$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa File: 23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa (raw, json) Hash identifier: yiViWeAx8LKiIhn0Rd7iTOTsuqfHk3BJB9Cgmcdoe6s= Subject key identifier: 3A:B5:70:31:3E:F8:5F:9B:F3:19:A6:3A:19:14:BC:42:E9:69:61:19 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D9E501AF9C94E2BB94A9BF840 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 35908 IP address blocks: 67.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1a:f9:c9:4e:2b:b9:4a:9b:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=cd24cd28-0bbb-4def-875d-a9e594ecf245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:45:5c:3d:4d:9e:98:30:8a:be:87:5c:45: 0c:e7:7e:5f:3a:63:18:7b:28:1c:dd:df:59:d9:75: c3:ea:f9:bb:83:fb:a3:4b:ce:da:c6:23:1f:6a:f9: a4:89:d5:42:9f:58:0b:d4:b8:ae:ea:16:3f:e7:01: d5:08:e2:0f:17:e1:c9:a3:dd:ba:55:fd:0b:aa:df: 2a:0a:27:01:84:56:81:77:c2:b7:b6:fd:79:23:77: 73:ae:77:bb:d5:58:32:69:97:3c:ca:54:a6:ae:2e: 11:14:96:5a:b5:ed:12:5c:4d:d0:73:26:db:70:ae: 44:78:26:87:55:4a:4b:06:b0:67:c1:2b:e9:4e:cf: af:40:b2:5e:49:81:a3:e8:f1:30:b3:8d:7b:c2:11: 44:3e:e3:8e:09:ef:d6:18:f0:56:eb:b5:3e:27:9b: 46:e1:2f:60:c2:99:32:63:b2:33:9f:38:b9:26:b1: 25:53:2c:9f:c3:7b:40:8c:ae:4f:6d:02:56:b0:6d: 5c:1e:4e:07:1d:e5:c9:67:a3:06:99:bb:4f:cb:ad: 49:fe:ba:16:af:04:ef:f9:1b:dd:ef:d2:7f:ea:a0: 03:35:c6:8d:ca:1f:62:b8:b3:98:ea:89:f6:0a:f2: 1a:c7:81:59:43:47:43:3a:74:cb:e2:11:6a:69:62: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:70:31:3E:F8:5F:9B:F3:19:A6:3A:19:14:BC:42:E9:69:61:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.229.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:84:91:5b:84:b5:b1:9c:ca:30:3b:9a:24:d7:4f:c1:a2:79: 96:13:e6:af:23:a8:a5:b5:ec:ab:1b:b4:35:22:98:1c:39:49: 5c:1e:b3:5f:79:49:54:13:55:5e:f4:00:48:00:33:ac:0d:1f: 97:1b:12:40:9d:80:20:63:cb:fb:e1:0e:6d:5f:b7:1e:a0:f8: d4:cc:e3:cd:e0:34:23:36:8e:00:b7:cf:0c:88:3c:58:22:86: e6:80:a4:a7:73:ac:5a:af:f4:2a:36:1b:3a:69:02:8b:41:70: 8c:4b:c7:9d:f6:c9:de:ba:9c:d2:dd:c3:ef:f2:30:f1:0f:1d: cc:27:88:73:1d:a2:4c:fa:d7:85:36:b6:ee:ea:f8:1b:65:92: a2:0e:aa:c7:7c:1f:e7:cd:77:b0:bd:3f:15:6e:2e:66:58:af: fb:36:3e:15:1a:30:03:73:93:11:a4:a3:b5:a2:ee:c1:44:2b: c7:c0:e3:87:10:45:45:d6:64:32:35:85:c3:8f:21:ca:ea:d3: 44:a8:96:07:ac:0b:d5:7c:b5:2e:e9:0f:24:c8:01:82:4a:85: 84:55:c9:4f:b9:27:21:b0:43:a8:00:bd:6e:21:a4:6c:dc:12: 45:73:87:48:e2:ee:96:ef:b7:a5:2b:b9:df:99:76:4b:1c:12: 26:a9:17:46 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2eUBr5yU4ruUqb+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Y2QyNGNkMjgtMGJiYi00ZGVmLTg3NWQtYTllNTk0ZWNmMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLtFXD1Nnpgwir6HXEUM535fOmMYeygc3d9Z 2XXD6vm7g/ujS87axiMfavmkidVCn1gL1Liu6hY/5wHVCOIPF+HJo926Vf0Lqt8q CicBhFaBd8K3tv15I3dzrne71VgyaZc8ylSmri4RFJZate0SXE3QcybbcK5EeCaH VUpLBrBnwSvpTs+vQLJeSYGj6PEws417whFEPuOOCe/WGPBW67U+J5tG4S9gwpky Y7Iznzi5JrElUyyfw3tAjK5PbQJWsG1cHk4HHeXJZ6MGmbtPy61J/roWrwTv+Rvd 79J/6qADNcaNyh9iuLOY6on2CvIax4FZQ0dDOnTL4hFqaWL/HQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDq1cDE++F+b8xmmOhkUvELpaWEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjM1NzVmZjEtZjBhYi0z NTAzLWE3MDMtYTNlMWRmMmIwYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ+UwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd4SRW4S1sZzKMDuaJNdPwaJ5lhPmryOopbXsqxu0NSKYHDlJXB6zX3lJ VBNVXvQASAAzrA0flxsSQJ2AIGPL++EObV+3HqD41MzjzeA0IzaOALfPDIg8WCKG 5oCkp3OsWq/0KjYbOmkCi0FwjEvHnfbJ3rqc0t3D7/Iw8Q8dzCeIcx2iTPrXhTa2 7ur4G2WSog6qx3wf5813sL0/FW4uZliv+zY+FRowA3OTEaSjtaLuwUQrx8DjhxBF RdZkMjWFw48hyurTRKiWB6wL1Xy1LukPJMgBgkqFhFXJT7knIbBDqAC9biGkbNwS RXOHSOLulu+3pSu535l2SxwSJqkXRg== -----END CERTIFICATE-----Generated at Wed May 13 07:20:48 2026 by rpki-client