$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa File: b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa (raw, json) Hash identifier: D2DoKojK8q3AG8lZ3Bmfcb+uv6ZLCTtiKC6pK20vEMw= Subject key identifier: 8C:70:24:B4:B3:D1:3D:3B:BF:39:14:DB:1C:95:18:64:35:E5:95:82 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C21072BD4390863D1A00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.89.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:10:72:bd:43:90:86:3d:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a0535fd2-5939-421a-9af4-fcf69f0cd3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:1c:2d:0e:be:18:53:6a:32:52:62:97:03: f8:47:a8:78:47:9f:bf:80:a1:e3:9a:86:99:1b:da: c1:3b:37:dd:6b:19:0e:c4:2a:c8:d9:14:70:51:2c: 93:87:66:0d:bd:5e:08:ce:8b:f5:a1:06:be:e1:31: 68:4c:4a:bf:36:5e:e8:c3:61:4c:46:53:6b:43:33: 72:72:01:3d:ca:f5:1e:be:14:ed:8c:37:7e:a5:50: bc:65:20:da:2c:ac:13:52:de:66:81:80:40:99:09: ba:14:4b:e2:b0:00:20:ce:ca:d5:23:80:f7:a6:4c: d5:64:55:53:84:8e:e3:55:30:52:b7:a6:47:ec:92: bc:81:09:fd:bd:97:cf:7e:69:36:44:9a:3c:69:fd: cd:87:e7:82:f6:44:fc:15:7e:49:ff:2c:c6:17:e7: b9:15:ab:05:18:d9:2b:0f:60:71:d5:4a:1a:cb:8f: bb:4f:20:fb:22:04:57:20:26:d4:30:25:1f:2d:e4: 06:78:ca:b1:d3:ca:39:04:8a:65:89:95:ba:69:a0: b4:de:d9:78:7b:52:63:27:ec:5b:af:b9:49:44:53: a8:23:c2:fc:1d:be:3b:71:d4:41:68:c5:98:44:f3: c1:f1:66:c9:7f:44:ac:b5:41:5f:ce:2e:79:ea:6b: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:24:B4:B3:D1:3D:3B:BF:39:14:DB:1C:95:18:64:35:E5:95:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:67:36:c7:7c:4c:2e:bb:1a:ff:5b:70:60:41:96:c7:ca:8e: 9f:38:d8:4e:99:79:58:c3:a6:9a:cd:37:6a:3d:fb:0b:86:9e: bb:0f:14:fd:a3:02:46:7c:2a:10:6f:91:84:ef:25:6a:44:76: 61:b9:5e:4a:73:e3:d8:25:b3:b9:e8:21:32:0f:aa:e1:67:98: 3c:45:2f:d8:0a:c5:a2:69:c6:29:19:23:81:26:fd:ac:e1:9e: 5b:3e:43:93:9f:f2:f7:b6:3c:4c:ee:05:8a:9b:18:65:0f:94: 12:07:57:ed:e8:1e:b8:6a:e4:f2:c4:bf:4d:49:6b:aa:a7:fa: 54:b2:73:8c:6b:29:cc:f5:8e:14:b8:47:20:12:03:e5:e2:ae: 2c:d7:7d:ea:1b:b0:f4:b4:04:3e:3b:a1:77:57:10:f2:23:ac: 7f:6e:20:37:80:d0:c4:a5:f7:5c:e6:e4:46:10:9c:cd:c4:69: e5:14:56:1b:50:50:b9:16:0e:e4:b0:1a:3a:28:86:fe:10:21: c5:c7:44:67:42:19:dc:6a:f9:ea:b4:80:ba:50:99:d0:f7:f7: e0:dd:b6:92:02:14:82:b5:b5:c1:8d:51:ba:f1:1a:02:a8:44: d7:c0:6d:d2:b0:95:f8:c1:d4:49:fd:6e:d2:d8:5a:5a:c0:07: 9c:53:6a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8IQcr1DkIY9GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTA1MzVmZDItNTkzOS00MjFhLTlhZjQtZmNmNjlmMGNkM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurkcLQ6+GFNqMlJilwP4R6h4R5+/gKHjmoaZ G9rBOzfdaxkOxCrI2RRwUSyTh2YNvV4Izov1oQa+4TFoTEq/Nl7ow2FMRlNrQzNy cgE9yvUevhTtjDd+pVC8ZSDaLKwTUt5mgYBAmQm6FEvisAAgzsrVI4D3pkzVZFVT hI7jVTBSt6ZH7JK8gQn9vZfPfmk2RJo8af3Nh+eC9kT8FX5J/yzGF+e5FasFGNkr D2Bx1Uoay4+7TyD7IgRXICbUMCUfLeQGeMqx08o5BIpliZW6aaC03tl4e1JjJ+xb r7lJRFOoI8L8Hb47cdRBaMWYRPPB8WbJf0SstUFfzi556ms/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxwJLSz0T07vzkU2xyVGGQ15ZWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjRlN2Y1Y2YtZGFhNC0z YzZkLTkyNWMtMmM4OTgyMGY2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9nNsd8TC67Gv9bcGBBlsfKjp842E6ZeVjDpprNN2o9+wuGnrsPFP2j AkZ8KhBvkYTvJWpEdmG5Xkpz49gls7noITIPquFnmDxFL9gKxaJpxikZI4Em/azh nls+Q5Of8ve2PEzuBYqbGGUPlBIHV+3oHrhq5PLEv01Ja6qn+lSyc4xrKcz1jhS4 RyASA+XirizXfeobsPS0BD47oXdXEPIjrH9uIDeA0MSl91zm5EYQnM3EaeUUVhtQ ULkWDuSwGjoohv4QIcXHRGdCGdxq+eq0gLpQmdD39+DdtpICFIK1tcGNUbrxGgKo RNfAbdKwlfjB1En9btLYWlrAB5xTakg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:20:49 2025 by rpki-client