$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa File: 40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa (raw, json) Hash identifier: eYQ02u2Qbv4Xse0HqcEbWqcIdmunUWX77XJp+pRjRSQ= Subject key identifier: 78:BA:60:29:BB:D7:97:24:B3:2D:1C:FB:17:19:84:8D:12:08:6B:A5 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C235586A2357FC676000 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.244.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:35:58:6a:23:57:fc:67:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=c9a06dc1-7876-4172-9eff-1c963b6aaec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:f5:c6:ab:9f:60:14:87:0d:39:fc:f2:e4: 70:d9:7e:5a:d1:e8:84:11:d0:7c:6f:78:bd:a3:a8: 19:32:24:a0:67:2e:e0:48:14:e2:04:bb:0f:0d:aa: 2d:dc:6b:83:df:64:90:43:3d:00:42:da:26:c4:52: 1d:02:b3:d9:f1:b4:18:05:b3:66:9a:21:53:e7:18: 74:93:68:d1:f1:08:00:fe:b7:73:b5:38:ff:cd:68: 4a:08:f7:9d:7c:d0:29:04:06:b8:fe:10:25:12:69: 6a:f6:e9:cd:47:ac:a6:65:45:f1:b1:fa:29:64:8c: 36:56:b4:b9:ae:00:bc:65:2d:f3:d1:5b:13:30:e9: 0e:35:01:5e:96:35:c7:4f:73:47:b7:fc:cc:24:97: 8b:07:b5:f7:42:5b:5f:19:d7:54:ef:38:5d:cb:66: 71:4c:c0:27:49:90:f5:e7:aa:45:fb:cf:7e:25:a7: f9:a9:e0:ef:c1:39:b2:85:1b:ca:52:d6:83:9a:a4: 16:a0:13:aa:5e:35:48:25:b2:ef:5c:9c:e8:1f:6a: 30:6b:7e:2c:58:7a:50:26:d1:b5:62:ad:ab:bf:cb: a1:f1:24:01:52:6a:c2:2d:8e:9c:af:a6:d0:ac:03: a3:8b:07:48:f4:fa:f5:76:d3:f6:d6:58:8b:94:c2: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BA:60:29:BB:D7:97:24:B3:2D:1C:FB:17:19:84:8D:12:08:6B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/40dfec9f-fb35-3c7d-b7c0-9951b5e5a13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f7:ba:8c:f8:ca:14:ae:78:f7:bd:6a:14:f3:b2:63:f5:9f: ab:ac:79:cf:fb:35:cb:0c:ba:40:57:36:0b:ec:78:4d:62:f4: b0:da:7a:00:22:d4:8a:e1:29:80:a9:f7:ee:d7:6a:90:b1:a2: 82:26:32:c9:2a:ca:30:c9:45:20:f3:02:cb:6e:41:d7:02:37: 6d:a8:18:af:ea:14:bf:28:19:82:aa:3a:8c:31:dc:6f:de:d3: e4:09:78:ee:a3:23:b3:4f:97:af:dd:9e:95:ea:fb:35:7a:d2: 86:3c:f3:b4:23:bd:5d:2f:1c:96:8d:b3:58:59:c5:12:f4:3f: bf:03:c0:4a:76:46:6a:8b:2a:b6:52:aa:17:29:bf:0e:14:a4: 0f:3a:32:4b:53:6a:45:f8:06:4b:28:7e:11:85:d1:e4:d4:0a: 16:7b:12:c0:fc:17:ba:9a:32:de:67:f1:03:24:4d:a9:19:75: 35:01:ae:ce:a9:3b:3d:ae:54:9d:7a:a1:93:3d:f0:1a:35:37: 53:b5:24:18:8f:7f:59:22:85:1a:fd:bf:4b:5d:1c:0f:55:ea: 27:f4:26:9a:b0:bc:12:5d:cb:bd:21:9b:fe:8a:1b:e9:b9:71: c1:f5:07:56:8e:92:df:0f:76:dc:5f:db:a9:10:b5:30:ce:2b: ec:20:68:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8I1WGojV/xnYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YzlhMDZkYzEtNzg3Ni00MTcyLTllZmYtMWM5NjNiNmFhZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdv1xqufYBSHDTn88uRw2X5a0eiEEdB8b3i9 o6gZMiSgZy7gSBTiBLsPDaot3GuD32SQQz0AQtomxFIdArPZ8bQYBbNmmiFT5xh0 k2jR8QgA/rdztTj/zWhKCPedfNApBAa4/hAlEmlq9unNR6ymZUXxsfopZIw2VrS5 rgC8ZS3z0VsTMOkONQFeljXHT3NHt/zMJJeLB7X3QltfGddU7zhdy2ZxTMAnSZD1 56pF+89+Jaf5qeDvwTmyhRvKUtaDmqQWoBOqXjVIJbLvXJzoH2owa34sWHpQJtG1 Yq2rv8uh8SQBUmrCLY6cr6bQrAOjiwdI9Pr1dtP21liLlMJcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi6YCm715cksy0c+xcZhI0SCGulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDBkZmVjOWYtZmIzNS0z YzdkLWI3YzAtOTk1MWI1ZTVhMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKD3uoz4yhSuePe9ahTzsmP1n6usec/7NcsMukBXNgvseE1i9LDaegAi 1IrhKYCp9+7XapCxooImMskqyjDJRSDzAstuQdcCN22oGK/qFL8oGYKqOowx3G/e 0+QJeO6jI7NPl6/dnpXq+zV60oY887QjvV0vHJaNs1hZxRL0P78DwEp2RmqLKrZS qhcpvw4UpA86MktTakX4BksofhGF0eTUChZ7EsD8F7qaMt5n8QMkTakZdTUBrs6p Oz2uVJ16oZM98Bo1N1O1JBiPf1kihRr9v0tdHA9V6if0JpqwvBJdy70hm/6KG+m5 ccH1B1aOkt8Pdtxf26kQtTDOK+wgaBo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:20:48 2025 by rpki-client