$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa File: a580cd7f-0b7e-393d-af26-fdef30aeba18.roa (raw, json) Hash identifier: RvFrgsbAcLnwJNuJQCCmyUdEyY3otVRT6TYrgdS08bw= Subject key identifier: 15:6B:A6:F8:AD:BD:FD:B1:28:84:90:FA:BC:78:82:51:74:20:35:41 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07C2AB7CD809B62807E8C0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 142.79.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c2:ab:7c:d8:09:b6:28:07:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3b67a9e3-ce9e-41d3-921e-9108ef25ecb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:bb:99:50:e7:c5:ef:d6:5b:4f:98:f8:fb: 58:46:51:7e:8a:a5:93:c7:26:f7:64:ec:c3:11:f3: 77:92:3b:1f:ea:bc:fa:76:e7:c3:7c:53:a3:34:c2: 1e:01:b1:1e:8b:5d:25:10:cf:05:4b:6d:e2:a5:ff: d9:79:65:23:a6:86:6c:59:1a:1c:9a:3a:bc:3b:e5: 5a:0e:94:42:2a:11:b8:79:54:e9:68:07:5b:09:4a: 1c:a8:85:6f:10:6a:fc:bc:44:f5:2b:7d:ab:97:b0: 94:a5:f8:4e:02:fa:05:bf:ea:7b:b4:0d:54:dd:47: d3:ba:35:2c:02:67:c5:38:a9:5d:a4:ad:78:fd:10: dc:1d:d2:9a:c6:15:ef:74:da:0a:9b:87:86:f5:f0: 08:f3:7a:21:38:c8:31:af:95:ed:d2:60:27:64:c3: d9:34:b3:a1:63:a6:59:96:92:f8:6c:ca:1d:4e:08: b8:eb:9e:8a:99:2f:12:d6:bc:08:7b:f1:e7:de:1e: de:d5:6a:c1:35:02:45:7e:57:0f:36:09:ff:a6:02: f8:0c:5b:e4:15:c9:9d:d0:2a:e4:a6:62:4d:8b:e5: d1:4f:9d:ce:ee:b1:f3:31:7d:8c:6a:eb:2f:c6:12: 2a:ec:da:f7:33:a8:6c:99:1e:63:1a:bf:24:56:2c: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:A6:F8:AD:BD:FD:B1:28:84:90:FA:BC:78:82:51:74:20:35:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5c:5c:10:d8:29:be:e2:a2:a2:ff:ca:37:83:44:75:ad:b0: 79:41:3a:33:b9:7e:2a:11:51:cd:3c:e1:48:8e:ea:a5:54:cf: f1:eb:b2:87:44:c6:21:1c:f9:0c:fb:9d:55:79:bb:8a:36:6a: 73:56:b6:a3:14:08:5c:ab:f5:f4:de:3e:93:4b:f4:00:00:8a: 9a:6b:90:4c:40:6b:94:17:17:f0:f4:23:fc:0c:ac:f1:f4:b4: 42:8a:99:5d:ae:99:c8:12:cb:d3:40:4a:a5:b8:f1:db:c6:91: b4:03:74:07:8e:61:ed:09:20:51:d3:0f:e8:37:80:06:73:1f: 39:10:c3:69:bb:2a:5e:ef:19:71:b6:46:38:71:5b:7c:a5:a8: bb:c4:e3:5c:ac:c6:97:62:84:e8:b5:70:41:d1:54:18:e0:44: 41:38:ec:61:12:48:c7:2e:f8:24:de:0e:14:76:68:99:b6:6b: 30:51:be:ef:45:4a:6f:58:7e:ef:b5:58:59:ed:b4:70:bd:d6: 77:5e:e6:04:cb:1a:ca:d0:1b:cb:3c:de:15:bb:50:8e:a9:e1: cc:5c:13:b1:af:5a:bb:ba:47:1f:fc:ac:11:ce:f1:7d:36:62: 77:05:dd:8b:50:11:a1:1c:74:bd:c4:67:7e:60:59:c4:e9:57: 7b:96:f8:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8KrfNgJtigH6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2I2N2E5ZTMtY2U5ZS00MWQzLTkyMWUtOTEwOGVmMjVlY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroS7mVDnxe/WW0+Y+PtYRlF+iqWTxyb3ZOzD EfN3kjsf6rz6dufDfFOjNMIeAbEei10lEM8FS23ipf/ZeWUjpoZsWRocmjq8O+Va DpRCKhG4eVTpaAdbCUocqIVvEGr8vET1K32rl7CUpfhOAvoFv+p7tA1U3UfTujUs AmfFOKldpK14/RDcHdKaxhXvdNoKm4eG9fAI83ohOMgxr5Xt0mAnZMPZNLOhY6ZZ lpL4bModTgi4656KmS8S1rwIe/Hn3h7e1WrBNQJFflcPNgn/pgL4DFvkFcmd0Crk pmJNi+XRT53O7rHzMX2MausvxhIq7Nr3M6hsmR5jGr8kViyAQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVrpvitvf2xKISQ+rx4glF0IDVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTU4MGNkN2YtMGI3ZS0z OTNkLWFmMjYtZmRlZjMwYWViYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9cXBDYKb7ioqL/yjeDRHWtsHlBOjO5fioRUc084UiO6qVUz/HrsodE xiEc+Qz7nVV5u4o2anNWtqMUCFyr9fTePpNL9AAAipprkExAa5QXF/D0I/wMrPH0 tEKKmV2umcgSy9NASqW48dvGkbQDdAeOYe0JIFHTD+g3gAZzHzkQw2m7Kl7vGXG2 RjhxW3ylqLvE41ysxpdihOi1cEHRVBjgREE47GESSMcu+CTeDhR2aJm2azBRvu9F Sm9Yfu+1WFnttHC91nde5gTLGsrQG8s83hW7UI6p4cxcE7GvWru6Rx/8rBHO8X02 YncF3YtQEaEcdL3EZ35gWcTpV3uW+OQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:17 2025 by rpki-client