$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa File: 57aff851-18b2-3c97-924b-1cbb9ef8f281.roa (raw, json) Hash identifier: lmSaZOjeJgjCUgl3u/8hHIZm+Hbhe9Y4YlkWka2ahPQ= Subject key identifier: 65:F4:7E:98:AC:E2:D9:BC:09:DE:5A:8B:AD:6D:9C:04:52:46:82:30 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B7C214BC0B98C09D9380 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 69.50.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b7:c2:14:bc:0b:98:c0:9d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3f55ee1c-bd55-4158-867f-6344677a01c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:83:49:59:4f:59:e7:b3:fd:c8:00:25:31: 18:c5:93:48:61:ca:db:d2:a2:4d:ae:1f:e8:c2:b2: 45:46:d7:bb:f8:86:29:bc:e1:42:64:7b:f7:fa:1f: 99:7a:0a:5e:b4:09:29:14:97:5a:67:d3:a9:d0:57: 31:e1:82:9f:f5:dd:5c:30:e6:1c:2d:93:d0:d9:10: 7c:b9:b1:53:5a:bf:df:5b:ac:80:a4:b4:b4:e3:38: ef:97:bd:d2:c2:70:b8:16:d4:5c:c2:53:65:27:4c: 14:46:27:03:6e:7b:d0:c0:f8:c0:f0:02:79:74:67: 62:c2:ae:bd:0a:92:a1:55:00:c6:5a:b8:b4:a6:77: 62:82:6f:f1:3a:43:ef:d9:6a:75:d6:9d:3d:b4:11: d5:e2:44:af:ed:0b:9b:78:09:59:eb:d7:0d:e9:29: 08:df:ef:bf:26:97:7e:68:da:a9:75:71:19:76:d7: a4:05:76:96:8f:67:80:d4:ce:7a:47:d5:e5:51:2d: 61:19:d7:5e:1d:35:23:63:8e:84:bb:c3:ef:53:be: b0:4b:63:75:e9:f2:70:22:b6:07:c0:04:57:fc:b9: 64:6c:1d:f8:5e:a7:af:d5:68:c5:11:e5:04:6c:36: dc:38:58:60:ee:6b:6b:2a:16:70:f9:8d:f6:22:ef: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F4:7E:98:AC:E2:D9:BC:09:DE:5A:8B:AD:6D:9C:04:52:46:82:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 69.50.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:28:4a:ed:13:3f:b9:71:74:6d:46:ac:f2:df:f9:50:90:35: 9a:96:2b:72:3e:06:09:43:47:e4:1c:fb:7b:80:12:97:7d:19: b2:21:a0:c0:f1:d5:d1:9d:4f:e5:f9:cc:cb:27:ec:fe:3b:01: c6:d4:d0:82:48:2f:f6:07:70:08:70:9a:45:3d:24:20:d7:46: 02:0f:a9:63:0e:62:0d:79:0e:c8:cd:51:b6:e9:eb:b3:b4:c0: 1b:26:53:3c:16:53:19:6c:11:3a:75:1b:0d:28:30:2f:68:87: f0:ce:a1:5a:a1:c4:6b:ac:74:b2:14:7c:5e:01:97:a6:74:2b: 96:46:b7:cc:bf:56:35:86:ac:f3:e2:15:b5:93:b7:58:ee:94: 9d:49:a6:02:d6:4b:58:a0:aa:84:9d:b0:70:b2:09:5f:8f:96: 92:19:2e:1b:3d:ff:60:00:81:54:7e:b2:9d:ea:a7:56:7c:73: fc:1f:04:d9:d1:6a:90:91:26:3a:a3:6d:2b:57:1f:96:68:c8: 52:17:32:63:5b:8e:e4:34:62:b2:80:46:7a:ea:66:67:a5:b4: 97:6d:5b:e7:16:eb:80:13:39:aa:7c:8d:cc:df:0d:eb:36:d5: 59:65:75:89:79:b9:03:86:11:b0:f2:b2:1a:8b:d5:a2:32:61: 09:0c:3c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7fCFLwLmMCdk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2Y1NWVlMWMtYmQ1NS00MTU4LTg2N2YtNjM0NDY3N2EwMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYiDSVlPWeez/cgAJTEYxZNIYcrb0qJNrh/o wrJFRte7+IYpvOFCZHv3+h+ZegpetAkpFJdaZ9Op0Fcx4YKf9d1cMOYcLZPQ2RB8 ubFTWr/fW6yApLS04zjvl73SwnC4FtRcwlNlJ0wURicDbnvQwPjA8AJ5dGdiwq69 CpKhVQDGWri0pndigm/xOkPv2Wp11p09tBHV4kSv7QubeAlZ69cN6SkI3++/Jpd+ aNqpdXEZdtekBXaWj2eA1M56R9XlUS1hGddeHTUjY46Eu8PvU76wS2N16fJwIrYH wARX/LlkbB34Xqev1WjFEeUEbDbcOFhg7mtrKhZw+Y32Iu/z6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX0fpis4tm8Cd5ai61tnARSRoIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNTdhZmY4NTEtMThiMi0z Yzk3LTkyNGItMWNiYjllZjhmMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRTLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkoSu0TP7lxdG1GrPLf+VCQNZqWK3I+BglDR+Qc+3uAEpd9GbIhoMDx 1dGdT+X5zMsn7P47AcbU0IJIL/YHcAhwmkU9JCDXRgIPqWMOYg15DsjNUbbp67O0 wBsmUzwWUxlsETp1Gw0oMC9oh/DOoVqhxGusdLIUfF4Bl6Z0K5ZGt8y/VjWGrPPi FbWTt1julJ1JpgLWS1igqoSdsHCyCV+PlpIZLhs9/2AAgVR+sp3qp1Z8c/wfBNnR apCRJjqjbStXH5ZoyFIXMmNbjuQ0YrKARnrqZmeltJdtW+cW64ATOap8jczfDes2 1VlldYl5uQOGEbDyshqL1aIyYQkMPOc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:22 2025 by rpki-client