$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa File: dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa (raw, json) Hash identifier: BUy1sn4C0e8jgf9L4tjHEw/PM7teX5ez6tapaac0cKs= Subject key identifier: 75:28:E8:CD:34:49:1D:E4:F8:70:CD:5A:01:7F:B2:BC:56:2A:FB:69 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584E3E5F4418EF0CA0F9021C0900 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 53508 IP address blocks: 206.255.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:44:18:ef:0c:a0:f9:02:1c:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=fd815b9f-d3f1-4661-8006-098dd373660f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:ca:c8:07:a7:ac:dd:6d:a4:11:2f:85:91: 04:be:3d:1f:10:5a:f0:a5:31:47:22:7d:9f:4e:39: 87:94:3f:07:fc:34:d3:13:37:02:83:9d:0a:03:20: a7:f6:c4:1b:8d:39:1d:d3:87:11:fd:48:54:37:92: 87:aa:de:e8:fb:b7:96:fb:55:6b:f1:d7:48:5d:61: ea:ab:64:f1:78:8f:33:cd:0b:61:cf:c2:ee:2c:34: 7c:f9:c1:a4:0a:74:1a:be:9c:df:fa:fc:5e:ff:45: 47:b6:a0:59:94:10:7b:6a:ad:b6:1c:e5:d5:2b:f4: d6:49:a4:b5:ea:c0:c8:54:49:a7:19:9a:9f:f4:cd: db:96:65:1d:56:fe:b5:d5:b7:c9:c3:bc:c5:e9:81: f2:29:91:70:61:46:fd:8c:b7:40:cb:93:53:9b:02: 21:77:36:ff:27:b1:d2:d1:7e:56:9b:eb:af:cf:46: b4:27:c3:26:dc:c3:f5:d0:c0:f9:b1:25:7f:6d:31: 69:10:81:f9:5b:a8:21:71:78:1a:ae:11:b4:74:10: 36:2b:f3:95:f4:4d:32:f3:a2:99:61:e0:5a:48:0b: e4:ff:c8:39:4f:63:c2:90:93:c4:f9:96:a5:03:f7: 77:ff:be:84:af:3d:12:f2:c6:df:28:c1:01:e0:94: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:E8:CD:34:49:1D:E4:F8:70:CD:5A:01:7F:B2:BC:56:2A:FB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:06:5c:a3:80:0f:6d:a7:0e:75:3d:70:dd:7d:6b:9f:6a:2b: 74:fe:6a:30:e7:61:f0:b3:50:b4:7c:69:bc:1b:7d:21:55:1a: 5a:44:6e:06:7c:8a:30:e2:30:d5:6e:3c:f4:74:24:e7:69:a4: 6e:c5:a6:6a:d3:50:10:08:83:66:04:35:b9:61:c3:cb:84:79: 16:3e:1b:66:50:e5:7a:45:81:7a:41:21:09:5d:da:96:e9:51: cf:37:38:52:bb:d4:18:fa:65:ae:a0:bd:b7:68:6f:a8:a7:1b: 38:5a:4a:02:16:42:13:84:d6:fb:fe:78:fb:73:7f:ea:cd:17: c8:90:50:ef:7d:4a:55:d0:ca:31:43:d0:86:d0:a3:65:1d:4a: b6:5a:31:3b:d5:c8:67:c5:7f:04:98:4c:1a:79:35:37:37:6d: 61:89:fd:25:35:66:f1:db:14:4b:de:7d:9e:00:f2:4e:2a:7c: 6f:ef:1b:fe:cc:6c:08:ed:1d:4f:6e:02:d9:ff:db:5c:95:50: d5:d4:0d:85:37:0f:2c:5f:52:f0:84:73:02:b6:15:e7:f8:2a: 50:16:64:24:e8:2f:c8:8e:bf:da:18:97:75:49:65:74:fe:98: 00:91:51:bb:58:a2:16:7e:61:c8:97:99:c9:e2:04:7a:41:08: 96:df:db:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0QY7wyg+QIcCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZmQ4MTViOWYtZDNmMS00NjYxLTgwMDYtMDk4ZGQzNzM2NjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYXKyAenrN1tpBEvhZEEvj0fEFrwpTFHIn2f TjmHlD8H/DTTEzcCg50KAyCn9sQbjTkd04cR/UhUN5KHqt7o+7eW+1Vr8ddIXWHq q2TxeI8zzQthz8LuLDR8+cGkCnQavpzf+vxe/0VHtqBZlBB7aq22HOXVK/TWSaS1 6sDIVEmnGZqf9M3blmUdVv611bfJw7zF6YHyKZFwYUb9jLdAy5NTmwIhdzb/J7HS 0X5Wm+uvz0a0J8Mm3MP10MD5sSV/bTFpEIH5W6ghcXgarhG0dBA2K/OV9E0y86KZ YeBaSAvk/8g5T2PCkJPE+ZalA/d3/76Erz0S8sbfKMEB4JTbnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUo6M00SR3k+HDNWgF/srxWKvtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGQwZTVmYTQtNjU3Mi0z NDNlLTg4YjMtMmMzMDlhYTlhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQGXKOAD22nDnU9cN19a59qK3T+ajDnYfCzULR8abwbfSFVGlpEbgZ8 ijDiMNVuPPR0JOdppG7FpmrTUBAIg2YENblhw8uEeRY+G2ZQ5XpFgXpBIQld2pbp Uc83OFK71Bj6Za6gvbdob6inGzhaSgIWQhOE1vv+ePtzf+rNF8iQUO99SlXQyjFD 0IbQo2UdSrZaMTvVyGfFfwSYTBp5NTc3bWGJ/SU1ZvHbFEvefZ4A8k4qfG/vG/7M bAjtHU9uAtn/21yVUNXUDYU3DyxfUvCEcwK2Fef4KlAWZCToL8iOv9oYl3VJZXT+ mACRUbtYohZ+YciXmcniBHpBCJbf28k= -----END CERTIFICATE-----Generated at Thu Jun 25 03:44:11 2026 by rpki-client