$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3df2aef2-040c-3196-b784-769c22ffe82b.roa File: 3df2aef2-040c-3196-b784-769c22ffe82b.roa (raw, json) Hash identifier: 24FFCfvuJBMkhhr4Y/ZR0DXWWMyhTofIuPxwTKGfZPw= Subject key identifier: F0:E4:B3:6E:CC:D7:33:3B:DC:82:11:51:B0:8E:4C:9E:5E:AC:93:B4 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584ABD4BA931B19C3ECBC76ED4A0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3df2aef2-040c-3196-b784-769c22ffe82b.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 53508 IP address blocks: 24.244.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a9:31:b1:9c:3e:cb:c7:6e:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=b9fc1618-0ae6-4831-aefb-24111f2c6c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:b8:b8:b9:2c:64:09:03:40:3c:7b:7e:94: 2e:6c:e6:e7:b0:ab:ad:6a:cd:7d:9f:c3:49:de:e7: 3d:ec:f8:00:d0:4c:b7:98:47:fc:63:40:24:94:ad: 9c:e5:74:9e:f8:ed:be:da:52:94:e0:4d:56:c8:9d: ad:a7:35:f4:1a:91:6b:2d:d5:3b:17:85:20:fe:28: 4b:17:ac:0c:cd:cf:75:a5:7b:92:86:ae:f0:e4:27: 7a:82:25:29:8f:94:23:3c:d8:ec:ae:ce:bd:12:4b: 7b:e1:22:ef:c5:f7:50:73:68:2f:af:cf:ed:26:3d: 13:22:61:01:1a:55:e7:d0:74:bd:4c:0d:6c:a1:9f: fc:d4:c8:b5:e6:7e:0c:d7:31:32:ac:63:ba:a7:db: d2:86:77:6e:d3:3b:a4:20:c5:ee:e9:59:b2:b4:05: e9:af:28:23:36:f2:a7:d7:5a:c5:d8:32:31:a9:f6: bb:25:d6:22:06:65:59:1e:c7:b7:3a:f5:42:9d:5a: 12:79:72:ff:fc:81:3e:91:a4:aa:f5:17:8c:91:78: be:a8:f2:cd:1c:8d:48:56:64:57:5c:a9:04:85:bf: 2e:5f:ff:8a:6a:2f:d8:11:b5:aa:fb:1b:be:39:18: e4:10:0c:10:a5:a6:3b:de:56:a0:bc:8a:b2:79:a7: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E4:B3:6E:CC:D7:33:3B:DC:82:11:51:B0:8E:4C:9E:5E:AC:93:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3df2aef2-040c-3196-b784-769c22ffe82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:37:25:64:81:05:43:37:eb:6a:8f:16:72:91:93:40:a3:dc: db:33:b6:02:4c:47:a0:fb:ad:fd:71:09:7e:90:2f:8b:b4:81: 44:58:49:56:23:19:e1:44:19:e2:e3:23:01:e2:1b:d1:c3:53: 64:b9:ec:4c:f8:75:2f:ff:dd:af:6a:35:39:e3:74:38:71:94: a5:4f:c2:38:e0:4c:9d:41:54:ee:7c:80:81:cf:6a:d3:66:9a: 59:e5:3d:be:5a:eb:aa:05:5b:b7:92:ec:6d:0b:63:fa:4a:00: 96:5c:8d:c6:db:72:60:43:16:bf:22:dd:23:89:08:da:12:31: 93:1d:99:ee:83:20:b3:18:54:31:25:b0:da:c7:0c:19:52:e5: 76:02:0f:57:f3:7f:ef:7b:7a:a6:e3:b8:c4:47:31:30:ae:df: 05:90:23:f9:c8:bf:9a:ae:1b:c9:ef:1b:66:8c:76:48:13:75: 8c:92:19:64:79:1e:ef:28:88:7e:3b:49:b5:d9:fb:43:06:d3: ed:8e:d7:d8:fa:ab:66:81:ee:83:88:2e:0c:07:45:dd:95:b2: 7a:49:e9:d5:d5:74:34:50:a8:40:95:dd:d7:1a:c2:3a:91:10: 88:27:2b:ac:3e:aa:e9:25:52:87:ba:c1:99:06:06:fc:6f:33: 31:08:d0:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6kxsZw+y8du1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YjlmYzE2MTgtMGFlNi00ODMxLWFlZmItMjQxMTFmMmM2YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpu4uLksZAkDQDx7fpQubObnsKutas19n8NJ 3uc97PgA0Ey3mEf8Y0AklK2c5XSe+O2+2lKU4E1WyJ2tpzX0GpFrLdU7F4Ug/ihL F6wMzc91pXuShq7w5Cd6giUpj5QjPNjsrs69Ekt74SLvxfdQc2gvr8/tJj0TImEB GlXn0HS9TA1soZ/81Mi15n4M1zEyrGO6p9vShndu0zukIMXu6VmytAXprygjNvKn 11rF2DIxqfa7JdYiBmVZHse3OvVCnVoSeXL//IE+kaSq9ReMkXi+qPLNHI1IVmRX XKkEhb8uX/+Kai/YEbWq+xu+ORjkEAwQpaY73lagvIqyeafwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDks27M1zM73IIRUbCOTJ5erJO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2RmMmFlZjItMDQwYy0z MTk2LWI3ODQtNzY5YzIyZmZlODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk3JWSBBUM362qPFnKRk0Cj3NsztgJMR6D7rf1xCX6QL4u0gURYSVYj GeFEGeLjIwHiG9HDU2S57Ez4dS//3a9qNTnjdDhxlKVPwjjgTJ1BVO58gIHPatNm mlnlPb5a66oFW7eS7G0LY/pKAJZcjcbbcmBDFr8i3SOJCNoSMZMdme6DILMYVDEl sNrHDBlS5XYCD1fzf+97eqbjuMRHMTCu3wWQI/nIv5quG8nvG2aMdkgTdYySGWR5 Hu8oiH47SbXZ+0MG0+2O19j6q2aB7oOILgwHRd2VsnpJ6dXVdDRQqECV3dcawjqR EIgnK6w+quklUoe6wZkGBvxvMzEI0CU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:51 2025 by rpki-client