$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa File: 33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa (raw, json) Hash identifier: 6T4aOBsUU9sdW4IAGSQR03+WXqX1oqbmzJRXRBgF4XE= Subject key identifier: 87:9C:B9:3C:A2:C6:D7:89:53:3B:6B:8C:CC:05:A9:9E:0B:3B:DB:B5 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B8099EC69D83563C1B80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 142.79.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b8:09:9e:c6:9d:83:56:3c:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4aaa87c1-0e89-406b-88dc-87dc22e8ff40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:cd:40:62:35:b2:52:24:59:2e:4e:f3:a8: 5b:5f:e5:fc:cf:58:ab:71:af:94:5b:b4:f4:24:f3: c9:df:c5:80:a1:b2:20:83:fa:3f:72:79:62:b2:c6: 58:54:4b:d1:ec:ae:19:56:91:a3:47:e3:18:e3:df: c5:bc:72:c8:3a:72:4f:2f:eb:7e:b4:99:ea:c8:c9: f0:1d:96:e6:3f:91:3b:87:13:d0:d9:72:f4:ca:c1: d0:3f:39:29:68:10:ca:1e:94:01:a9:70:a3:85:7d: 79:6a:ba:69:3e:a6:af:05:f9:fa:f7:da:2a:5a:aa: 84:7b:8b:8f:cf:3c:41:cf:82:69:6c:ac:21:33:63: a8:ab:e3:5f:e5:0f:4d:5a:be:47:c7:ac:de:f0:ed: 28:12:a0:2e:11:4d:d3:fe:23:c0:8c:01:1c:2d:5d: c7:51:8d:b5:6a:5c:8d:9c:0f:db:0b:92:b6:28:98: 88:29:6c:ff:ef:ea:af:38:64:4a:04:74:77:29:b2: 39:d6:dc:05:11:ed:d7:45:26:59:a1:64:25:e6:0e: 21:08:7e:af:63:f6:55:22:e3:34:77:76:4e:a4:07: 63:88:4b:c2:d7:5b:6d:41:8b:2e:f5:90:40:92:4a: 96:32:a6:0d:6f:d1:73:14:8b:fc:8c:66:d4:45:c6: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9C:B9:3C:A2:C6:D7:89:53:3B:6B:8C:CC:05:A9:9E:0B:3B:DB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:69:4e:74:78:7c:97:79:f9:90:e1:c5:cc:66:1a:50:84:d5: 35:73:8e:06:4d:9c:0c:76:2b:35:d9:10:4e:04:65:84:72:f7: 5c:d9:b8:50:4f:3a:c2:5f:1b:4c:a8:45:47:39:b0:69:32:7f: 47:39:17:bc:1f:33:d4:35:99:2b:be:e9:7d:75:4e:7e:1e:7f: 11:ca:bb:79:53:6c:94:11:39:bc:ff:ba:db:ea:61:f8:07:08: b8:a1:34:59:a2:c5:e3:b1:be:fd:7e:a7:9b:c9:5e:0d:79:56: 52:90:da:d4:da:f7:b9:aa:16:15:02:2f:84:16:17:e2:32:20: 99:c5:47:be:e3:b9:19:85:34:85:ed:82:46:af:34:2b:c0:be: 14:0d:c3:65:5a:ee:0f:eb:7e:18:39:0d:0a:6f:8e:60:29:67: 79:e5:98:29:8e:72:bf:36:f6:30:f4:e4:a8:4b:fe:28:19:e8: 4d:83:46:5a:87:63:18:1e:16:28:75:da:24:f7:b5:8a:26:81: 63:38:73:77:59:92:a6:bb:f6:2d:ba:12:70:08:c3:7b:b1:64: dc:0a:3a:b7:80:22:dc:3d:d2:3f:90:68:f3:7a:ec:ce:2a:a0: db:be:31:0f:dc:48:ec:5e:42:94:f8:bf:d8:be:99:4c:cd:57: 8d:8f:54:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7gJnsadg1Y8G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGFhYTg3YzEtMGU4OS00MDZiLTg4ZGMtODdkYzIyZThmZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4rNQGI1slIkWS5O86hbX+X8z1irca+UW7T0 JPPJ38WAobIgg/o/cnlissZYVEvR7K4ZVpGjR+MY49/FvHLIOnJPL+t+tJnqyMnw HZbmP5E7hxPQ2XL0ysHQPzkpaBDKHpQBqXCjhX15arppPqavBfn699oqWqqEe4uP zzxBz4JpbKwhM2Ooq+Nf5Q9NWr5Hx6ze8O0oEqAuEU3T/iPAjAEcLV3HUY21alyN nA/bC5K2KJiIKWz/7+qvOGRKBHR3KbI51twFEe3XRSZZoWQl5g4hCH6vY/ZVIuM0 d3ZOpAdjiEvC11ttQYsu9ZBAkkqWMqYNb9FzFIv8jGbURcZ/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIecuTyixteJUztrjMwFqZ4LO9u1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzNkNGQwMGEtOTUyZC0z YmJjLTlkMTctMmVhZjIyMDMyZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxpTnR4fJd5+ZDhxcxmGlCE1TVzjgZNnAx2KzXZEE4EZYRy91zZuFBP OsJfG0yoRUc5sGkyf0c5F7wfM9Q1mSu+6X11Tn4efxHKu3lTbJQRObz/utvqYfgH CLihNFmixeOxvv1+p5vJXg15VlKQ2tTa97mqFhUCL4QWF+IyIJnFR77juRmFNIXt gkavNCvAvhQNw2Va7g/rfhg5DQpvjmApZ3nlmCmOcr829jD05KhL/igZ6E2DRlqH YxgeFih12iT3tYomgWM4c3dZkqa79i26EnAIw3uxZNwKOreAItw90j+QaPN67M4q oNu+MQ/cSOxeQpT4v9i+mUzNV42PVPU= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:23 2025 by rpki-client