$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa File: ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa (raw, json) Hash identifier: cZlOpFTOA642WFKy0fzIO+gM8VfgGijWSb8/EzkDhnQ= Subject key identifier: 12:11:CC:09:34:C1:F4:0A:4A:F3:04:4D:ED:F7:EF:1E:1B:63:A4:9D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285849DC8FC3B9578CC752F88D4CE4 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 53508 IP address blocks: 24.89.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c3:b9:57:8c:c7:52:f8:8d:4c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=300c242d-a668-41c6-b1d1-8ff7971bd8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:9e:d2:07:61:b3:f7:65:f2:df:8a:15:52: 09:3d:de:16:22:b5:19:e0:3a:64:29:6a:11:e5:9f: 65:e7:dd:02:cd:a7:3b:c5:31:ff:60:a5:ae:fd:e3: cb:2f:80:77:b8:c9:4f:90:1b:65:75:6c:44:c3:aa: c0:ce:a4:41:25:51:2b:1d:3f:44:b1:71:44:e8:a1: df:e8:3b:b7:ba:5e:e7:1c:51:90:f0:03:3f:82:f3: 87:45:a7:29:c0:b1:9b:f4:ab:e5:83:49:67:0a:db: 7f:e4:b2:50:30:99:08:66:e1:e4:31:99:ca:ce:e5: e8:76:e2:05:57:15:dc:cd:97:7e:f8:54:d3:ed:fb: cd:c0:f0:a8:2d:0d:6e:77:74:14:cf:35:00:08:3a: ed:8b:5f:ac:3e:b5:10:a9:15:28:48:6c:53:3f:2b: ef:e1:43:6b:e3:77:3b:98:63:c0:b8:32:18:e0:e8: 92:19:8b:33:10:a6:28:ed:fe:bb:60:cb:ba:b8:7a: b3:a5:96:13:34:85:e5:69:c1:40:2a:3c:94:1d:99: c5:50:4e:85:1e:e2:14:74:ae:f0:ac:a8:7d:37:6c: 23:44:d2:ba:08:e4:7a:20:bf:df:3a:7e:93:1b:48: eb:dd:6e:1d:51:a8:e0:67:52:6a:4c:3b:96:55:ed: dc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:CC:09:34:C1:F4:0A:4A:F3:04:4D:ED:F7:EF:1E:1B:63:A4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:19:2b:8b:36:e6:70:d0:58:0b:2b:34:2f:60:05:c8:9d:d8: a9:b3:22:38:43:4d:2a:79:4f:94:b8:55:56:5e:bf:6d:c3:55: da:91:9d:1e:f5:c4:63:1c:a2:ef:b7:d4:de:de:4b:64:07:7b: ae:b7:49:70:6b:5c:ea:e6:35:fb:b6:7d:95:85:e2:cc:3c:b4: c3:41:20:63:ce:e6:bd:86:06:7f:8c:02:d1:08:52:08:95:07: a2:4a:4e:19:59:f2:0f:1e:53:8e:2f:47:97:ae:dc:e2:c4:a7: 89:65:d1:8b:e2:32:47:39:6f:5b:69:38:d9:4a:67:44:fb:19: 5b:bd:1b:c1:84:1e:1a:3d:a4:3c:05:fa:5f:5a:39:71:0c:c4: 53:c4:85:6e:46:5b:57:d6:4c:11:b5:6b:d5:72:42:19:4c:8c: 70:f3:9c:3d:be:4c:51:d9:c2:6c:c7:eb:32:cc:1d:72:92:c0: ba:80:7e:c5:bd:9b:e8:55:74:e2:85:ee:33:0a:f4:46:cd:7c: c5:de:72:ea:45:d8:27:c3:3a:f5:c5:c4:60:1b:f2:b8:12:82: ae:2f:2e:0d:0e:76:4b:d4:7e:9f:78:32:d4:49:a2:28:12:6b: a9:f3:d4:63:c4:56:1b:a0:d5:38:26:d3:5c:c1:56:81:6c:23: d0:6f:62:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8O5V4zHUviNTOQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MzAwYzI0MmQtYTY2OC00MWM2LWIxZDEtOGZmNzk3MWJkOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLae0gdhs/dl8t+KFVIJPd4WIrUZ4DpkKWoR 5Z9l590Czac7xTH/YKWu/ePLL4B3uMlPkBtldWxEw6rAzqRBJVErHT9EsXFE6KHf 6Du3ul7nHFGQ8AM/gvOHRacpwLGb9Kvlg0lnCtt/5LJQMJkIZuHkMZnKzuXoduIF VxXczZd++FTT7fvNwPCoLQ1ud3QUzzUACDrti1+sPrUQqRUoSGxTPyvv4UNr43c7 mGPAuDIY4OiSGYszEKYo7f67YMu6uHqzpZYTNIXlacFAKjyUHZnFUE6FHuIUdK7w rKh9N2wjRNK6COR6IL/fOn6TG0jr3W4dUajgZ1JqTDuWVe3cUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIRzAk0wfQKSvMETe337x4bY6SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZmZiYzMyZWEtMzFhOS0z OGY1LTgxNTAtYWQ3YzhhMDQ0YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGFkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ZK4s25nDQWAsrNC9gBcid2KmzIjhDTSp5T5S4VVZev23DVdqRnR71 xGMcou+31N7eS2QHe663SXBrXOrmNfu2fZWF4sw8tMNBIGPO5r2GBn+MAtEIUgiV B6JKThlZ8g8eU44vR5eu3OLEp4ll0YviMkc5b1tpONlKZ0T7GVu9G8GEHho9pDwF +l9aOXEMxFPEhW5GW1fWTBG1a9VyQhlMjHDznD2+TFHZwmzH6zLMHXKSwLqAfsW9 m+hVdOKF7jMK9EbNfMXecupF2CfDOvXFxGAb8rgSgq4vLg0OdkvUfp94MtRJoigS a6nz1GPEVhug1Tgm01zBVoFsI9BvYlg= -----END CERTIFICATE-----Generated at Wed Jul 2 04:24:08 2025 by rpki-client