$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa File: a22ff12a-0371-3319-88d2-f5e344b13f6c.roa (raw, json) Hash identifier: aMDdL7bMpboduEwO1HuY/E1cemhi2/IF3GOr7Bk2t/0= Subject key identifier: 94:72:90:24:E2:2F:32:A0:AC:0A:45:64:FC:B7:C7:BE:D7:54:EC:E8 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C207A0DBEA437987B6B180 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 206.255.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:07:a0:db:ea:43:79:87:b6:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=deae778c-5fb7-41a9-a2b4-6661f9816b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:6c:f4:52:07:c5:4e:7e:e5:08:32:08:e4: 6f:ec:bf:9b:d3:f0:09:53:fc:a3:07:24:2d:6f:5a: bf:8f:0b:57:e4:da:50:bb:61:bc:ab:a6:59:80:e4: 32:34:13:69:5a:e2:6a:c1:d3:0a:91:e0:00:7a:19: 0f:35:89:b0:46:7c:10:d4:e6:99:62:3c:37:3d:24: 37:c2:50:82:99:47:49:64:e8:3a:a7:b0:0f:10:e7: f8:fd:f2:72:f8:47:d3:53:84:ad:52:af:8d:01:7e: ee:79:00:21:d9:9d:a5:b2:5a:96:23:17:d0:b8:8e: 2b:20:58:03:9d:0a:4d:77:4a:2b:44:e7:da:b6:90: aa:24:01:76:46:cf:0a:83:63:71:1e:57:69:1a:1a: 51:e4:c4:4b:e5:02:e2:73:24:37:a9:56:8a:2c:79: d5:07:18:73:2d:c4:dd:21:6b:a5:61:b9:a5:84:64: 2c:21:a0:c3:70:84:af:1b:01:2d:e0:48:97:af:f8: 09:8b:7c:bc:ad:ae:28:50:f3:84:5f:ec:5d:45:84: 40:bd:d8:cc:97:45:56:cb:01:29:73:4b:4b:df:2f: 62:c2:86:bb:50:f7:0c:95:f3:ff:97:fa:5d:c0:c4: 8d:af:93:8d:b9:7f:ab:7f:f8:2a:01:2f:a0:69:e7: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:90:24:E2:2F:32:A0:AC:0A:45:64:FC:B7:C7:BE:D7:54:EC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:db:3a:3d:6b:cc:a0:8c:ff:2c:b6:5c:07:ef:ee:d7:bc:b7: 14:ff:17:19:be:a6:1d:76:01:1d:bb:76:14:3b:2a:7d:8b:cf: 9e:41:23:8f:d9:4e:63:ec:cf:de:78:c0:fa:a3:e8:de:c0:8f: d8:b9:a3:18:7f:a3:b9:94:e2:08:9c:f6:dc:61:57:e8:be:9b: 2f:42:3d:65:8d:d9:41:f3:e6:9e:f7:b8:39:7e:f6:3a:cb:68: bf:bb:4f:17:37:62:86:4f:4e:ed:c9:58:9e:69:70:4f:fb:84: 85:1d:55:b2:f1:77:2c:0e:1d:6e:56:87:88:12:c7:6d:74:5f: 9d:87:f3:cf:54:e0:b8:a8:77:1b:6c:04:db:48:e1:22:73:1b: c2:2e:0e:82:9b:5a:ff:57:07:87:d9:d3:fc:1c:0e:89:cc:e6: 94:19:d1:dd:20:eb:16:4f:46:09:6c:5c:db:91:d9:a1:35:a4: 53:af:87:62:fd:7a:a3:5d:f7:8b:68:36:30:8d:35:9b:83:70: b5:28:a6:9d:6d:b1:d9:54:c7:34:b2:b1:18:a2:5f:3b:c9:b9: ed:24:b4:01:76:05:e5:a6:0b:b5:1f:51:36:30:32:d1:ba:d2: 7c:22:97:b6:f4:c7:9d:f3:73:f1:57:d6:11:dd:d0:ed:f3:c0: 1e:70:55:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgeg2+pDeYe2sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGVhZTc3OGMtNWZiNy00MWE5LWEyYjQtNjY2MWY5ODE2Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCZs9FIHxU5+5QgyCORv7L+b0/AJU/yjByQt b1q/jwtX5NpQu2G8q6ZZgOQyNBNpWuJqwdMKkeAAehkPNYmwRnwQ1OaZYjw3PSQ3 wlCCmUdJZOg6p7APEOf4/fJy+EfTU4StUq+NAX7ueQAh2Z2lslqWIxfQuI4rIFgD nQpNd0orROfatpCqJAF2Rs8Kg2NxHldpGhpR5MRL5QLicyQ3qVaKLHnVBxhzLcTd IWulYbmlhGQsIaDDcISvGwEt4EiXr/gJi3y8ra4oUPOEX+xdRYRAvdjMl0VWywEp c0tL3y9iwoa7UPcMlfP/l/pdwMSNr5ONuX+rf/gqAS+gaeczIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRykCTiLzKgrApFZPy3x77XVOzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTIyZmYxMmEtMDM3MS0z MzE5LTg4ZDItZjVlMzQ0YjEzZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrbOj1rzKCM/yy2XAfv7te8txT/Fxm+ph12AR27dhQ7Kn2Lz55BI4/Z TmPsz954wPqj6N7Aj9i5oxh/o7mU4gic9txhV+i+my9CPWWN2UHz5p73uDl+9jrL aL+7Txc3YoZPTu3JWJ5pcE/7hIUdVbLxdywOHW5Wh4gSx210X52H889U4Liodxts BNtI4SJzG8IuDoKbWv9XB4fZ0/wcDonM5pQZ0d0g6xZPRglsXNuR2aE1pFOvh2L9 eqNd94toNjCNNZuDcLUopp1tsdlUxzSysRiiXzvJue0ktAF2BeWmC7UfUTYwMtG6 0nwil7b0x53zc/FX1hHd0O3zwB5wVdE= -----END CERTIFICATE-----Generated at Thu Oct 8 16:49:39 2026 by rpki-client