$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa File: a580cd7f-0b7e-393d-af26-fdef30aeba18.roa (raw, json) Hash identifier: nucJtXkXLOZ3QFyX8Hb+FGlEyul8vvDlC8P1Wq30DJo= Subject key identifier: 28:D7:05:B9:CB:D2:13:F1:C2:EE:43:27:44:55:69:4E:86:94:BC:F3 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584ABD4BA5F10CC9D39BDA5F3B00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 53508 IP address blocks: 142.79.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a5:f1:0c:c9:d3:9b:da:5f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=720f0d7b-5af4-4f3c-b8a1-d56da34a1250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:d2:7d:b1:58:a4:10:b8:ec:21:27:30:a0: 84:63:dd:6d:bc:58:c0:02:7a:c2:6c:af:ec:c1:92: f5:e3:48:07:b8:e1:4e:01:b0:08:17:5d:71:07:71: 10:bb:de:7a:6c:ad:8e:72:16:de:40:ab:bb:bb:6c: 93:53:1d:82:12:40:4d:d7:21:87:e2:e1:da:2e:d3: 5c:77:b8:d8:62:1d:86:84:5f:d4:0f:b5:be:74:63: 00:e5:6e:21:03:3d:2b:01:3c:1f:02:57:ea:71:ef: 5a:f7:b7:74:26:f6:3a:ae:45:0c:72:9a:23:5f:4c: ca:02:e4:aa:a3:b9:c8:26:01:25:54:75:01:85:f8: 85:1e:bc:dd:57:ee:6a:58:53:ce:71:88:44:0c:b3: db:3b:e2:7c:2f:58:80:1f:91:db:25:ed:44:cc:29: a5:e5:94:b2:77:fe:94:99:6a:53:d3:0f:3c:4f:f2: 91:7e:0c:a3:63:b9:d9:d7:be:42:e1:cb:4c:20:fe: 58:6d:22:cf:8f:70:91:08:46:02:bc:dd:6e:72:a6: eb:e4:d0:9f:fa:6a:15:dd:c6:1a:ea:e4:9b:55:e7: bf:ec:a5:fd:38:95:94:07:81:41:e1:9a:99:19:e2: 12:75:dc:12:cc:29:f0:cc:a6:d0:20:ce:cb:b6:45: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D7:05:B9:CB:D2:13:F1:C2:EE:43:27:44:55:69:4E:86:94:BC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a9:c4:2b:e3:33:64:2f:b7:22:72:f1:89:b4:be:7b:d3:ed: 61:1c:fe:34:d3:31:bd:30:42:2c:ab:f4:36:fd:c6:c5:b9:b6: e7:8c:04:f1:53:1b:ac:0b:1b:44:29:d8:34:d2:e0:62:f9:86: 87:75:f9:69:67:df:00:5c:0c:0b:58:58:11:23:4f:53:91:95: fd:a7:a0:6e:31:8e:12:a7:f0:f7:50:ed:42:75:0a:77:4c:6b: a0:e8:d8:a0:d2:2e:61:36:bc:d2:46:5b:59:e2:86:b5:b0:af: 6b:84:09:13:07:68:a4:9d:b6:bd:f2:6f:8a:aa:6b:22:21:d7: 71:60:e2:29:71:14:e9:65:49:d9:b5:c4:26:f3:72:08:6a:16: b7:c2:df:2f:d1:c2:a9:1f:92:5e:b1:f5:d4:b8:8e:6d:9c:c6: 62:bc:47:4d:78:20:17:1c:29:c7:c0:d9:6a:ba:0a:4c:6c:1e: e9:11:08:df:99:da:be:b9:56:eb:85:fc:d2:7c:26:24:ce:4d: c0:02:47:8a:19:aa:d8:17:80:ea:79:b6:bf:e3:5c:ae:a6:20: eb:4a:a0:0f:60:24:d2:be:7a:40:8f:f3:55:b0:c5:7e:3c:fa: e9:04:27:b6:33:41:56:81:cd:5c:88:ff:29:89:78:09:a7:b9: 07:8a:e5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6XxDMnTm9pfOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NzIwZjBkN2ItNWFmNC00ZjNjLWI4YTEtZDU2ZGEzNGExMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXDSfbFYpBC47CEnMKCEY91tvFjAAnrCbK/s wZL140gHuOFOAbAIF11xB3EQu956bK2OchbeQKu7u2yTUx2CEkBN1yGH4uHaLtNc d7jYYh2GhF/UD7W+dGMA5W4hAz0rATwfAlfqce9a97d0JvY6rkUMcpojX0zKAuSq o7nIJgElVHUBhfiFHrzdV+5qWFPOcYhEDLPbO+J8L1iAH5HbJe1EzCml5ZSyd/6U mWpT0w88T/KRfgyjY7nZ175C4ctMIP5YbSLPj3CRCEYCvN1ucqbr5NCf+moV3cYa 6uSbVee/7KX9OJWUB4FB4ZqZGeISddwSzCnwzKbQIM7LtkXerwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjXBbnL0hPxwu5DJ0RVaU6GlLzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTU4MGNkN2YtMGI3ZS0z OTNkLWFmMjYtZmRlZjMwYWViYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOpxCvjM2QvtyJy8Ym0vnvT7WEc/jTTMb0wQiyr9Db9xsW5tueMBPFT G6wLG0Qp2DTS4GL5hod1+Wln3wBcDAtYWBEjT1ORlf2noG4xjhKn8PdQ7UJ1CndM a6Do2KDSLmE2vNJGW1nihrWwr2uECRMHaKSdtr3yb4qqayIh13Fg4ilxFOllSdm1 xCbzcghqFrfC3y/Rwqkfkl6x9dS4jm2cxmK8R014IBccKcfA2Wq6CkxsHukRCN+Z 2r65VuuF/NJ8JiTOTcACR4oZqtgXgOp5tr/jXK6mIOtKoA9gJNK+ekCP81WwxX48 +ukEJ7YzQVaBzVyI/ymJeAmnuQeK5aY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:16 2025 by rpki-client