$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa File: 7f1ad145-2f41-341d-8595-a8d6dba4792b.roa (raw, json) Hash identifier: aciRkW9W1X4v1H51B7J9+nmqofbpp82OGRaSgD21FGM= Subject key identifier: B8:C6:9C:61:8F:40:81:7C:0C:38:D5:73:BE:79:C4:9B:8D:3F:DE:F3 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B79ED438B7A926C8DB00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.244.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b7:9e:d4:38:b7:a9:26:c8:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2f7669aa-d7ef-47c9-a3b8-daa9d5c0bb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:2f:9c:b6:02:8f:7a:d6:3f:ea:4e:f6:40: 31:bf:d6:81:86:45:d5:45:c4:db:b2:35:f4:0b:e1: 72:28:50:16:5f:0e:08:aa:4b:ab:4e:58:0e:96:aa: a9:58:a5:21:49:11:87:28:2a:23:a7:33:54:51:c1: 44:41:e9:7b:b5:69:e1:49:fc:6b:96:2c:b8:4e:a1: 24:8c:b9:d7:86:76:0f:29:d6:f0:ff:e5:ff:78:fa: 03:32:82:dd:ab:cf:20:e6:97:f0:a1:ab:17:90:df: ae:bf:c8:ba:76:a1:b4:6c:77:d5:ff:d7:d1:dc:9c: 81:c9:48:71:f2:2c:67:c0:0c:4e:d1:65:80:03:85: 77:03:85:9e:1a:b0:eb:28:db:8e:2e:14:f7:42:f8: ce:56:80:c2:f6:83:f0:d3:48:ff:31:c7:0c:f6:2a: 7c:89:f3:ed:0c:92:f2:94:7b:b6:c2:72:02:b8:93: db:88:26:d1:8a:f9:84:d6:39:bc:4c:8f:68:65:22: 55:1d:f4:44:94:7b:0d:c4:9f:9f:c7:12:5a:6b:01: a9:c6:97:7a:de:80:13:04:6d:3c:fa:62:f8:1e:b7: c3:70:bd:96:c8:96:f2:2b:70:b8:92:dc:d9:7d:ba: 17:72:dc:ce:88:a3:ae:b5:2e:2f:92:9b:0d:c3:73: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C6:9C:61:8F:40:81:7C:0C:38:D5:73:BE:79:C4:9B:8D:3F:DE:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:72:6d:9f:51:8a:9f:ca:db:f5:05:26:e5:8c:b4:e0:c3:bf: 14:53:2e:e6:b3:3d:66:85:4b:09:66:3a:4e:db:d8:b3:a7:b6: fe:22:9a:5e:5a:81:16:de:15:ac:9c:89:7e:fe:24:ea:8c:d2: 51:8e:7c:00:de:c7:a5:8c:93:1f:d0:47:82:eb:d1:00:32:a0: fc:1a:da:d4:2a:bd:f9:d9:6f:1c:aa:52:8f:99:6e:ee:65:30: 65:10:68:ec:a3:7a:e6:92:a6:5f:3e:be:2f:8a:07:bd:bc:c4: f6:9e:68:ad:38:67:34:8f:09:d3:e3:7f:2b:b9:6d:23:03:0f: 16:1d:77:b3:17:b1:2c:26:61:2d:48:64:f3:12:66:12:53:70: 8e:e9:60:a2:99:84:b9:c1:a8:94:0c:59:d9:15:92:bd:6a:c2: 97:9a:90:2f:ff:f7:c9:d8:50:58:2c:3c:a9:71:7c:0f:7a:97: 58:38:fa:75:2c:a0:fd:0d:f7:1f:e6:a0:39:ba:9c:5c:6b:b3: 6d:e2:58:21:10:81:94:8a:f8:6a:0b:b7:7b:ed:07:79:44:37: 75:75:a6:9b:03:40:96:28:00:bb:28:c7:ab:4c:ab:c7:8d:78: ef:b9:8b:6e:84:8c:dd:9d:9c:58:84:25:06:48:9e:26:d6:9c: dd:77:db:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7ee1Di3qSbI2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmY3NjY5YWEtZDdlZi00N2M5LWEzYjgtZGFhOWQ1YzBiYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvIvnLYCj3rWP+pO9kAxv9aBhkXVRcTbsjX0 C+FyKFAWXw4IqkurTlgOlqqpWKUhSRGHKCojpzNUUcFEQel7tWnhSfxrliy4TqEk jLnXhnYPKdbw/+X/ePoDMoLdq88g5pfwoasXkN+uv8i6dqG0bHfV/9fR3JyByUhx 8ixnwAxO0WWAA4V3A4WeGrDrKNuOLhT3QvjOVoDC9oPw00j/MccM9ip8ifPtDJLy lHu2wnICuJPbiCbRivmE1jm8TI9oZSJVHfRElHsNxJ+fxxJaawGpxpd63oATBG08 +mL4HrfDcL2WyJbyK3C4ktzZfboXctzOiKOutS4vkpsNw3MrYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjGnGGPQIF8DDjVc755xJuNP97zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvN2YxYWQxNDUtMmY0MS0z NDFkLTg1OTUtYThkNmRiYTQ3OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNybZ9Rip/K2/UFJuWMtODDvxRTLuazPWaFSwlmOk7b2LOntv4iml5a gRbeFayciX7+JOqM0lGOfADex6WMkx/QR4Lr0QAyoPwa2tQqvfnZbxyqUo+Zbu5l MGUQaOyjeuaSpl8+vi+KB728xPaeaK04ZzSPCdPjfyu5bSMDDxYdd7MXsSwmYS1I ZPMSZhJTcI7pYKKZhLnBqJQMWdkVkr1qwpeakC//98nYUFgsPKlxfA96l1g4+nUs oP0N9x/moDm6nFxrs23iWCEQgZSK+GoLt3vtB3lEN3V1ppsDQJYoALsox6tMq8eN eO+5i26EjN2dnFiEJQZInibWnN1320g= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:27 2025 by rpki-client