$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa File: 1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa (raw, json) Hash identifier: EHcW4+bSvl7OMNNu9u4CwcNtGCF1O57cgpA+avLSXTw= Subject key identifier: 9C:7C:A6:4A:82:FB:9F:4D:43:DE:6B:8E:DA:C4:86:4F:AE:F1:93:82 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584FC3013772C97138EEF8798280 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 4213 IP address blocks: 74.222.131.0/24 maxlen: 24 74.222.136.0/24 maxlen: 24 74.222.140.0/24 maxlen: 24 74.222.142.0/24 maxlen: 24 74.222.147.0/24 maxlen: 24 74.222.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:37:72:c9:71:38:ee:f8:79:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=337caa3c-12b7-46d4-9e43-dcc1d002cdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:15:8c:48:5c:81:37:1f:17:8b:7a:1a:f2:ec: b6:07:8b:53:ea:df:52:d7:7b:ba:e1:3a:60:3f:25: ac:0b:e8:94:8f:71:a5:4d:0a:11:00:25:ad:e2:ce: 07:60:91:1b:93:c8:d2:de:22:48:43:de:54:54:ce: bc:93:a9:4a:73:2b:42:dc:7b:5b:2f:61:bc:b7:81: fa:53:4a:98:50:ce:f1:5a:4b:2b:db:18:09:a6:d8: 11:a9:48:8c:c6:8b:82:7d:1c:61:f0:26:a8:3a:87: a2:42:bc:30:a1:52:14:38:39:f6:77:79:88:8d:0c: 97:e1:cc:70:b5:d9:8e:eb:5d:75:84:b8:45:a7:fb: 72:3b:ba:f4:08:4f:5f:bd:d8:af:a9:cc:b4:b4:51: 00:b7:ea:f2:6f:59:7f:ac:1c:fd:18:48:f1:f7:f8: 17:dc:23:3b:c1:c9:7f:72:f2:c7:a7:17:6b:d1:40: 05:dc:f5:fa:1a:47:b3:53:fd:52:ea:22:51:4b:d0: c3:41:60:0e:f2:1c:d5:fa:f0:b1:70:be:b2:48:92: 7b:e3:31:97:c1:b4:3c:f0:04:42:c8:31:df:09:3c: e3:96:39:1c:9c:1d:4e:f5:17:ee:c4:17:68:97:0c: c8:bd:e7:80:d4:5e:6c:c7:81:06:ff:47:75:be:f9: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7C:A6:4A:82:FB:9F:4D:43:DE:6B:8E:DA:C4:86:4F:AE:F1:93:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.131.0/24 74.222.136.0/24 74.222.140.0/24 74.222.142.0/24 74.222.147.0/24 74.222.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:cd:2f:fe:8a:68:bf:55:90:5b:cb:20:5f:83:b6:2a:bf:e7: 50:30:cf:3a:32:fd:57:86:d5:63:0a:35:3d:c8:3b:ec:50:da: 99:bb:dd:fa:65:a8:0f:40:b9:c0:2c:3d:d8:03:4b:44:b9:c3: 97:67:59:25:2d:22:f4:e4:09:d2:30:10:54:74:d9:33:ea:86: 8b:34:eb:af:51:83:dc:a5:28:c4:e9:73:9d:c9:cc:31:5a:c0: 15:23:6e:9b:98:f4:25:f5:e4:fb:db:3e:1f:68:1c:95:47:75: b5:d1:e6:1a:3f:eb:e8:8b:27:05:68:0d:87:af:90:47:1c:a9: f9:37:8d:61:e3:e4:16:a5:9e:44:46:9e:2a:6d:2d:bc:97:b8: c0:d4:7e:c1:b8:73:fa:04:8e:1f:96:5e:8a:40:af:33:66:db: 83:f1:4f:d4:56:8c:b9:09:43:83:ea:23:72:6e:af:c0:0c:51: cb:98:c4:42:ae:40:aa:17:7c:1b:9d:e5:64:60:3c:00:d9:10: ff:2c:e0:a1:52:a1:d8:5f:4b:f3:4b:c7:1e:40:6e:79:de:45: 4c:3f:13:f8:4e:81:1d:ae:0c:f3:c9:17:5b:80:d8:36:2a:fa: bf:c3:86:a2:51:93:8a:47:01:de:43:3c:dc:1d:8e:3a:5b:2f: a3:5a:80:65 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE/DATdyyXE47vh5goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MzM3Y2FhM2MtMTJiNy00NmQ0LTllNDMtZGNjMWQwMDJjZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BWMSFyBNx8Xi3oa8uy2B4tT6t9S13u64Tpg PyWsC+iUj3GlTQoRACWt4s4HYJEbk8jS3iJIQ95UVM68k6lKcytC3HtbL2G8t4H6 U0qYUM7xWksr2xgJptgRqUiMxouCfRxh8CaoOoeiQrwwoVIUODn2d3mIjQyX4cxw tdmO6111hLhFp/tyO7r0CE9fvdivqcy0tFEAt+ryb1l/rBz9GEjx9/gX3CM7wcl/ cvLHpxdr0UAF3PX6GkezU/1S6iJRS9DDQWAO8hzV+vCxcL6ySJJ74zGXwbQ88ARC yDHfCTzjljkcnB1O9RfuxBdolwzIveeA1F5sx4EG/0d1vvl5YQIDAQABo4IDczCC A28wHQYDVR0OBBYEFJx8pkqC+59NQ95rjtrEhk+u8ZOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWMxZTc4NWEtMGNiOS0z YzRjLWI0NzctMTliY2IwYjgxZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQASt6DAwQA St6IAwQASt6MAwQASt6OAwQASt6TAwQBSt6oMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMfNL/6KaL9VkFvL IF+Dtiq/51Awzzoy/VeG1WMKNT3IO+xQ2pm73fplqA9AucAsPdgDS0S5w5dnWSUt IvTkCdIwEFR02TPqhos0669Rg9ylKMTpc53JzDFawBUjbpuY9CX15PvbPh9oHJVH dbXR5ho/6+iLJwVoDYevkEccqfk3jWHj5BalnkRGniptLbyXuMDUfsG4c/oEjh+W XopArzNm24PxT9RWjLkJQ4PqI3Jur8AMUcuYxEKuQKoXfBud5WRgPADZEP8s4KFS odhfS/NLxx5AbnneRUw/E/hOgR2uDPPJF1uA2DYq+r/DhqJRk4pHAd5DPNwdjjpb L6NagGU= -----END CERTIFICATE-----Generated at Sun Nov 15 20:49:37 2026 by rpki-client