$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa File: 28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa (raw, json) Hash identifier: wsAvFUCRXM7KIDueg1B+ykVUrJ+7udSLfrS1WdR2jsg= Subject key identifier: AC:5B:37:E0:5E:C7:11:95:61:E4:32:CA:8F:60:D2:79:DB:8C:73:44 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B95A7A044F0A526839EEB2600 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 142.79.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a0:44:f0:a5:26:83:9e:eb:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8bb0e452-682c-47d7-ab10-34acf7046ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:7b:a6:3b:e3:35:08:40:4b:14:bb:5b:13: fc:e5:8a:3b:ad:fd:4c:13:27:84:66:c6:62:9f:e7: af:e4:f1:a4:42:27:c6:51:79:2e:94:3f:2b:9a:8e: 91:b4:3e:34:d9:fb:7a:e1:b4:c7:31:5b:9b:44:dc: 97:40:65:51:cd:79:c8:31:f1:3c:e7:fb:37:39:3b: 4d:4c:21:e1:4d:64:5f:39:ed:10:3b:a6:e0:ea:87: 34:17:06:6b:6b:e9:e0:34:a5:ee:2b:cc:20:5f:3c: 00:55:a1:8e:01:31:a5:b0:96:d3:f7:4a:da:05:60: 0f:72:30:11:d0:66:9f:c2:3e:a9:2d:4d:23:52:2f: 5f:25:e4:d4:26:70:a4:43:0a:cd:13:d8:a3:d9:36: e5:74:c7:e8:ae:ec:68:5f:87:4a:d4:59:2a:57:e4: cd:05:a1:bd:69:ec:ca:7f:78:cc:6f:5e:2b:de:ef: 71:70:12:9f:b4:98:9b:42:21:0c:79:d9:69:8d:b1: 31:50:56:27:38:74:46:df:3c:9f:de:b9:bd:db:c7: 7f:16:35:24:5b:dd:8f:11:44:40:89:90:fa:e5:09: 42:52:22:84:31:7b:1e:95:9c:62:3c:11:ee:c8:ff: 8e:a6:05:4d:52:8a:5f:a2:11:f7:59:34:f1:95:d2: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5B:37:E0:5E:C7:11:95:61:E4:32:CA:8F:60:D2:79:DB:8C:73:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:47:d9:6d:2d:f8:30:4c:24:a6:03:3f:b1:9e:8f:e7:bc:50: 4b:91:6c:9f:d4:df:a6:f3:e6:32:6b:ba:6b:2b:d8:60:11:3d: e3:5c:ed:52:ff:96:cb:53:3c:16:5a:1b:99:8c:77:6c:28:b8: 4c:02:04:fb:63:a9:27:7d:55:8b:30:9f:67:61:ac:1d:e5:d2: 0c:46:dc:69:3d:d4:9c:a6:57:36:51:82:10:3e:8c:29:ab:b7: a4:f1:5b:67:c3:d5:40:3f:25:14:90:bc:b7:bf:f2:07:0c:d3: ac:17:6d:f1:a9:c2:2f:8a:6b:72:b9:17:be:24:4c:b9:0f:3e: 94:fc:be:44:85:99:4c:51:e5:aa:33:41:dc:9d:4e:b0:4c:e9: 82:ff:8c:55:b5:ae:42:77:00:0a:f4:af:24:aa:8e:27:8e:03: 70:a3:bd:15:9c:50:ec:c7:b5:32:eb:6f:b1:a8:99:0c:c9:27: 11:b8:fa:f8:a7:4a:22:a1:3a:13:60:01:98:26:85:4d:d9:61: 1d:13:8b:28:86:8f:36:cf:3b:b1:98:de:6c:6e:4d:4f:7e:05: 1f:7a:bc:88:c0:db:f0:69:19:31:98:ca:6b:21:b1:17:01:05: ea:27:7f:ec:84:88:1c:6b:96:36:fc:88:f5:db:c0:58:49:0c: 4c:ac:65:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6BE8KUmg57rJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGJiMGU0NTItNjgyYy00N2Q3LWFiMTAtMzRhY2Y3MDQ2ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4J7pjvjNQhASxS7WxP85Yo7rf1MEyeEZsZi n+ev5PGkQifGUXkulD8rmo6RtD402ft64bTHMVubRNyXQGVRzXnIMfE85/s3OTtN TCHhTWRfOe0QO6bg6oc0FwZra+ngNKXuK8wgXzwAVaGOATGlsJbT90raBWAPcjAR 0Gafwj6pLU0jUi9fJeTUJnCkQwrNE9ij2TbldMforuxoX4dK1FkqV+TNBaG9aezK f3jMb14r3u9xcBKftJibQiEMedlpjbExUFYnOHRG3zyf3rm928d/FjUkW92PEURA iZD65QlCUiKEMXselZxiPBHuyP+OpgVNUopfohH3WTTxldIYuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxbN+BexxGVYeQyyo9g0nnbjHNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMjg1NDFkYjYtMWY4Mi0z ZTE0LThhN2MtYzhlZWVlYWM2MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBH2W0t+DBMJKYDP7Gej+e8UEuRbJ/U36bz5jJrumsr2GARPeNc7VL/ lstTPBZaG5mMd2wouEwCBPtjqSd9VYswn2dhrB3l0gxG3Gk91JymVzZRghA+jCmr t6TxW2fD1UA/JRSQvLe/8gcM06wXbfGpwi+Ka3K5F74kTLkPPpT8vkSFmUxR5aoz QdydTrBM6YL/jFW1rkJ3AAr0rySqjieOA3CjvRWcUOzHtTLrb7GomQzJJxG4+vin SiKhOhNgAZgmhU3ZYR0TiyiGjzbPO7GY3mxuTU9+BR96vIjA2/BpGTGYymshsRcB Beonf+yEiBxrljb8iPXbwFhJDEysZS4= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:23 2025 by rpki-client