$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5427c590-7034-3995-b9c8-ca8d26bd84d2.roa File: 5427c590-7034-3995-b9c8-ca8d26bd84d2.roa (raw, json) Hash identifier: lVTOvrFH+UuhMfprcEdznV1kAU2mSCtoPGav2eNBjnE= Subject key identifier: 3C:5C:7D:ED:9E:E4:EE:8A:4C:3B:34:A0:C4:29:F0:74:DD:F7:8E:3E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B915EE35AFE7B3657B80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5427c590-7034-3995-b9c8-ca8d26bd84d2.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 69.50.244.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b9:15:ee:35:af:e7:b3:65:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=665963c2-d1c3-4c89-b8cb-080a1e6ea28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:ae:bc:23:a6:58:77:1c:4b:e8:b7:50:31: a1:1b:5d:6c:5d:17:57:7f:72:27:75:84:0d:6f:77: 77:12:ac:de:7d:e6:e0:1b:bd:1f:b0:c0:07:08:4b: 63:00:83:2d:cf:17:25:87:ef:d1:ac:92:fe:18:16: 5f:23:a4:ee:a3:b2:53:ae:b8:6f:c4:4d:f3:62:fd: ca:00:f5:d5:8f:33:06:1b:df:ab:36:04:6d:31:78: 7b:41:81:7e:7d:3c:79:40:3b:e1:72:f9:e3:34:bf: 61:bb:e2:73:ca:fc:ba:e3:94:7c:16:36:fa:1d:79: 5b:6a:04:52:88:cc:35:fe:48:b2:85:88:23:5a:93: cd:ef:80:87:25:71:4d:3c:31:98:f0:2f:ac:d9:82: 70:10:08:0b:04:fd:b8:bd:d1:9f:5c:48:0e:a4:aa: 06:34:ad:30:f2:c3:2a:8d:61:ed:21:95:47:49:a8: df:00:31:9b:18:8a:cb:fa:83:e8:da:a2:54:06:52: 27:1b:e8:c0:38:b7:8b:6b:29:b4:b6:fc:d1:de:7d: 83:a8:56:b6:04:40:89:ef:f6:34:4f:fd:b6:63:10: d4:7c:79:7d:d1:e7:e9:03:3c:d2:8e:81:49:48:b1: a4:f0:78:7d:18:d2:d0:49:f7:22:bb:2e:27:32:53: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5C:7D:ED:9E:E4:EE:8A:4C:3B:34:A0:C4:29:F0:74:DD:F7:8E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5427c590-7034-3995-b9c8-ca8d26bd84d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 69.50.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:90:f8:d2:7e:db:8d:76:5f:c8:1f:e2:9e:8a:66:65:b0:ee: 2a:78:80:1f:86:a2:37:2f:d8:fd:e6:7a:74:07:8b:93:00:e6: f1:b5:b6:e7:35:c0:ca:0d:e7:b6:7c:16:2b:25:11:46:ad:1a: ec:8b:fd:33:f5:20:ab:4d:a9:97:15:e6:8a:62:bd:bb:dc:3e: 38:81:63:fe:0a:85:f7:c6:39:5e:58:c8:7e:01:fa:04:5e:c6: eb:f8:90:5a:77:0c:cb:e3:1c:2e:af:2e:03:55:55:90:4e:8f: a8:5a:27:1c:8b:15:46:ff:44:02:45:06:cb:cf:45:bb:b1:01: f2:2b:7c:ef:0a:56:b1:d6:d6:2b:88:f0:57:24:85:3f:1d:ce: 7e:df:78:53:d6:0b:ac:45:64:9f:0c:64:07:37:54:fc:fa:84: 61:86:78:e5:33:30:c4:78:5e:3a:d2:d8:7d:28:e0:25:c8:bb: 49:40:69:41:06:b0:7f:2e:63:76:25:ee:7f:f0:22:c2:4d:65: c5:25:dd:5e:4b:c0:dc:21:d3:18:26:42:20:3d:f8:a8:a0:d9: b6:0f:74:79:5f:2a:4d:3f:c1:24:89:88:be:41:af:43:7f:62: a5:09:0e:8b:3e:d3:36:8f:70:8a:d5:a3:2d:92:63:55:9a:67: 1c:a4:0c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7kV7jWv57Nle4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NjY1OTYzYzItZDFjMy00Yzg5LWI4Y2ItMDgwYTFlNmVhMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcWuvCOmWHccS+i3UDGhG11sXRdXf3IndYQN b3d3EqzefebgG70fsMAHCEtjAIMtzxclh+/RrJL+GBZfI6Tuo7JTrrhvxE3zYv3K APXVjzMGG9+rNgRtMXh7QYF+fTx5QDvhcvnjNL9hu+Jzyvy645R8Fjb6HXlbagRS iMw1/kiyhYgjWpPN74CHJXFNPDGY8C+s2YJwEAgLBP24vdGfXEgOpKoGNK0w8sMq jWHtIZVHSajfADGbGIrL+oPo2qJUBlInG+jAOLeLaym0tvzR3n2DqFa2BECJ7/Y0 T/22YxDUfHl90efpAzzSjoFJSLGk8Hh9GNLQSfciuy4nMlN+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxcfe2e5O6KTDs0oMQp8HTd944+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNTQyN2M1OTAtNzAzNC0z OTk1LWI5YzgtY2E4ZDI2YmQ4NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRTL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSQ+NJ+2412X8gf4p6KZmWw7ip4gB+Gojcv2P3menQHi5MA5vG1tuc1 wMoN57Z8FislEUatGuyL/TP1IKtNqZcV5opivbvcPjiBY/4KhffGOV5YyH4B+gRe xuv4kFp3DMvjHC6vLgNVVZBOj6haJxyLFUb/RAJFBsvPRbuxAfIrfO8KVrHW1iuI 8FckhT8dzn7feFPWC6xFZJ8MZAc3VPz6hGGGeOUzMMR4XjrS2H0o4CXIu0lAaUEG sH8uY3Yl7n/wIsJNZcUl3V5LwNwh0xgmQiA9+Kig2bYPdHlfKk0/wSSJiL5Br0N/ YqUJDos+0zaPcIrVoy2SY1WaZxykDJ0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:21 2025 by rpki-client