$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa File: 384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa (raw, json) Hash identifier: 8Wck/YMHR1642hkee2koenRUo2PkruUYVjN0FVygBZM= Subject key identifier: FA:2F:ED:7A:5A:C2:19:E4:8A:76:28:88:47:64:11:9B:0C:EC:DA:EC Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C2554D0CF72737EAA940 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 69.50.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:55:4d:0c:f7:27:37:ea:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4e25d45b-d302-4f1a-8fbb-74294ec74716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:bc:eb:65:c5:45:5f:d2:68:98:4e:f6:81: fd:bb:14:c1:c7:e1:fd:84:e7:62:72:63:d8:cf:b5: bd:8a:7e:98:7a:22:91:fa:26:21:4e:97:da:ab:8a: 31:44:b6:53:1f:c0:fc:c6:89:bd:a0:e0:35:83:13: b8:d9:2a:91:74:9d:72:53:d6:31:b6:5f:99:4d:ad: 03:a5:e4:cd:55:4a:67:72:89:27:25:d1:2c:2a:1d: e3:45:20:48:79:f4:d9:d3:dc:c7:5e:bd:4b:a2:12: b2:12:33:a8:fb:3e:87:11:bf:6f:11:a0:bf:19:0d: 87:bf:b5:b1:a4:ef:98:36:51:cd:df:e1:31:a5:a5: cd:68:fd:a9:72:05:d8:e5:c0:b1:d6:c9:5f:63:40: 0d:29:0f:54:98:d9:ea:8d:9d:3e:1b:10:1a:b8:19: 4d:47:d0:4f:53:30:83:38:d4:bc:4e:4a:7f:9b:2b: 45:50:32:e4:89:9c:ac:6d:b8:83:f2:11:79:9f:57: 6f:b5:9d:f5:ed:ff:bd:12:d6:cb:9b:29:bf:06:cf: b1:4c:ef:69:b4:a5:b3:79:58:83:ab:19:7c:c0:5d: 2a:ee:2b:0a:1b:97:73:f0:7f:7f:55:b8:a4:92:85: d6:98:f8:70:09:31:b5:c7:99:6d:15:2c:e2:e8:6f: 25:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2F:ED:7A:5A:C2:19:E4:8A:76:28:88:47:64:11:9B:0C:EC:DA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 69.50.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:49:56:39:37:c9:00:ef:5f:77:6a:92:7c:63:f6:55:18:9d: f1:fb:47:dc:4a:47:32:f5:6c:05:69:b1:35:cf:34:60:f8:65: 65:3b:57:a9:64:27:50:0b:10:1e:fa:47:4e:f3:33:36:3a:e3: 6c:37:18:1e:8e:db:e6:74:15:0e:c0:77:0e:0c:2c:b8:0e:06: b6:64:18:6e:af:fa:f0:3d:b0:50:3c:30:d5:0a:fb:9c:ce:46: eb:23:02:34:47:e1:a0:14:b5:d3:65:f2:94:1f:60:0f:44:0b: 20:05:34:e9:94:52:d2:39:45:93:4a:32:fb:bc:29:5d:57:d8: 95:d0:b2:49:4b:2e:38:29:16:8d:d8:cb:c7:30:f6:a1:61:cf: 3a:50:0d:ce:5e:e6:59:86:39:70:82:f2:d7:16:22:e4:c0:fe: 5a:72:3c:11:56:eb:fe:d0:c2:86:f7:7e:4f:d6:76:ef:6d:76: 33:70:43:f8:0d:9f:5d:f9:3c:33:ce:51:29:ab:cc:7b:25:70: 08:ac:e5:a0:7d:45:8f:89:97:f5:4c:4e:7c:84:af:a2:46:c3: 16:59:63:12:55:99:e6:c9:17:ae:a9:74:ad:26:84:9c:21:59: 10:34:58:cb:e1:ac:28:31:3d:eb:50:42:7c:68:39:5a:07:0c: b0:5c:ac:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8JVTQz3JzfqqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGUyNWQ0NWItZDMwMi00ZjFhLThmYmItNzQyOTRlYzc0NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+m862XFRV/SaJhO9oH9uxTBx+H9hOdicmPY z7W9in6YeiKR+iYhTpfaq4oxRLZTH8D8xom9oOA1gxO42SqRdJ1yU9Yxtl+ZTa0D peTNVUpncoknJdEsKh3jRSBIefTZ09zHXr1LohKyEjOo+z6HEb9vEaC/GQ2Hv7Wx pO+YNlHN3+ExpaXNaP2pcgXY5cCx1slfY0ANKQ9UmNnqjZ0+GxAauBlNR9BPUzCD ONS8Tkp/mytFUDLkiZysbbiD8hF5n1dvtZ317f+9EtbLmym/Bs+xTO9ptKWzeViD qxl8wF0q7isKG5dz8H9/VbikkoXWmPhwCTG1x5ltFSzi6G8lowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPov7XpawhnkinYoiEdkEZsM7NrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzg0ZjQxZTMtOThmNi0z Y2VhLTkwZjUtM2Q4N2U5ZmRkNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRTLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZJVjk3yQDvX3dqknxj9lUYnfH7R9xKRzL1bAVpsTXPNGD4ZWU7V6lk J1ALEB76R07zMzY642w3GB6O2+Z0FQ7Adw4MLLgOBrZkGG6v+vA9sFA8MNUK+5zO RusjAjRH4aAUtdNl8pQfYA9ECyAFNOmUUtI5RZNKMvu8KV1X2JXQsklLLjgpFo3Y y8cw9qFhzzpQDc5e5lmGOXCC8tcWIuTA/lpyPBFW6/7Qwob3fk/Wdu9tdjNwQ/gN n135PDPOUSmrzHslcAis5aB9RY+Jl/VMTnyEr6JGwxZZYxJVmebJF66pdK0mhJwh WRA0WMvhrCgxPetQQnxoOVoHDLBcrEo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:46 2025 by rpki-client