$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa File: 2afed25b-a61d-3cc4-9fae-308ffa589871.roa (raw, json) Hash identifier: YaShPdhhBP01vxCVNpoeWwWIG8kKKk8TMlVBHPBmFYs= Subject key identifier: 17:7C:E3:B1:3C:57:32:99:F3:07:CE:69:6C:1D:CF:F0:EB:D5:94:18 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584C7D7C69E3D5390C7C1ED72590 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 53508 IP address blocks: 142.79.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:69:e3:d5:39:0c:7c:1e:d7:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=c8c08eff-9480-4dae-953f-f47149233dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:df:8d:98:97:3d:53:20:c9:3e:35:fd:c5: d4:0a:aa:0c:94:c1:eb:56:b3:75:2a:d7:81:06:69: 26:b9:ed:c7:34:bc:fe:b7:30:8f:37:e9:41:61:73: 16:55:3f:77:3c:d1:1d:6f:67:97:e8:5a:9e:7f:32: d5:38:21:fb:1c:37:c8:ea:a9:4c:41:9d:b6:c7:7d: c7:be:eb:13:68:29:5d:77:10:da:43:ac:da:77:67: b1:21:60:ec:8b:de:de:b6:7c:a4:1b:ef:9c:b7:83: e7:47:85:74:ca:5a:b9:be:f2:e6:90:a7:fa:86:55: ba:88:5c:56:16:15:08:c3:7b:29:a7:d8:9f:21:6a: 15:e1:1a:e0:6d:45:5b:a2:e9:51:83:66:d8:1f:f1: fb:9c:d2:58:34:78:bd:46:8f:9c:31:9c:78:24:0c: 29:58:34:e4:3c:6f:7c:ce:da:a0:ef:3a:34:8c:30: 36:d1:63:43:89:e9:3b:fa:3d:af:ec:a6:73:d0:d4: 49:0d:17:8b:81:df:ae:2a:94:13:e0:d8:ee:14:97: 5e:ab:bd:84:9a:33:a7:10:38:5d:9f:f5:31:25:97: e7:0c:27:e5:09:13:08:d5:f4:5d:14:7e:93:b9:ad: 97:d5:70:24:98:e1:19:8c:98:fb:c4:c6:34:81:90: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7C:E3:B1:3C:57:32:99:F3:07:CE:69:6C:1D:CF:F0:EB:D5:94:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3a:1f:6a:2a:5f:82:5f:eb:20:c2:01:ed:ca:f6:49:10:5f: 26:13:bb:87:3a:73:48:41:03:a8:a3:1e:52:f0:d6:2c:77:05: be:51:7a:28:97:2d:d9:58:48:81:c3:2d:db:d2:69:a8:69:bb: 40:3e:0f:da:f4:70:51:cd:d7:59:cb:dc:bf:88:a1:48:a8:95: 1c:c7:6f:f5:6f:f2:43:55:27:80:90:2e:d4:33:3b:d3:29:35: 22:cb:65:c0:0f:0c:f1:8e:4f:57:7f:94:25:43:d8:b7:69:77: dc:f8:03:8b:fa:09:f4:25:dc:df:f3:39:cc:f6:8d:f2:78:7e: 1a:2f:dd:4e:35:bd:61:9b:21:c3:b4:a0:17:cf:19:68:b0:20: 48:de:44:ca:86:ef:7f:84:35:30:46:69:43:f0:fc:cb:da:75: 26:e9:05:95:e1:eb:a3:d5:6a:78:ec:e9:eb:c0:36:b3:d4:c3: 8a:c2:59:5c:b0:ac:28:4b:e9:06:c1:ef:d5:dd:32:0e:97:83: b7:cd:07:a4:cc:8e:3b:5c:d6:05:a0:df:a9:7f:66:d0:29:13: 76:2b:e0:58:fc:62:20:c9:b1:a0:eb:69:fc:37:1b:06:1d:4a: 6e:ee:9f:2f:33:d5:9b:3b:e4:09:20:98:ca:83:86:7e:fe:26: 71:be:f2:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGnj1TkMfB7XJZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YzhjMDhlZmYtOTQ4MC00ZGFlLTk1M2YtZjQ3MTQ5MjMzZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYffjZiXPVMgyT41/cXUCqoMlMHrVrN1KteB Bmkmue3HNLz+tzCPN+lBYXMWVT93PNEdb2eX6FqefzLVOCH7HDfI6qlMQZ22x33H vusTaClddxDaQ6zad2exIWDsi97etnykG++ct4PnR4V0ylq5vvLmkKf6hlW6iFxW FhUIw3spp9ifIWoV4RrgbUVboulRg2bYH/H7nNJYNHi9Ro+cMZx4JAwpWDTkPG98 ztqg7zo0jDA20WNDiek7+j2v7KZz0NRJDReLgd+uKpQT4NjuFJdeq72EmjOnEDhd n/UxJZfnDCflCRMI1fRdFH6Tua2X1XAkmOEZjJj7xMY0gZBUPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd847E8VzKZ8wfOaWwdz/Dr1ZQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmFmZWQyNWItYTYxZC0z Y2M0LTlmYWUtMzA4ZmZhNTg5ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA6H2oqX4Jf6yDCAe3K9kkQXyYTu4c6c0hBA6ijHlLw1ix3Bb5ReiiX LdlYSIHDLdvSaahpu0A+D9r0cFHN11nL3L+IoUiolRzHb/Vv8kNVJ4CQLtQzO9Mp NSLLZcAPDPGOT1d/lCVD2Ldpd9z4A4v6CfQl3N/zOcz2jfJ4fhov3U41vWGbIcO0 oBfPGWiwIEjeRMqG73+ENTBGaUPw/MvadSbpBZXh66PVanjs6evANrPUw4rCWVyw rChL6QbB79XdMg6Xg7fNB6TMjjtc1gWg36l/ZtApE3Yr4Fj8YiDJsaDrafw3GwYd Sm7uny8z1Zs75AkgmMqDhn7+JnG+8js= -----END CERTIFICATE-----Generated at Mon Mar 2 11:57:35 2026 by rpki-client