
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa
File: 2afed25b-a61d-3cc4-9fae-308ffa589871.roa (raw, json)
Hash identifier: X7HoN17CzjJOwybk3JFZiVl6QglMNTAD3rboovcVtvI=
Subject key identifier: DC:D4:89:16:0C:7B:20:33:67:5B:15:49:23:4C:96:F7:21:9A:51:C7
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F4328584D5E1A6F9DBBD8616DE9C77880
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 53508
IP address blocks: 142.79.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6f:9d:bb:d8:61:6d:e9:c7:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=0a053d80-de98-4ee8-aedb-25d3a84f5747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:94:eb:88:7d:20:5e:6e:0e:ba:26:69:64:
03:c7:e1:32:bf:44:11:ed:7e:2b:9d:e7:b0:4a:c9:
46:c5:de:d3:bc:af:81:b9:9b:a8:6d:48:cd:e4:1d:
2e:54:d3:52:04:9b:74:b3:07:dc:f2:31:b9:66:2b:
c6:c6:5e:47:6d:4b:cb:5a:94:38:9c:d8:68:bd:ae:
f5:23:c5:9b:d3:dc:de:d0:fe:03:f9:1c:9d:f3:8f:
ca:62:17:43:9e:33:16:7f:64:1d:ec:2b:7e:49:10:
40:69:3d:69:91:f5:80:89:4e:e4:33:32:f7:e5:de:
21:4f:1d:08:a0:9a:0d:56:bb:68:1d:5b:60:ef:18:
af:12:33:f3:e3:dd:e2:6a:b3:ac:7d:e4:2e:fc:08:
72:49:f1:4f:1a:aa:a3:3a:a1:54:95:c7:fd:18:29:
12:4c:57:2b:eb:34:f9:86:02:36:5a:0e:30:4d:9a:
51:8a:13:47:91:60:08:f6:ff:e0:ab:60:b1:87:f3:
0a:ef:42:a4:79:6d:f6:90:42:92:e6:17:25:60:a8:
2a:a9:59:75:05:00:0b:21:fd:77:d5:eb:f3:1d:ec:
26:bc:2f:92:75:3c:43:bc:e6:91:92:a8:2a:60:93:
a9:dd:c2:2e:a4:78:6c:f7:7a:98:83:d9:55:3b:2b:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:89:16:0C:7B:20:33:67:5B:15:49:23:4C:96:F7:21:9A:51:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2afed25b-a61d-3cc4-9fae-308ffa589871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
142.79.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f1:f9:72:d5:ac:d0:df:d3:d9:e2:d4:f7:0f:cb:13:a8:e2:
40:d3:f3:da:29:9e:1f:62:22:f9:6e:10:c9:d9:ce:c7:06:d9:
df:a7:b6:03:dd:f7:d9:78:74:76:26:bc:c4:7f:5b:fc:b6:05:
06:3f:0b:bd:c9:6a:dc:c0:b5:ec:5f:e9:9b:e0:5c:4c:d6:26:
2a:ae:92:bf:f7:44:03:9a:82:f5:77:08:fe:43:b9:a6:12:30:
f0:81:3c:4f:93:cd:40:14:2d:9f:6a:be:70:bd:f9:8a:e7:1b:
d1:05:1f:17:7b:f5:4a:6d:56:12:1c:43:54:b6:da:d7:5f:d5:
56:d7:30:ad:69:6a:1d:3b:1b:96:d7:72:06:35:c7:ed:79:52:
9d:24:12:96:ec:18:5f:24:f9:46:ec:6a:99:7b:23:ce:29:a0:
3f:93:b0:cd:24:c8:98:01:bb:e4:a5:91:73:b4:e3:53:ed:d7:
d7:78:01:29:a9:34:6f:06:e4:86:f7:18:ef:46:d7:a3:8f:25:
73:96:3e:74:02:48:8e:13:f1:26:5a:82:c5:9d:cf:fb:5b:fd:
82:1e:01:e8:29:b5:ee:58:cd:fa:14:6b:0e:95:66:b3:e0:21:
b7:96:00:ef:d3:e1:04:03:76:44:bd:42:a8:a7:df:c7:ff:20:
3c:db:d0:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm+du9hhbenHeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MGEwNTNkODAtZGU5OC00ZWU4LWFlZGItMjVkM2E4NGY1NzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlSU64h9IF5uDromaWQDx+Eyv0QR7X4rneew
SslGxd7TvK+BuZuobUjN5B0uVNNSBJt0swfc8jG5ZivGxl5HbUvLWpQ4nNhova71
I8Wb09ze0P4D+Ryd84/KYhdDnjMWf2Qd7Ct+SRBAaT1pkfWAiU7kMzL35d4hTx0I
oJoNVrtoHVtg7xivEjPz493iarOsfeQu/AhySfFPGqqjOqFUlcf9GCkSTFcr6zT5
hgI2Wg4wTZpRihNHkWAI9v/gq2Cxh/MK70KkeW32kEKS5hclYKgqqVl1BQALIf13
1evzHewmvC+SdTxDvOaRkqgqYJOp3cIupHhs93qYg9lVOyuZRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzUiRYMeyAzZ1sVSSNMlvchmlHHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmFmZWQyNWItYTYxZC0z
Y2M0LTlmYWUtMzA4ZmZhNTg5ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbx+XLVrNDf09ni1PcPyxOo4kDT89opnh9iIvluEMnZzscG2d+ntgPd
99l4dHYmvMR/W/y2BQY/C73JatzAtexf6ZvgXEzWJiqukr/3RAOagvV3CP5DuaYS
MPCBPE+TzUAULZ9qvnC9+YrnG9EFHxd79UptVhIcQ1S22tdf1VbXMK1pah07G5bX
cgY1x+15Up0kEpbsGF8k+Ubsapl7I84poD+TsM0kyJgBu+SlkXO041Pt19d4ASmp
NG8G5Ib3GO9G16OPJXOWPnQCSI4T8SZagsWdz/tb/YIeAegpte5YzfoUaw6VZrPg
IbeWAO/T4QQDdkS9Qqin38f/IDzb0OY=
-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:15 2026 by rpki-client