$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa File: 3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa (raw, json) Hash identifier: YT3E5eDiMUUwUnYw/J3k2fE5h25v0ZTbo/cqNO1PUeM= Subject key identifier: 77:68:01:76:DC:BA:AA:BD:79:D3:9A:0F:8C:E8:7D:68:7C:4B:5F:38 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C24733E103FE63306440 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.244.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:47:33:e1:03:fe:63:30:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=6b246464-37fd-46d4-b6bb-b42ed2cbd318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:99:27:a3:02:b6:f1:45:c1:48:c2:e2:20: 11:e7:91:dd:cb:da:44:0f:d7:2d:87:d3:a4:ba:6a: 9a:69:40:6e:98:ea:63:39:ce:df:83:59:5a:10:50: 10:91:f0:f0:f9:bf:98:90:58:55:eb:b5:55:41:ae: 20:fa:0a:19:cd:f3:67:f4:0e:66:9d:8c:11:5d:7f: 46:47:54:54:ef:19:3f:c5:00:ee:51:cf:95:87:bb: f5:e2:c8:b9:42:7b:1f:ca:18:d1:1b:54:28:b0:fa: ed:26:ab:a1:f0:80:a0:44:bc:e2:05:0c:9d:41:ad: d3:18:59:f9:73:0c:e3:0b:ca:37:e0:3d:b0:50:69: 1d:e1:3c:49:b9:78:7f:10:5b:b4:4c:0a:b8:6a:ae: 65:09:db:a7:2f:4c:e5:f2:03:9b:e2:0c:a4:6e:1b: c8:c5:38:f0:5a:e8:00:3a:82:cb:ba:b0:3e:a9:6e: f9:68:11:76:ff:33:b4:11:c4:74:a1:fa:20:70:de: 75:79:3a:69:aa:83:fa:d0:0e:ab:29:dc:dc:58:42: 47:24:8b:24:d4:bc:ab:60:9d:fa:b5:cf:d4:92:c8: f9:6c:51:87:16:53:98:b9:6a:ed:b8:48:3b:e3:a2: 32:46:a8:df:12:7b:57:1d:07:89:a9:22:a8:b2:c0: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:68:01:76:DC:BA:AA:BD:79:D3:9A:0F:8C:E8:7D:68:7C:4B:5F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7a:ee:1f:e3:70:f0:9f:48:5f:04:7b:8a:e0:fd:f1:ae:1c: 0c:98:7e:be:d2:83:3b:3d:4e:0d:1e:68:e2:83:c7:f7:03:7a: 8a:ee:87:af:82:e3:30:e3:37:e0:8d:e0:16:d8:4b:8e:65:bc: d2:a7:25:9c:b5:a6:39:71:a1:83:b2:22:20:e0:b7:80:f7:47: 01:a3:58:67:4f:1b:1e:06:5c:b9:12:af:4a:e2:3a:7c:10:05: 40:9a:d0:91:98:cd:72:6d:b3:ed:47:f3:0b:1f:ec:05:00:d5: 5e:88:35:60:28:a6:18:de:c8:72:7c:b9:22:cc:29:8f:e6:e9: f0:b7:16:af:e7:96:23:72:d2:08:cd:8d:35:57:5e:f4:00:39: 5b:b1:5b:2d:4d:c0:ca:be:50:ee:b1:8a:d0:41:28:77:ad:5a: 02:90:e8:d8:f3:5c:eb:83:de:f4:c8:e1:2f:e9:b4:e2:fc:5e: 69:89:a7:9a:81:d8:4f:7a:ec:15:50:da:85:6f:51:b5:dc:cd: f0:0a:c1:61:51:00:1b:c2:0d:aa:48:22:f5:5e:9a:67:62:21: 24:64:8f:2c:b3:4b:97:13:08:10:d8:d4:30:ca:e7:54:35:34: 59:46:c6:a3:0f:ab:f8:d2:e9:71:2e:6c:dc:3b:e5:93:5f:a3: 07:55:30:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8JHM+ED/mMwZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NmIyNDY0NjQtMzdmZC00NmQ0LWI2YmItYjQyZWQyY2JkMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/mZJ6MCtvFFwUjC4iAR55Hdy9pED9cth9Ok umqaaUBumOpjOc7fg1laEFAQkfDw+b+YkFhV67VVQa4g+goZzfNn9A5mnYwRXX9G R1RU7xk/xQDuUc+Vh7v14si5QnsfyhjRG1QosPrtJquh8ICgRLziBQydQa3TGFn5 cwzjC8o34D2wUGkd4TxJuXh/EFu0TAq4aq5lCdunL0zl8gOb4gykbhvIxTjwWugA OoLLurA+qW75aBF2/zO0EcR0ofogcN51eTppqoP60A6rKdzcWEJHJIsk1LyrYJ36 tc/Uksj5bFGHFlOYuWrtuEg746IyRqjfEntXHQeJqSKossAPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdoAXbcuqq9edOaD4zofWh8S184MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2FmMTRjM2YtZTNlNy0z MzMyLWI5YmItOWQ5N2ZhNWU4ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt67h/jcPCfSF8Ee4rg/fGuHAyYfr7Sgzs9Tg0eaOKDx/cDeoruh6+C 4zDjN+CN4BbYS45lvNKnJZy1pjlxoYOyIiDgt4D3RwGjWGdPGx4GXLkSr0riOnwQ BUCa0JGYzXJts+1H8wsf7AUA1V6INWAophjeyHJ8uSLMKY/m6fC3Fq/nliNy0gjN jTVXXvQAOVuxWy1NwMq+UO6xitBBKHetWgKQ6NjzXOuD3vTI4S/ptOL8XmmJp5qB 2E967BVQ2oVvUbXczfAKwWFRABvCDapIIvVemmdiISRkjyyzS5cTCBDY1DDK51Q1 NFlGxqMPq/jS6XEubNw75ZNfowdVMKg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:20 2025 by rpki-client