58:75:9d:c9:a1:64:17:d1:a1:1b: c4:4e:1d:2d:18:7c:95:5a:0d:17:a0:d9:13:92:d3: cc:89:29:af:0f:56:20:30:a6:ed:32:20:63:85:9f: c4:cc:05:87:96:2e:98:d8:d3:09:ed:c3:79:22:ee: 69:3e:4a:c1:91:9e:9f:13:8d:02:eb:ab:30:52:0e: 62:5d:e2:83:54:40:24:a2:eb:63:90:aa:70:3b:e5: 3d:e9:d1:1c:76:ea:2a:41:71:d0:46:33:41:85:5d: 0a:7e:20:31:4e:1a:82:a7:41:b5:24:7e:33:5e:70: 1d:16:ca:b0:7e:a2:35:bc:e3:ac:b9:cb:85:49:91: 0c:3d:02:f0:42:c5:77:56:4f:e8:c7:be:0f:8f:e7: 5c:5e:16:d3:cf:ef:a0:e1:bc:7a:72:98:cc:51:3a: ec:08:a7:42:f0:43:15:dc:f9:a2:1b:69:5b:88:d3: e3:45:6c:21:98:cc:a6:cc:46:b5:b2:5f:d4:ce:51: 33:9c:2d:10:f4:6f:3b:17:3f:32:28:c1:11:ca:2a: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:AC:68:7E:5C:38:6D:50:B7:31:02:73:75:81:D3:A9:D6:85:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e3:7b:1d:82:f2:06:c5:2d:d9:0b:10:4e:31:d8:61:c2:fb: 63:3c:73:10:8f:6b:22:56:0b:43:c0:ab:40:f8:e2:f2:c9:51: 6c:a0:f5:66:29:78:8f:38:03:c5:68:f8:52:3e:79:f9:0f:a6: 41:3a:cb:47:20:73:8c:31:29:e0:54:ae:9a:82:ab:d2:0f:97: aa:02:98:f2:80:f8:5a:95:9d:ea:c3:23:90:6e:41:01:b2:aa: 02:20:51:7b:a4:72:c2:5d:10:fa:c2:50:41:e7:aa:2d:6e:45: 87:35:c7:17:e2:ef:f1:53:40:f9:cc:76:45:f7:31:7f:46:bc: 03:eb:f3:e6:13:4d:f4:a8:57:88:6f:7d:cd:70:f0:c6:f9:84: b7:6d:08:69:c0:ea:2d:21:da:9c:a3:88:3c:f0:6e:c2:fd:ea: 26:de:00:1e:d7:19:ea:a2:d9:a2:43:3f:cf:60:24:cf:00:39: bb:af:50:c3:50:79:5e:21:21:77:24:4a:5d:4b:70:05:75:55: 35:5f:58:11:10:bc:02:08:1e:12:3f:a8:12:ac:ff:1e:c2:24: a3:f2:ae:25:84:74:2d:43:be:3d:d1:0f:43:bb:ac:69:90:1f: 00:d0:d6:1b:dc:59:c6:45:ec:0f:d0:25:16:6b:47:4f:ab:bf: 43:49:a3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukrzqFiL1EjT9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTg2MzdmMDgtNTYyYy00ODg3LWE2MmUtYzcyNDU2YWY0OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeH/n/1VTe5oha/bL2v8CpFyTOrMY9ixu4fD iyMpBiFamTXOFyz0qlBpV4U3wt+RpFh1ncmhZBfRoRvETh0tGHyVWg0XoNkTktPM iSmvD1YgMKbtMiBjhZ/EzAWHli6Y2NMJ7cN5Iu5pPkrBkZ6fE40C66swUg5iXeKD VEAkoutjkKpwO+U96dEcduoqQXHQRjNBhV0KfiAxThqCp0G1JH4zXnAdFsqwfqI1 vOOsucuFSZEMPQLwQsV3Vk/ox74Pj+dcXhbTz++g4bx6cpjMUTrsCKdC8EMV3Pmi G2lbiNPjRWwhmMymzEa1sl/UzlEznC0Q9G87Fz8yKMERyipkjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXErGh+XDhtULcxAnN1gdOp1oWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDk0YjYyODMtNTgzZi0z ZWI1LWExMDctNDFmZjhmNzYyMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHjex2C8gbFLdkLEE4x2GHC+2M8cxCPayJWC0PAq0D44vLJUWyg9WYp eI84A8Vo+FI+efkPpkE6y0cgc4wxKeBUrpqCq9IPl6oCmPKA+FqVnerDI5BuQQGy qgIgUXukcsJdEPrCUEHnqi1uRYc1xxfi7/FTQPnMdkX3MX9GvAPr8+YTTfSoV4hv fc1w8Mb5hLdtCGnA6i0h2pyjiDzwbsL96ibeAB7XGeqi2aJDP89gJM8AObuvUMNQ eV4hIXckSl1LcAV1VTVfWBEQvAIIHhI/qBKs/x7CJKPyriWEdC1Dvj3RD0O7rGmQ HwDQ1hvcWcZF7A/QJRZrR0+rv0NJo4k= -----END CERTIFICATE-----Generated at Wed Apr 8 23:00:23 2026 by rpki-client