$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa File: ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa (raw, json) Hash identifier: fLCWRnsOamr9JzJRfWpVu+XYftjb8JXbNLWaSqEL21Q= Subject key identifier: 43:66:DB:A9:FD:A9:C8:23:59:A4:C6:8E:9F:53:48:95:22:5C:C9:C7 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584ABD4B986D54399B1294DF6B30 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 53508 IP address blocks: 24.89.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:98:6d:54:39:9b:12:94:df:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=4b4e7e88-a830-4d74-9afb-47714e6e6b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:a5:99:27:60:83:36:4e:2a:80:8a:16:8b: d7:27:ed:50:7b:90:f1:ff:0b:d6:08:3c:56:dd:97: 82:89:eb:0b:bc:5e:7b:c3:1b:48:f2:ac:e1:0f:33: 70:f1:5f:62:59:05:ad:21:04:9e:f8:d8:84:d6:a2: 9c:3b:29:43:a9:71:ac:ef:11:8c:a7:62:58:59:18: 04:8e:a3:e5:ec:7b:e9:db:ba:d0:e0:2d:02:bb:b2: 39:c9:8d:ae:3a:64:55:f7:3f:96:c2:75:e8:a3:53: cb:12:7e:20:fe:e4:d7:31:d8:5f:88:80:62:01:46: 05:17:e7:d4:f9:1e:d0:d5:5f:38:f5:65:03:60:af: ac:c3:ee:ae:0f:c3:29:f0:c1:07:0e:aa:c8:a2:1f: f8:0f:fa:ac:35:e2:68:41:6a:11:47:9e:55:f6:18: 1f:c8:a4:6d:3c:7d:4b:cf:bc:cf:d9:46:ff:99:ec: 4b:aa:ff:56:3c:7f:f9:70:70:d1:37:b7:db:f9:4d: 0c:3d:d0:05:4e:94:81:6e:59:d1:bf:00:c5:11:f6: b2:c2:b3:80:ae:f9:64:88:e9:0a:ad:23:8b:61:f5: f9:8c:cb:72:c8:50:44:f7:d8:69:9a:5a:04:b7:9b: c5:42:ce:8c:31:a4:36:6c:ae:bc:6f:0d:28:e9:7d: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:DB:A9:FD:A9:C8:23:59:A4:C6:8E:9F:53:48:95:22:5C:C9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:be:f5:33:43:77:21:58:57:0f:2e:b8:06:8c:2b:e9:85:7a: 03:f0:c2:d6:cf:b9:5b:12:74:47:10:46:5a:d9:1a:95:32:42: 9c:86:f0:5a:9f:92:c2:80:22:5f:6a:11:68:3a:0a:b7:54:2e: 20:58:5c:7b:d1:5f:6f:5a:e0:eb:23:aa:d7:be:72:7c:46:57: 71:92:6e:10:10:3f:50:e4:50:b1:df:e4:7b:83:80:b5:90:e2: 8f:7f:e4:1f:60:0a:0a:3f:f3:c2:5f:2d:50:6c:5d:c2:df:5c: 95:a8:01:20:b8:44:3e:34:6c:92:26:28:80:07:72:64:04:98: fe:89:8a:d8:a6:0a:8c:ba:f2:bb:4c:1e:bb:91:30:11:09:30: cf:dc:c2:a1:73:ef:19:28:af:08:dc:87:e9:c0:1f:9f:2e:ff: ef:74:7b:20:52:b5:1b:74:16:19:2d:bb:db:fe:70:72:a7:d2: b9:64:49:5c:57:50:5a:82:18:66:ed:30:13:61:1d:c1:26:b3: f9:e5:63:67:5f:81:97:4a:57:74:61:76:9a:37:3e:fa:74:c8: eb:75:0b:59:68:5e:5a:13:86:0c:31:ce:99:53:55:2a:c1:aa: af:ff:31:3f:65:fb:e2:ff:ad:e9:d4:00:1c:81:e5:e5:58:91: 39:31:79:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5htVDmbEpTfazAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NGI0ZTdlODgtYTgzMC00ZDc0LTlhZmItNDc3MTRlNmU2YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoulmSdggzZOKoCKFovXJ+1Qe5Dx/wvWCDxW 3ZeCiesLvF57wxtI8qzhDzNw8V9iWQWtIQSe+NiE1qKcOylDqXGs7xGMp2JYWRgE jqPl7Hvp27rQ4C0Cu7I5yY2uOmRV9z+WwnXoo1PLEn4g/uTXMdhfiIBiAUYFF+fU +R7Q1V849WUDYK+sw+6uD8Mp8MEHDqrIoh/4D/qsNeJoQWoRR55V9hgfyKRtPH1L z7zP2Ub/mexLqv9WPH/5cHDRN7fb+U0MPdAFTpSBblnRvwDFEfaywrOArvlkiOkK rSOLYfX5jMtyyFBE99hpmloEt5vFQs6MMaQ2bK68bw0o6X1oLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENm26n9qcgjWaTGjp9TSJUiXMnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZmZiYzMyZWEtMzFhOS0z OGY1LTgxNTAtYWQ3YzhhMDQ0YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGFkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK+9TNDdyFYVw8uuAaMK+mFegPwwtbPuVsSdEcQRlrZGpUyQpyG8Fqf ksKAIl9qEWg6CrdULiBYXHvRX29a4Osjqte+cnxGV3GSbhAQP1DkULHf5HuDgLWQ 4o9/5B9gCgo/88JfLVBsXcLfXJWoASC4RD40bJImKIAHcmQEmP6JitimCoy68rtM HruRMBEJMM/cwqFz7xkorwjch+nAH58u/+90eyBStRt0Fhktu9v+cHKn0rlkSVxX UFqCGGbtMBNhHcEms/nlY2dfgZdKV3Rhdpo3Pvp0yOt1C1loXloThgwxzplTVSrB qq//MT9l++L/renUAByB5eVYkTkxeTQ= -----END CERTIFICATE-----Generated at Thu Aug 7 12:58:19 2025 by rpki-client