$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa File: 23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa (raw, json) Hash identifier: eZFbu3e2Rdcoa7dsBi5W0dsJQ/qWp4xP1HMTvt64kSI= Subject key identifier: 4D:55:2C:CF:44:86:8A:2F:EB:73:2F:4C:96:BC:92:7E:5A:F9:7F:5C Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E7E94F6CB6023B0713CEF3BC0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 35908 IP address blocks: 67.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f6:cb:60:23:b0:71:3c:ef:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=52a0c46e-67f6-4ff2-acbc-9a8e72432323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:53:56:5e:e3:d1:9a:91:66:57:aa:b1:b3: fb:2e:e9:83:d6:91:5c:cc:85:c1:4a:96:8b:ea:8c: 2c:d5:8e:ae:4e:69:dd:82:dc:dc:29:32:a8:3f:28: e3:4c:9a:79:cb:7d:04:55:0b:86:96:12:aa:cd:6a: 79:ba:0c:55:98:8b:fd:5c:55:b4:b8:75:fa:3c:fb: 4a:e8:00:24:f3:ec:f0:86:49:d8:38:a9:3e:ba:76: a7:0b:30:69:68:d7:5b:30:e3:08:95:b5:25:9c:e7: c8:3b:15:3f:2e:ff:0b:d0:fd:0a:66:04:3d:7c:40: be:9a:ec:28:a3:dd:63:7b:c5:85:47:39:52:34:51: 4e:e6:94:aa:ec:8c:34:27:66:43:3d:8c:46:5b:70: 30:3c:c5:15:5c:6e:0f:c3:7b:67:ae:14:a9:54:77: 42:3e:7e:b8:e5:6a:b7:6b:70:d3:10:e8:d0:1b:d6: 99:e7:43:df:e2:43:09:54:cb:f3:aa:08:4b:66:b7: b5:7e:d7:61:62:d9:c5:62:07:c6:6e:20:45:a8:37: bc:e8:79:09:ab:7d:83:77:59:59:bd:52:84:2d:37: 02:68:59:d8:da:29:24:bc:59:31:ff:62:83:9c:d3: da:73:fb:e5:0d:96:02:3e:3f:1f:df:f6:16:f2:ca: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:55:2C:CF:44:86:8A:2F:EB:73:2F:4C:96:BC:92:7E:5A:F9:7F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.229.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:f2:40:b6:67:7c:4a:f5:46:aa:98:5f:49:2e:ca:0b:6a:8f: 37:02:f6:64:e0:78:61:33:75:8a:03:2d:c7:2f:e8:eb:48:65: 49:20:5f:38:d6:02:1f:10:2a:95:af:ee:a7:53:4a:28:df:e7: 01:7e:9c:ab:64:27:c9:93:2c:8e:b5:ac:4f:95:c1:23:ad:14: 71:c8:e4:65:3f:4f:30:fc:cc:0b:52:f5:47:aa:b0:6e:e5:5e: 01:4c:03:f2:1c:81:39:1b:b2:ab:48:c5:8b:d1:e6:ca:47:ad: 1c:2e:90:dd:dc:16:2a:c3:74:a3:25:41:cc:6d:fb:b9:8e:64: 4c:83:13:d0:18:bb:17:1a:ac:79:1d:b3:1c:ff:15:ca:69:f5: 62:ab:d1:2b:89:3b:84:a8:19:92:b6:be:a9:8c:cf:13:c3:b7: 0c:2c:6d:30:e0:09:b0:87:46:d5:2a:ac:f1:f9:f9:9b:75:43: 8e:5d:11:85:a6:43:3f:2d:13:58:d3:97:a1:b5:b4:96:0a:05: d6:30:7d:8f:40:57:60:54:72:a0:d0:da:9c:4f:8b:3e:31:bd: 74:88:ea:8f:23:b8:a9:2e:b1:3a:2a:1e:74:a1:25:7c:b7:da: 2e:02:6b:66:76:cc:c4:fa:fb:21:4c:94:8a:ed:b9:17:84:07: be:79:42:81 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5+lPbLYCOwcTzvO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NTJhMGM0NmUtNjdmNi00ZmYyLWFjYmMtOWE4ZTcyNDMyMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKZTVl7j0ZqRZleqsbP7LumD1pFczIXBSpaL 6ows1Y6uTmndgtzcKTKoPyjjTJp5y30EVQuGlhKqzWp5ugxVmIv9XFW0uHX6PPtK 6AAk8+zwhknYOKk+unanCzBpaNdbMOMIlbUlnOfIOxU/Lv8L0P0KZgQ9fEC+muwo o91je8WFRzlSNFFO5pSq7Iw0J2ZDPYxGW3AwPMUVXG4Pw3tnrhSpVHdCPn645Wq3 a3DTEOjQG9aZ50Pf4kMJVMvzqghLZre1ftdhYtnFYgfGbiBFqDe86HkJq32Dd1lZ vVKELTcCaFnY2ikkvFkx/2KDnNPac/vlDZYCPj8f3/YW8sq0hQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE1VLM9Ehoov63MvTJa8kn5a+X9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjM1NzVmZjEtZjBhYi0z NTAzLWE3MDMtYTNlMWRmMmIwYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ+UwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAwvJAtmd8SvVGqphfSS7KC2qPNwL2ZOB4YTN1igMtxy/o60hlSSBfONYC HxAqla/up1NKKN/nAX6cq2QnyZMsjrWsT5XBI60UccjkZT9PMPzMC1L1R6qwbuVe AUwD8hyBORuyq0jFi9HmyketHC6Q3dwWKsN0oyVBzG37uY5kTIMT0Bi7FxqseR2z HP8Vymn1YqvRK4k7hKgZkra+qYzPE8O3DCxtMOAJsIdG1Sqs8fn5m3VDjl0RhaZD Py0TWNOXobW0lgoF1jB9j0BXYFRyoNDanE+LPjG9dIjqjyO4qS6xOioedKElfLfa LgJrZnbMxPr7IUyUiu25F4QHvnlCgQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:56:00 2026 by rpki-client