$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa File: 1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa (raw, json) Hash identifier: IIbW9tUguogVMCOrnVaetJMa6CmtZwD9vVNo16x/k5g= Subject key identifier: EB:F8:7B:DC:EC:74:A4:93:7B:FB:3B:86:B2:EF:4A:4A:9F:F3:72:9D Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584AC8765A781EE70ED79F926E00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 53508 IP address blocks: 142.79.80.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5a:78:1e:e7:0e:d7:9f:92:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=503bd46a-654f-41a7-971d-4ad15ee90d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:06:8e:96:ad:56:08:3e:ee:30:e2:22:1a: d8:6b:1e:68:a6:d3:91:f8:4f:09:08:46:19:8a:23: 4f:32:ae:ba:52:dc:7c:1a:0f:b6:2d:02:b5:d9:79: c1:fe:e2:c4:d3:36:11:64:be:26:f8:8f:f2:b5:37: f4:5c:cd:68:f9:00:15:49:2a:36:a9:a5:7f:d8:47: d1:07:3e:1d:33:dc:37:be:be:8e:c5:01:1b:f0:ad: 4e:fd:23:c5:ce:da:7f:c3:ce:10:d0:80:51:28:28: 85:0a:90:3a:13:5a:ca:b6:cb:b8:6e:29:ac:84:fb: 65:48:ee:bc:56:58:a1:62:4d:37:6e:87:64:8e:91: de:52:7f:74:fb:e0:06:82:bf:50:e9:e3:6f:cb:8c: bd:b3:2f:2c:fc:01:78:68:dc:5f:c9:b2:0a:7b:c5: bb:72:8a:9b:10:3c:a4:87:8a:c6:3c:f7:b3:d3:13: 3f:45:c1:33:50:2a:82:0a:ea:52:16:d6:f8:27:55: 46:8f:b5:fb:73:ba:ea:a9:14:a9:94:4a:2b:5c:1e: 05:f1:da:ff:f8:fb:ed:e7:d7:96:7e:00:ff:22:6c: 40:40:38:8f:5e:74:a1:b2:74:b8:37:a8:e0:15:07: 2f:c1:10:47:bc:83:79:9b:34:96:8e:c2:01:67:77: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F8:7B:DC:EC:74:A4:93:7B:FB:3B:86:B2:EF:4A:4A:9F:F3:72:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7b:d6:e2:2b:e0:26:b6:d1:7d:b1:36:60:53:4a:65:7e:f8: 80:46:d7:64:61:b5:33:2e:1b:b5:fc:bf:85:1a:26:a0:26:86: e8:a6:d5:e1:6b:4a:c3:88:b5:2a:0c:b4:0b:a8:cd:0b:c9:d1: 7d:40:9e:c3:13:ca:30:07:bc:56:85:6f:6e:7c:47:63:a7:7f: 5a:b0:85:18:6a:f0:5f:a3:e6:a0:b4:3e:61:17:e0:e6:5b:3c: 5d:1d:e9:14:14:2a:fa:97:73:21:a8:bf:1f:d3:3c:e7:2a:74: 5b:5a:0b:1c:4c:94:0a:52:39:b9:fa:74:f6:08:ad:ff:c6:fc: 2f:3e:4f:a9:57:ed:f8:3f:f7:47:0a:a9:3e:c3:30:7d:93:a7: 71:9b:61:81:63:f4:33:e8:36:a8:eb:7e:12:9b:a1:32:f6:7b: 81:22:3f:14:ac:f6:56:5f:e5:2d:8d:13:29:b6:00:c6:a1:f1: 94:ef:07:6e:11:22:d8:e7:3e:f7:9d:4e:ed:7d:b9:7e:a2:83: 23:47:62:e3:fc:7c:ed:74:5b:6d:b7:88:56:1c:6b:d4:f4:33: be:98:83:a5:47:35:8f:54:5f:b9:f2:a8:3a:cd:e4:4d:ee:b3: 26:c2:36:50:41:e0:da:bf:4a:10:f5:ad:ff:ca:0e:48:e9:e5: e0:a2:f9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlp4HucO15+SbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTAzYmQ0NmEtNjU0Zi00MWE3LTk3MWQtNGFkMTVlZTkwZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEsGjpatVgg+7jDiIhrYax5optOR+E8JCEYZ iiNPMq66Utx8Gg+2LQK12XnB/uLE0zYRZL4m+I/ytTf0XM1o+QAVSSo2qaV/2EfR Bz4dM9w3vr6OxQEb8K1O/SPFztp/w84Q0IBRKCiFCpA6E1rKtsu4bimshPtlSO68 VlihYk03bodkjpHeUn90++AGgr9Q6eNvy4y9sy8s/AF4aNxfybIKe8W7coqbEDyk h4rGPPez0xM/RcEzUCqCCupSFtb4J1VGj7X7c7rqqRSplEorXB4F8dr/+Pvt59eW fgD/ImxAQDiPXnShsnS4N6jgFQcvwRBHvIN5mzSWjsIBZ3cj9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv4e9zsdKSTe/s7hrLvSkqf83KdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMWEzYzNhZjQtODk1Yi0z MzU0LTk0ZWQtM2ZhNjlkMGZiOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjk9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN71uIr4Ca20X2xNmBTSmV++IBG12RhtTMuG7X8v4UaJqAmhuim1eFr SsOItSoMtAuozQvJ0X1AnsMTyjAHvFaFb258R2Onf1qwhRhq8F+j5qC0PmEX4OZb PF0d6RQUKvqXcyGovx/TPOcqdFtaCxxMlApSObn6dPYIrf/G/C8+T6lX7fg/90cK qT7DMH2Tp3GbYYFj9DPoNqjrfhKboTL2e4EiPxSs9lZf5S2NEym2AMah8ZTvB24R ItjnPvedTu19uX6igyNHYuP8fO10W223iFYca9T0M76Yg6VHNY9UX7nyqDrN5E3u sybCNlBB4Nq/ShD1rf/KDkjp5eCi+Sw= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:49 2025 by rpki-client