$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa File: 6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa (raw, json) Hash identifier: J2+ylFJ42oxrTp+1UXKjH+atvPfwQUsJOzVtRjfeckQ= Subject key identifier: 17:72:2F:D6:9D:FD:DE:6B:B3:B7:BE:DC:07:FC:3C:30:2E:44:E5:DC Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C22372C0C9BB43B4A500 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.89.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:23:72:c0:c9:bb:43:b4:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3c3a647d-ba68-4103-b829-5dfdc972b8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:92:82:21:ce:0f:8b:2d:97:cb:6f:09:92: bf:da:4c:1b:32:5f:7f:cf:56:fc:6a:4e:6f:13:15: b5:c5:36:58:4f:2d:fd:ce:5b:18:c8:5c:6f:1b:e9: 90:b9:05:5a:3d:71:fc:f9:22:90:d8:90:82:0e:25: 4c:d2:1f:d1:67:ad:66:94:df:58:32:9a:b4:31:3e: 8d:a2:d1:bf:99:2a:ea:41:b6:da:1a:67:d3:87:49: 6e:3c:da:39:5e:1e:19:a5:e8:b4:62:9a:c6:dd:d0: 1e:c0:d1:93:91:32:3e:67:ea:a4:ff:2d:98:e6:2b: 90:6a:a4:13:d3:74:4a:4c:d8:a2:96:6a:47:54:a2: 7c:ad:a3:03:3e:4e:d1:93:0c:56:2e:32:da:13:52: 56:59:1b:f4:74:66:53:f5:84:c8:ee:ca:1f:e8:49: 2f:df:f5:8a:55:55:1e:ef:b4:cf:36:ea:bc:fb:d2: 19:fc:79:db:06:84:74:ec:4c:90:96:d9:27:a2:6b: d8:29:ca:f1:e7:8b:34:3b:aa:49:d7:e6:69:0c:3b: 35:a5:b2:d6:33:1a:74:e4:2d:e2:2e:a7:41:6d:9c: 4d:5d:84:ef:b7:ce:95:91:b8:c2:99:76:f7:3c:0a: fd:ef:5f:77:4d:50:24:b2:05:50:2d:c7:c3:04:97: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:2F:D6:9D:FD:DE:6B:B3:B7:BE:DC:07:FC:3C:30:2E:44:E5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:39:a7:1b:c8:6f:67:61:32:1c:0c:b8:7e:c8:06:dc:fa:0a: a6:03:40:d8:7d:52:10:1c:ee:f2:d9:61:f1:da:f0:bc:2c:1b: 29:e3:ca:25:67:38:b4:5c:f2:cf:ad:1f:a8:ed:52:b6:ca:1c: 3e:5c:d2:5a:f9:20:13:ca:9a:97:0e:3a:b1:9e:23:22:5c:bd: e7:34:0d:42:48:8f:14:9c:d1:1e:04:1b:17:01:b2:69:0b:10: a7:cf:1b:f0:6b:95:f1:51:1d:43:2a:e9:3b:a6:dd:6c:21:75: 69:22:42:7a:38:ec:ff:2f:04:fa:6f:02:86:35:f4:9e:05:db: 2f:93:cd:5e:e5:bf:3e:9c:26:20:11:ab:6e:73:bd:9e:e0:3f: 3f:29:94:c7:74:ff:49:90:bc:67:8b:a9:8a:90:57:08:3b:17: e2:5a:c9:39:7c:30:27:37:e1:80:3d:8d:e3:e6:e2:ee:56:f0: 1a:ff:fe:de:91:c7:58:45:c1:67:26:8c:fd:dc:41:a6:25:c7: cf:6f:15:f5:18:32:23:bf:67:e9:3e:80:8b:72:a2:54:9e:4b: 6a:78:36:7c:51:c6:f2:67:11:1d:fc:0d:37:79:56:06:17:63: 9a:3f:3e:e0:8d:5e:fd:c6:51:bb:5c:c0:54:24:7d:20:0e:ac: 68:ed:91:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8IjcsDJu0O0pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2MzYTY0N2QtYmE2OC00MTAzLWI4MjktNWRmZGM5NzJiOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifqSgiHOD4stl8tvCZK/2kwbMl9/z1b8ak5v ExW1xTZYTy39zlsYyFxvG+mQuQVaPXH8+SKQ2JCCDiVM0h/RZ61mlN9YMpq0MT6N otG/mSrqQbbaGmfTh0luPNo5Xh4Zpei0YprG3dAewNGTkTI+Z+qk/y2Y5iuQaqQT 03RKTNiilmpHVKJ8raMDPk7RkwxWLjLaE1JWWRv0dGZT9YTI7sof6Ekv3/WKVVUe 77TPNuq8+9IZ/HnbBoR07EyQltknomvYKcrx54s0O6pJ1+ZpDDs1pbLWMxp05C3i LqdBbZxNXYTvt86VkbjCmXb3PAr97193TVAksgVQLcfDBJcc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdyL9ad/d5rs7e+3Af8PDAuROXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNmM4YTQ2OTQtMDBkZC0z ZTFjLTlkZTItYzdlYzQ3NTJkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGFk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo5pxvIb2dhMhwMuH7IBtz6CqYDQNh9UhAc7vLZYfHa8LwsGynjyiVn OLRc8s+tH6jtUrbKHD5c0lr5IBPKmpcOOrGeIyJcvec0DUJIjxSc0R4EGxcBsmkL EKfPG/BrlfFRHUMq6Tum3WwhdWkiQno47P8vBPpvAoY19J4F2y+TzV7lvz6cJiAR q25zvZ7gPz8plMd0/0mQvGeLqYqQVwg7F+JayTl8MCc34YA9jePm4u5W8Br//t6R x1hFwWcmjP3cQaYlx89vFfUYMiO/Z+k+gItyolSeS2p4NnxRxvJnER38DTd5VgYX Y5o/PuCNXv3GUbtcwFQkfSAOrGjtkYk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:29 2025 by rpki-client