$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa File: dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa (raw, json) Hash identifier: 94YLvaXaXY/0EkK/qiVpsNyT/FnRAzE7n6SVQR021c0= Subject key identifier: AD:46:8D:06:59:6E:25:41:D3:0A:B8:04:2C:65:44:4D:2F:39:4E:1C Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A704E6EF92E6BCC9FE0C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:70:4e:6e:f9:2e:6b:cc:9f:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=0152a05e-0f46-4262-ab60-75b45466b028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:1e:af:da:23:8e:97:c1:fe:41:89:e1:b3: c2:2c:8f:08:c5:e1:5e:01:1d:63:7a:4d:49:d1:2a: 03:c3:03:3b:3c:ac:b5:3f:8f:20:16:67:3f:28:4b: c7:8a:ef:ca:ac:46:84:25:46:2e:ef:1e:7a:56:e1: 02:7c:0f:f9:7c:a0:90:d1:3a:3a:63:69:16:52:5a: e7:ba:e4:ac:88:48:d6:5d:9a:aa:ae:33:79:21:18: d8:db:c8:eb:22:cc:7e:5e:e4:71:84:18:5b:44:be: 88:1e:8f:29:57:f9:0b:f5:19:69:55:bf:86:6b:f2: 3d:ea:72:7e:18:4a:c2:9d:89:ff:31:e9:eb:0d:3b: b1:f9:89:0e:55:a7:6d:a0:51:33:bf:78:e9:a4:f7: fd:0c:85:6c:e9:4c:9c:1e:52:49:86:f0:94:c9:a7: 8a:3c:e6:8b:94:8a:74:a3:99:27:7a:1e:65:72:93: 54:55:01:11:b6:41:5c:9a:2c:2b:ca:45:99:db:96: 54:90:da:cf:9d:f0:a8:22:ce:94:c1:bf:61:11:43: 2f:e9:cd:19:db:19:94:86:31:8b:9f:0f:76:10:ee: cd:4e:37:22:b2:69:2d:20:97:72:c3:9e:9f:b0:e0: a1:9f:35:ed:02:0f:bc:b5:1c:05:13:56:7c:f9:1e: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:46:8D:06:59:6E:25:41:D3:0A:B8:04:2C:65:44:4D:2F:39:4E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:51:54:9d:df:7c:98:de:65:ab:17:7c:48:eb:34:fd:ec:f3: b7:34:23:2d:0e:93:10:a2:40:10:24:71:9e:39:38:63:01:cb: 7b:66:6c:85:fc:22:c0:ab:b2:c0:e3:ae:50:c6:4f:a1:a0:ec: 11:b4:b5:74:e1:df:3a:59:54:09:b3:8b:28:e0:ec:05:a1:1f: 73:60:aa:75:81:f1:d4:bc:d0:a7:6a:5c:fd:be:3a:85:76:c4: 9a:0f:fe:8f:c9:2a:f9:0c:93:25:36:1b:ea:0a:e2:bd:ef:cb: 1a:f1:42:87:1f:a0:25:ed:70:55:03:b0:b3:90:b7:95:0e:5f: 38:9a:71:cf:27:fc:cc:12:20:a4:52:77:0d:f0:d3:d2:62:f2: fe:f7:d8:b4:51:41:af:bd:cc:f1:17:d8:a4:bb:15:f0:eb:90: 93:14:77:a9:a3:70:b3:4c:58:55:ab:b7:db:ae:5b:65:69:b0: 8a:21:ac:36:eb:22:b3:73:cb:d4:f2:ab:a1:8c:42:55:e6:ca: 34:05:7e:f0:8c:32:4a:49:41:ca:b9:12:5b:10:66:6c:58:d4: 58:72:12:8a:f3:88:39:28:8b:ff:ea:83:d9:8a:e7:1d:77:57: d4:06:67:fb:d4:d1:ae:37:39:06:96:81:a0:58:1e:87:ed:34: 70:09:9b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnBObvkua8yf4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDE1MmEwNWUtMGY0Ni00MjYyLWFiNjAtNzViNDU0NjZiMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO8er9ojjpfB/kGJ4bPCLI8IxeFeAR1jek1J 0SoDwwM7PKy1P48gFmc/KEvHiu/KrEaEJUYu7x56VuECfA/5fKCQ0To6Y2kWUlrn uuSsiEjWXZqqrjN5IRjY28jrIsx+XuRxhBhbRL6IHo8pV/kL9RlpVb+Ga/I96nJ+ GErCnYn/MenrDTux+YkOVadtoFEzv3jppPf9DIVs6UycHlJJhvCUyaeKPOaLlIp0 o5kneh5lcpNUVQERtkFcmiwrykWZ25ZUkNrPnfCoIs6Uwb9hEUMv6c0Z2xmUhjGL nw92EO7NTjcismktIJdyw56fsOChnzXtAg+8tRwFE1Z8+R5qRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1GjQZZbiVB0wq4BCxlRE0vOU4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGQwZTVmYTQtNjU3Mi0z NDNlLTg4YjMtMmMzMDlhYTlhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFRVJ3ffJjeZasXfEjrNP3s87c0Iy0OkxCiQBAkcZ45OGMBy3tmbIX8 IsCrssDjrlDGT6Gg7BG0tXTh3zpZVAmziyjg7AWhH3NgqnWB8dS80KdqXP2+OoV2 xJoP/o/JKvkMkyU2G+oK4r3vyxrxQocfoCXtcFUDsLOQt5UOXziacc8n/MwSIKRS dw3w09Ji8v732LRRQa+9zPEX2KS7FfDrkJMUd6mjcLNMWFWrt9uuW2VpsIohrDbr IrNzy9Tyq6GMQlXmyjQFfvCMMkpJQcq5ElsQZmxY1FhyEorziDkoi//qg9mK5x13 V9QGZ/vU0a43OQaWgaBYHoftNHAJm9c= -----END CERTIFICATE-----Generated at Wed Apr 8 22:58:51 2026 by rpki-client