$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa File: dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa (raw, json) Hash identifier: 7XCd9W/2NyxxY19aZ1NHtTJi1s5Snl7QsrLd4Yk7mIE= Subject key identifier: 58:EB:D1:67:63:BE:1E:2C:AB:9B:E9:ED:D6:13:CE:06:07:6B:5D:DB Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B746797B569077133580 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b7:46:79:7b:56:90:77:13:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ee0985d3-a8f8-47ae-b999-2ab7d427f769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:41:45:bf:a3:82:d3:54:35:af:fc:eb:40: af:f2:8e:2c:0d:6e:48:8e:50:78:c6:84:da:e3:13: 86:0f:32:6f:9c:f3:f9:54:46:f9:1e:c5:b6:a7:22: 3f:f4:bb:57:ae:0e:21:9e:40:6d:e1:17:f2:a3:60: 44:64:15:7e:75:47:24:4f:e6:3e:fc:5a:fb:c8:22: 20:c0:55:d1:c2:d7:87:d9:05:03:45:a2:70:5e:0f: 01:e7:fd:52:14:85:ff:ce:45:8e:5e:41:23:4c:bf: 93:f4:2e:ea:90:cd:dd:80:1b:f5:75:c8:69:b2:fb: 6c:ee:c6:f1:ca:03:1d:61:05:c6:11:f7:92:3d:02: 92:ec:6d:d4:67:aa:4c:e3:a3:06:71:d2:d8:c9:54: b4:3f:75:8e:cc:c5:41:04:53:ec:89:0a:4f:55:04: 02:de:38:21:b2:47:c9:26:36:d8:a3:b1:f4:ff:64: c9:f2:e5:91:d5:cb:a5:af:3f:75:d5:87:37:52:97: d4:05:ea:5f:a9:0c:65:97:31:09:90:29:3c:a8:75: dc:30:bf:58:db:24:9e:bf:b5:c0:19:3a:bb:df:a6: 6d:37:11:d9:f4:b6:f0:aa:ef:92:22:3e:1e:57:68: 61:ab:0d:c3:23:21:1f:7a:76:fd:7d:02:95:bb:1d: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EB:D1:67:63:BE:1E:2C:AB:9B:E9:ED:D6:13:CE:06:07:6B:5D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2e:cf:7e:ce:e6:3b:07:78:f3:fb:e0:2d:0c:b4:78:51:af: ba:d2:7d:56:35:8e:72:24:6f:2a:8a:54:cd:35:ac:20:39:fe: 1b:ef:56:43:b7:23:49:0c:01:3d:30:54:22:58:7a:86:fd:be: d1:16:3d:ad:e0:a4:23:a8:c5:74:75:db:db:11:48:c3:a0:fe: 54:f7:5a:1d:91:79:c4:11:9c:09:ae:47:a7:12:a9:95:da:88: 53:7d:13:e5:c3:64:95:c4:2f:f7:01:b0:47:39:48:c5:98:b5: 0c:09:e0:9e:af:09:71:67:20:9f:db:98:81:cf:71:fa:f4:b0: 39:c1:a2:c2:4f:99:72:41:29:2d:0b:83:07:59:8a:39:44:bc: 36:84:e5:f9:ce:a3:2e:f7:15:32:9b:e8:91:ea:28:eb:46:2f: 75:b7:4f:03:d1:a7:7e:38:c2:5b:c5:74:0a:86:a4:ff:d3:8e: f6:07:aa:e3:50:01:e4:80:e9:a1:f7:13:e7:61:87:11:a8:73: de:7b:26:97:27:96:14:1e:11:3c:9f:0b:45:ed:3e:10:6e:d0: 66:51:10:49:8b:87:b4:ca:5a:70:ef:be:c9:d3:a0:e7:ad:40: 19:85:fd:7e:e3:b6:df:e4:96:de:67:31:f3:af:70:8b:a2:4c: 38:70:cd:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7dGeXtWkHcTNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZWUwOTg1ZDMtYThmOC00N2FlLWI5OTktMmFiN2Q0MjdmNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2tBRb+jgtNUNa/860Cv8o4sDW5IjlB4xoTa 4xOGDzJvnPP5VEb5HsW2pyI/9LtXrg4hnkBt4Rfyo2BEZBV+dUckT+Y+/Fr7yCIg wFXRwteH2QUDRaJwXg8B5/1SFIX/zkWOXkEjTL+T9C7qkM3dgBv1dchpsvts7sbx ygMdYQXGEfeSPQKS7G3UZ6pM46MGcdLYyVS0P3WOzMVBBFPsiQpPVQQC3jghskfJ JjbYo7H0/2TJ8uWR1culrz911Yc3UpfUBepfqQxllzEJkCk8qHXcML9Y2ySev7XA GTq736ZtNxHZ9Lbwqu+SIj4eV2hhqw3DIyEfenb9fQKVux2plQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjr0Wdjvh4sq5vp7dYTzgYHa13bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZGFjMzY5YTgtZjRkZS0z YWFmLWJkYTYtMWI4M2MzMWYyZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMuz37O5jsHePP74C0MtHhRr7rSfVY1jnIkbyqKVM01rCA5/hvvVkO3 I0kMAT0wVCJYeob9vtEWPa3gpCOoxXR129sRSMOg/lT3Wh2RecQRnAmuR6cSqZXa iFN9E+XDZJXEL/cBsEc5SMWYtQwJ4J6vCXFnIJ/bmIHPcfr0sDnBosJPmXJBKS0L gwdZijlEvDaE5fnOoy73FTKb6JHqKOtGL3W3TwPRp344wlvFdAqGpP/TjvYHquNQ AeSA6aH3E+dhhxGoc957JpcnlhQeETyfC0XtPhBu0GZREEmLh7TKWnDvvsnToOet QBmF/X7jtt/klt5nMfOvcIuiTDhwzfA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:33 2025 by rpki-client