$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa File: 200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa (raw, json) Hash identifier: aOGjvzswRc6csGIYLD1U3pzRNJIBNlyJeTEj2cJk4V8= Subject key identifier: FC:A7:D7:85:4D:6C:F2:E2:DA:DF:28:6C:02:D1:C5:70:27:A7:7E:D2 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B7D2E32239CA02AF4980 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 142.79.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b7:d2:e3:22:39:ca:02:af:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=156e7271-475c-43af-b696-a5120e838c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:ea:19:f7:c1:ac:a3:b1:f5:7d:15:ca:14: 79:df:bf:51:3c:71:d5:4e:c8:1b:09:ae:e5:94:f7: 24:d5:6d:90:bf:39:70:eb:dd:c9:a3:00:b3:4e:14: 98:46:76:8d:6f:15:90:a1:ab:e8:8e:c7:dc:25:10: 8d:2c:63:b5:00:a2:32:b0:74:43:e3:1d:91:93:f5: b6:11:aa:b5:5c:b1:57:98:53:c4:99:e7:47:d7:ac: c8:31:14:f8:21:3b:21:92:a9:9c:72:72:29:a9:ef: 38:ae:54:c2:6b:4e:21:1b:b3:72:55:ce:35:de:33: 7f:4f:41:e9:d2:e2:69:94:e6:29:66:1d:a8:13:20: 19:c5:3c:ce:bd:49:c9:a8:2e:41:1b:17:9b:9f:8a: 24:c7:17:1c:4f:83:ee:c6:7b:42:5a:62:bf:7e:dc: a9:d0:03:2a:54:cf:3d:7c:8c:67:b6:18:18:2b:02: 06:5e:bb:d8:20:32:ce:ad:b4:d5:13:ce:a2:de:53: 13:f0:96:c2:b6:d6:e5:d1:48:4c:b4:84:a1:df:e2: 2f:d6:3c:8a:57:59:50:41:c0:f6:42:3a:a4:84:1c: 54:c8:d7:63:24:85:c9:5a:5d:df:86:c4:7d:a6:ec: 46:16:dd:f3:3e:da:f7:90:26:87:98:48:93:72:ff: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:D7:85:4D:6C:F2:E2:DA:DF:28:6C:02:D1:C5:70:27:A7:7E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:73:15:96:39:a6:1e:87:3c:96:7a:6b:e6:4b:b5:72:f6:71: e9:6b:08:45:0d:60:38:2a:a9:ba:48:0a:f0:25:9a:00:36:b0: 1f:6b:6e:ed:3e:f8:20:a9:12:1d:d7:26:72:3c:f7:9a:6e:70: f5:7f:9a:a3:04:38:01:45:a9:bc:5a:47:64:23:25:bb:3c:3b: e6:55:d2:a0:ab:22:e8:18:84:ac:98:ac:3c:51:78:c0:6d:36: 73:a9:cb:d5:57:68:19:8b:4d:be:61:df:54:d9:9c:0e:74:30: 2e:02:c0:d2:a2:a3:35:24:d2:a3:e9:f6:d0:fd:e3:04:35:24: 03:99:fb:76:93:39:16:78:ae:82:65:72:68:1e:11:3d:19:3f: c1:ec:c1:cf:a9:06:08:7c:46:7f:97:94:d0:ac:8b:b3:8e:70: 50:1d:34:86:d2:47:ec:15:6a:92:4e:ec:df:05:1c:be:d2:dc: 58:5b:f4:30:0a:6d:67:63:ee:de:85:96:b5:df:4b:60:5a:33: e9:6d:ca:56:47:a7:33:ab:a9:2c:c8:1c:03:06:5e:5f:d6:99: 3b:19:44:9f:a3:88:8b:f9:1b:06:af:37:74:19:e0:71:a7:f8: 6a:1c:da:68:3c:ce:d3:62:29:ea:e2:a5:b4:94:0c:0a:3d:46: 6a:0c:1a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7fS4yI5ygKvSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MTU2ZTcyNzEtNDc1Yy00M2FmLWI2OTYtYTUxMjBlODM4YzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE3qGffBrKOx9X0VyhR5379RPHHVTsgbCa7l lPck1W2Qvzlw693JowCzThSYRnaNbxWQoavojsfcJRCNLGO1AKIysHRD4x2Rk/W2 Eaq1XLFXmFPEmedH16zIMRT4ITshkqmccnIpqe84rlTCa04hG7NyVc413jN/T0Hp 0uJplOYpZh2oEyAZxTzOvUnJqC5BGxebn4okxxccT4PuxntCWmK/ftyp0AMqVM89 fIxnthgYKwIGXrvYIDLOrbTVE86i3lMT8JbCttbl0UhMtISh3+Iv1jyKV1lQQcD2 QjqkhBxUyNdjJIXJWl3fhsR9puxGFt3zPtr3kCaHmEiTcv+eIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyn14VNbPLi2t8obALRxXAnp37SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMjAwMDEwZmQtN2Q5MS0z NmNjLWExMTMtZDRjZDBiZDI0YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjk9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpzFZY5ph6HPJZ6a+ZLtXL2celrCEUNYDgqqbpICvAlmgA2sB9rbu0+ +CCpEh3XJnI895pucPV/mqMEOAFFqbxaR2QjJbs8O+ZV0qCrIugYhKyYrDxReMBt NnOpy9VXaBmLTb5h31TZnA50MC4CwNKiozUk0qPp9tD94wQ1JAOZ+3aTORZ4roJl cmgeET0ZP8Hswc+pBgh8Rn+XlNCsi7OOcFAdNIbSR+wVapJO7N8FHL7S3Fhb9DAK bWdj7t6FlrXfS2BaM+ltylZHpzOrqSzIHAMGXl/WmTsZRJ+jiIv5GwavN3QZ4HGn +Goc2mg8ztNiKeripbSUDAo9RmoMGvw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:54 2025 by rpki-client