$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa File: efb511d0-3c37-335c-ba0b-442e98173e1e.roa (raw, json) Hash identifier: NrvOeS/el6aRWY+Ga7u8lAFplT0uXcAVqZuI4ceUPIo= Subject key identifier: 19:70:B0:09:E0:E4:DA:27:3E:76:A7:5F:2B:4A:57:EF:C2:8A:FC:96 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584E3E5F3BE787D74D1763968480 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 53508 IP address blocks: 206.255.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:3b:e7:87:d7:4d:17:63:96:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=ed439b41-934a-4b4a-83ef-42d2ab7357fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:05:9f:05:c6:de:cb:30:01:8e:3e:15:72: 30:03:e0:57:77:59:bb:64:ac:99:9b:59:33:7f:62: 80:49:5e:7c:69:cd:e8:08:b0:63:5b:b3:03:88:bc: e8:ea:10:d6:98:ab:65:d3:dc:67:ff:b5:a2:e1:c7: 11:82:d7:e6:ca:47:30:50:9e:bd:13:85:82:bb:29: 44:68:f5:84:d9:70:0f:a0:df:b0:75:69:4c:02:32: 55:37:76:d5:eb:44:dd:39:5b:72:b1:d2:78:b3:ac: 7c:eb:fd:29:f5:fe:c2:3e:b2:11:ae:33:bb:3a:53: 57:fa:42:88:e4:78:ec:d0:62:c0:bd:c5:6d:c8:5b: 79:31:85:05:d8:95:64:7f:32:4b:74:ce:b7:31:13: 6f:65:f7:5c:cb:f7:5c:82:b5:e1:a3:b2:a4:c3:3b: ab:ba:7a:5d:b3:94:42:07:aa:f1:e6:c7:05:7d:01: 37:81:b1:a3:69:ee:dc:69:82:a1:51:5a:9d:aa:d9: 63:79:f8:c5:1a:e3:dd:d6:0c:85:a3:c7:65:25:db: 7e:20:1f:85:c7:f0:de:33:a1:f9:b2:8a:1e:c5:f3: f7:c1:8f:a6:1e:e7:f0:e2:74:f4:85:f4:c8:5d:59: 2c:42:2b:39:d7:9a:3f:00:90:58:1d:96:66:6c:c3: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:B0:09:E0:E4:DA:27:3E:76:A7:5F:2B:4A:57:EF:C2:8A:FC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:30:d1:34:7c:55:d2:d7:df:2b:37:63:e6:78:96:d8:b1:63: 63:73:bd:2f:a1:e7:9b:61:93:9c:b3:74:20:a1:d1:9b:7f:08: 16:39:1b:a5:6e:94:4b:7e:28:cd:4c:d5:41:d6:6c:94:e6:77: 6a:01:7f:58:3e:80:db:0c:24:c5:62:5f:7f:53:19:7e:91:85: 27:82:15:fd:90:e0:cc:85:0e:26:88:2d:de:d9:11:e3:a6:a8: 71:d3:5e:b0:bf:04:7c:da:f0:b6:e8:8c:25:7b:1e:f9:ec:27: 7e:52:84:0f:0f:ae:56:12:2b:31:1f:aa:ba:5f:e9:0a:78:de: 00:13:dc:ab:96:44:7c:41:ad:0c:a6:40:db:b2:c4:c6:17:6d: 17:46:75:9d:e6:63:f7:d2:b6:5e:58:ee:0a:f2:fa:49:9c:61: fd:a5:6a:27:9a:2d:68:27:3e:27:74:51:13:07:34:69:59:70: 14:c4:1a:5e:47:cd:62:11:b8:3c:07:52:c1:f9:8b:dd:f5:bb: 4c:3e:3b:bc:74:60:e6:d8:43:18:80:0f:1f:d5:a4:01:b2:90: 30:a7:95:2e:f1:eb:7c:4a:14:c2:03:b5:d5:20:ba:38:0b:5b: 95:ad:4e:ef:02:ad:ea:e3:29:17:03:cc:65:fe:10:5c:01:3f: d8:be:4f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xzvnh9dNF2OWhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZWQ0MzliNDEtOTM0YS00YjRhLTgzZWYtNDJkMmFiNzM1N2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBsFnwXG3sswAY4+FXIwA+BXd1m7ZKyZm1kz f2KASV58ac3oCLBjW7MDiLzo6hDWmKtl09xn/7Wi4ccRgtfmykcwUJ69E4WCuylE aPWE2XAPoN+wdWlMAjJVN3bV60TdOVtysdJ4s6x86/0p9f7CPrIRrjO7OlNX+kKI 5Hjs0GLAvcVtyFt5MYUF2JVkfzJLdM63MRNvZfdcy/dcgrXho7Kkwzurunpds5RC B6rx5scFfQE3gbGjae7caYKhUVqdqtljefjFGuPd1gyFo8dlJdt+IB+Fx/DeM6H5 sooexfP3wY+mHufw4nT0hfTIXVksQis515o/AJBYHZZmbMNXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlwsAng5NonPnanXytKV+/CivyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWZiNTExZDAtM2MzNy0z MzVjLWJhMGItNDQyZTk4MTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMw0TR8VdLX3ys3Y+Z4ltixY2NzvS+h55thk5yzdCCh0Zt/CBY5G6Vu lEt+KM1M1UHWbJTmd2oBf1g+gNsMJMViX39TGX6RhSeCFf2Q4MyFDiaILd7ZEeOm qHHTXrC/BHza8LbojCV7HvnsJ35ShA8PrlYSKzEfqrpf6Qp43gAT3KuWRHxBrQym QNuyxMYXbRdGdZ3mY/fStl5Y7gry+kmcYf2laieaLWgnPid0URMHNGlZcBTEGl5H zWIRuDwHUsH5i931u0w+O7x0YObYQxiADx/VpAGykDCnlS7x63xKFMIDtdUgujgL W5WtTu8CrerjKRcDzGX+EFwBP9i+T+s= -----END CERTIFICATE-----Generated at Thu Jun 25 03:45:15 2026 by rpki-client