$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa File: efb511d0-3c37-335c-ba0b-442e98173e1e.roa (raw, json) Hash identifier: 71pOFfjTZG9qmVS+gxZqWZGt2cloJRsugQ6AsDrZcRk= Subject key identifier: AE:2D:A1:E3:81:5B:9B:F0:69:C6:BE:C7:BC:3E:97:E5:CD:78:04:18 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A67C1FB5499AF96F4F680 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 206.255.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:67:c1:fb:54:99:af:96:f4:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7bda18ba-79a9-4479-8113-a203cb0a713f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:46:12:51:5c:c9:4b:fe:cf:c1:7e:f1:e4: 7c:ef:c9:af:8b:47:55:06:9e:18:3a:85:7a:ee:fe: c5:a2:3b:a0:ef:01:41:d7:f4:59:8e:bf:e3:2e:ac: e2:7f:4d:fa:61:54:e3:d6:ff:5f:10:9c:22:43:7c: 83:d1:d9:de:94:9c:7b:d6:5f:39:b2:dd:27:94:8d: e1:56:4d:6a:9a:53:70:b2:d4:a4:1c:9e:90:03:c8: cc:32:ee:20:23:7d:0d:eb:d3:71:bd:27:0e:44:89: f8:65:ab:66:37:d7:21:73:2a:58:49:39:21:5e:5a: ab:ea:6a:02:6e:08:80:4e:c6:c6:ed:96:ce:f9:64: a4:cd:eb:2f:a6:0d:c8:2a:16:d3:d2:cc:0a:ed:f6: 82:96:17:42:89:db:4c:54:6d:f8:91:8c:8d:51:bc: f3:8f:89:ea:1b:5d:a7:37:5f:b7:a6:6e:1b:a0:6a: cb:19:68:19:30:6b:7b:3e:5c:89:b1:53:68:5b:ca: 58:45:77:15:06:86:38:18:a9:71:b7:f0:5c:0d:ad: 63:64:d6:04:7c:0e:ce:61:c6:0e:23:bd:07:59:a0: 71:66:8c:3a:a8:29:b8:88:42:cc:bb:d7:32:0a:ae: c7:e5:9f:0b:6d:24:21:23:10:2a:fc:da:6d:ef:fe: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2D:A1:E3:81:5B:9B:F0:69:C6:BE:C7:BC:3E:97:E5:CD:78:04:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2f:d9:e1:2e:a2:25:d4:c1:e8:74:6a:bf:25:19:de:06:33: 77:d1:01:a9:ee:53:2d:43:3f:36:f7:a7:d2:e0:29:aa:20:c6: c3:84:95:c5:7b:17:6d:f7:ba:84:bc:21:bd:1d:1e:7c:d3:dc: 5a:89:e3:c6:27:87:76:6e:4d:57:55:0d:4d:6b:63:89:04:db: 0a:63:6b:89:12:3e:95:b6:bc:f2:f4:cf:4f:22:9e:f3:d2:ed: 79:8c:10:d5:02:7b:2b:6e:cc:f2:46:cb:23:f2:7b:0e:5c:53: 20:e8:bd:6f:d1:b4:9a:d4:eb:01:41:c6:ea:14:e8:9f:ef:08: 5e:2d:36:f8:ff:67:63:ab:40:b6:48:ee:4c:74:e6:40:65:f7: 6e:7c:5d:2f:d2:89:42:65:40:42:c6:56:3f:4c:03:cf:43:4f: 6b:ca:16:1d:d1:4e:d0:a8:f5:af:d3:b5:6c:6c:52:c3:91:65: 64:c1:e1:f7:e7:f5:58:11:95:29:69:18:e7:34:b5:5d:10:1e: 89:02:e5:cf:22:b6:37:95:87:7b:49:34:67:11:f8:ad:70:ba: b1:c9:0f:1e:f4:24:b9:68:3f:b5:98:c8:af:d7:c5:7a:a0:5e: e3:b1:f2:f3:0d:33:fc:d9:11:eb:ab:c6:cc:97:f4:91:ae:90: 6a:1b:f7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmfB+1SZr5b09oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk N2JkYTE4YmEtNzlhOS00NDc5LTgxMTMtYTIwM2NiMGE3MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAhGElFcyUv+z8F+8eR878mvi0dVBp4YOoV6 7v7Fojug7wFB1/RZjr/jLqzif036YVTj1v9fEJwiQ3yD0dnelJx71l85st0nlI3h Vk1qmlNwstSkHJ6QA8jMMu4gI30N69NxvScORIn4ZatmN9chcypYSTkhXlqr6moC bgiATsbG7ZbO+WSkzesvpg3IKhbT0swK7faClhdCidtMVG34kYyNUbzzj4nqG12n N1+3pm4boGrLGWgZMGt7PlyJsVNoW8pYRXcVBoY4GKlxt/BcDa1jZNYEfA7OYcYO I70HWaBxZow6qCm4iELMu9cyCq7H5Z8LbSQhIxAq/Npt7/5z0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4toeOBW5vwaca+x7w+l+XNeAQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWZiNTExZDAtM2MzNy0z MzVjLWJhMGItNDQyZTk4MTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMv2eEuoiXUweh0ar8lGd4GM3fRAanuUy1DPzb3p9LgKaogxsOElcV7 F233uoS8Ib0dHnzT3FqJ48Ynh3ZuTVdVDU1rY4kE2wpja4kSPpW2vPL0z08invPS 7XmMENUCeytuzPJGyyPyew5cUyDovW/RtJrU6wFBxuoU6J/vCF4tNvj/Z2OrQLZI 7kx05kBl9258XS/SiUJlQELGVj9MA89DT2vKFh3RTtCo9a/TtWxsUsORZWTB4ffn 9VgRlSlpGOc0tV0QHokC5c8itjeVh3tJNGcR+K1wurHJDx70JLloP7WYyK/XxXqg XuOx8vMNM/zZEeurxsyX9JGukGob92c= -----END CERTIFICATE-----Generated at Wed Apr 8 22:59:43 2026 by rpki-client