$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa File: 898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa (raw, json) Hash identifier: p696QUKFH6/8vgeOeNe+P6xuS08413FGzB6YPDEd66s= Subject key identifier: BB:2E:C4:A0:57:A6:B8:A3:E7:E9:4F:C2:72:12:8C:6E:8A:82:0A:40 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584D5E1A66C2ACFD406E4D605600 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 53508 IP address blocks: 142.79.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:66:c2:ac:fd:40:6e:4d:60:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=36c1e6f9-93a0-4561-b424-ba053b902e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:17:1e:ba:8f:bb:e5:a5:ac:a5:12:0a:f0: 2f:11:00:04:db:0a:1f:f4:75:1c:d9:89:f7:29:9d: 23:ca:33:33:a5:8b:8b:51:c1:1f:3a:f4:a3:5c:b7: f1:3d:2f:14:bc:f8:f1:6f:42:a2:a8:63:5e:70:26: 6a:3f:22:61:e2:61:34:d4:71:46:e1:be:0d:c5:81: 1c:fa:d1:69:0d:a9:d9:90:78:c8:60:c3:f3:62:a7: 30:56:97:8e:43:cc:f9:bf:e8:eb:7d:ca:d0:2e:8d: d3:da:97:6a:ca:7c:ca:1d:12:61:a7:8f:5c:6d:a9: c9:76:6a:31:0d:35:c4:f8:18:48:37:1a:4e:5a:60: a8:aa:cd:1c:1b:6c:40:db:8c:8a:de:3a:84:d6:42: e8:20:87:e2:74:78:e3:75:c1:43:6d:e4:c0:b2:4e: f0:37:bf:6b:43:4c:fc:0e:87:18:2a:d9:19:c8:f0: 77:c4:8f:96:8b:04:2d:ee:a2:a3:8d:e9:09:51:3b: 8c:63:bb:80:2b:de:0a:b0:8d:18:9c:38:2f:54:97: 0a:8a:e4:1c:61:ab:33:c9:23:1c:45:0a:1e:ef:18: 63:eb:5a:be:ea:24:96:57:3f:44:07:c4:8e:e8:7a: 0e:c6:43:67:8c:b4:e4:86:b4:41:66:c0:86:87:d8: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2E:C4:A0:57:A6:B8:A3:E7:E9:4F:C2:72:12:8C:6E:8A:82:0A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:96:c9:4d:b0:07:39:1d:63:46:62:02:eb:01:65:92:a6:97: e6:2d:67:0b:7c:78:b2:40:a2:ec:68:08:ed:fb:7c:25:a1:d1: 59:30:99:7e:b0:71:ae:02:24:1b:ff:67:33:00:b0:de:3c:72: 13:73:3a:aa:4a:37:88:18:af:e5:fd:df:ad:02:69:41:e2:19: 10:06:8f:62:aa:99:4f:f9:3f:1e:57:38:e7:cd:2a:86:17:0b: 8c:1b:7f:7a:4c:1c:35:01:a0:d2:fc:d8:18:94:e1:54:b7:49: 4a:03:15:50:0c:52:24:01:1a:b6:fa:17:86:e5:b3:e8:44:ba: 44:c7:31:77:2d:60:96:ed:a0:28:63:9f:c2:a1:3c:15:72:72: b9:cc:1e:7d:d6:89:56:6c:e8:18:a5:a0:44:74:8c:72:63:c1: 7b:7a:ce:a2:ff:2f:d4:a1:6d:e9:81:a1:fd:54:8f:d4:b3:d0: 9f:93:86:c5:b5:4a:e5:fc:c3:bd:a4:fa:18:39:5a:c7:78:5e: 68:80:93:f1:eb:c7:25:a0:a2:e9:51:51:08:55:c0:2e:40:fc: 1e:c9:a8:69:7d:d8:92:1f:e1:2d:06:c9:2c:73:16:84:a8:e8: 93:23:41:b4:c5:45:24:bd:2d:2e:4d:d6:cf:fc:69:5c:d1:44: 45:31:73:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmbCrP1Abk1gVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MzZjMWU2ZjktOTNhMC00NTYxLWI0MjQtYmEwNTNiOTAyZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoYXHrqPu+WlrKUSCvAvEQAE2wof9HUc2Yn3 KZ0jyjMzpYuLUcEfOvSjXLfxPS8UvPjxb0KiqGNecCZqPyJh4mE01HFG4b4NxYEc +tFpDanZkHjIYMPzYqcwVpeOQ8z5v+jrfcrQLo3T2pdqynzKHRJhp49cbanJdmox DTXE+BhINxpOWmCoqs0cG2xA24yK3jqE1kLoIIfidHjjdcFDbeTAsk7wN79rQ0z8 DocYKtkZyPB3xI+WiwQt7qKjjekJUTuMY7uAK94KsI0YnDgvVJcKiuQcYaszySMc RQoe7xhj61q+6iSWVz9EB8SO6HoOxkNnjLTkhrRBZsCGh9j1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsuxKBXprij5+lPwnISjG6KggpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvODk4YzJmYWUtOWNjOS0z YmE5LTkwYTUtODVhZjhiNWI0ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjk9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGWyU2wBzkdY0ZiAusBZZKml+YtZwt8eLJAouxoCO37fCWh0VkwmX6w ca4CJBv/ZzMAsN48chNzOqpKN4gYr+X9360CaUHiGRAGj2KqmU/5Px5XOOfNKoYX C4wbf3pMHDUBoNL82BiU4VS3SUoDFVAMUiQBGrb6F4bls+hEukTHMXctYJbtoChj n8KhPBVycrnMHn3WiVZs6BiloER0jHJjwXt6zqL/L9ShbemBof1Uj9Sz0J+ThsW1 SuX8w72k+hg5Wsd4XmiAk/HrxyWgoulRUQhVwC5A/B7JqGl92JIf4S0GySxzFoSo 6JMjQbTFRSS9LS5N1s/8aVzRREUxcyU= -----END CERTIFICATE-----Generated at Wed Apr 8 22:59:15 2026 by rpki-client