$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa File: 58bb2d1c-10b2-3954-b73d-a493764205ed.roa (raw, json) Hash identifier: pqAd5KTvW/sfhfCjDN/565ir8agH1Ee3lOefn/Ahh68= Subject key identifier: E7:BF:AA:A1:6A:5D:02:26:D2:63:C4:96:18:A8:F8:91:A5:D1:77:3B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E7E94F08B11B3A7B6850F3A30 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 35908 IP address blocks: 67.198.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f0:8b:11:b3:a7:b6:85:0f:3a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=f39cb4c2-a03b-43b1-9c49-0807ee019b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:3d:20:7a:21:28:98:5f:f4:15:5f:06:f2: 6e:35:b8:46:a8:43:7f:8b:bd:c2:4e:95:5e:b4:b1: 8e:5a:3c:01:87:b5:a9:6f:63:1e:ab:9a:3d:e1:6e: 3d:5b:51:66:87:59:cc:c3:58:fb:25:b0:ea:33:af: a4:d9:f6:03:56:88:47:2b:2a:91:35:33:ed:5f:c4: 2b:67:71:5f:be:1e:d5:b1:e6:12:bf:b3:9f:92:e8: 2c:6f:3b:63:0f:8b:08:dc:54:0c:c9:6e:b8:fd:85: 19:9c:ac:86:9d:62:62:94:bf:7c:ee:f7:d9:dd:6a: b6:13:36:76:d2:cd:d3:3f:f0:27:79:06:bf:bc:a0: 11:68:49:b9:a8:79:69:aa:4b:b2:d4:59:43:1b:f0: 4f:d8:0d:f3:bb:2c:4d:b7:bd:00:d6:4f:8a:60:31: 4a:61:35:fd:70:38:be:ca:bb:6f:e0:c9:f9:1d:34: 21:d1:11:b9:47:70:fc:72:b9:5f:9e:49:d3:6d:20: 5a:e7:f2:33:67:d0:b7:4e:3b:56:db:bc:6b:10:77: 05:6d:39:8e:a4:98:59:ec:de:b5:a0:e7:b8:d2:41: 1a:61:d7:9c:be:8a:35:9b:08:56:59:db:8c:7c:de: 5e:11:ca:08:00:22:34:1f:c6:11:aa:1e:be:63:9f: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:AA:A1:6A:5D:02:26:D2:63:C4:96:18:A8:F8:91:A5:D1:77:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f0:57:42:36:ce:d0:8b:25:fe:35:34:9a:9b:16:dd:14:fc: c8:09:37:62:3f:9c:4b:74:90:d1:2d:5b:3c:40:c9:d6:9d:fb: a6:91:06:a1:fb:d6:19:34:4e:84:0f:76:82:32:68:5a:6b:c1: ff:12:6f:85:44:4e:7f:04:7b:8c:6d:37:b7:65:78:4d:11:0b: d3:15:32:c6:f7:0c:0d:be:5a:c8:28:c7:0d:19:a9:41:a4:d4: c0:69:15:63:53:f0:3c:50:a4:b2:c1:f3:f4:a9:ed:5e:fe:36: a0:1f:d5:11:a8:e6:52:1d:10:d4:ab:f3:d5:2d:c3:9d:e8:31: 1d:10:98:e2:d5:32:28:15:42:09:5e:78:df:de:51:f3:fa:6d: 0b:c3:83:14:67:a8:ac:72:5e:f7:ca:43:36:94:1b:ed:81:30: e8:ad:fc:39:34:b8:37:d2:a9:a0:ea:9c:c1:13:87:32:d6:84: 39:d9:6e:0f:f6:6f:1f:96:9e:5d:ad:93:2d:f2:b2:76:fa:1b: d3:68:8f:88:fc:87:cd:5d:8c:ef:47:a0:cc:59:36:4a:d0:91: 74:93:9a:6c:69:ed:6e:a1:c0:8d:c5:89:f5:a9:a5:d6:9d:8c: ca:53:ae:99:5d:b8:23:14:a9:47:ee:9d:55:54:bf:e3:fd:10: 45:0a:4c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPCLEbOntoUPOjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZjM5Y2I0YzItYTAzYi00M2IxLTljNDktMDgwN2VlMDE5YjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3c9IHohKJhf9BVfBvJuNbhGqEN/i73CTpVe tLGOWjwBh7Wpb2Meq5o94W49W1Fmh1nMw1j7JbDqM6+k2fYDVohHKyqRNTPtX8Qr Z3Ffvh7VseYSv7OfkugsbztjD4sI3FQMyW64/YUZnKyGnWJilL987vfZ3Wq2EzZ2 0s3TP/AneQa/vKARaEm5qHlpqkuy1FlDG/BP2A3zuyxNt70A1k+KYDFKYTX9cDi+ yrtv4Mn5HTQh0RG5R3D8crlfnknTbSBa5/IzZ9C3TjtW27xrEHcFbTmOpJhZ7N61 oOe40kEaYdecvoo1mwhWWduMfN5eEcoIACI0H8YRqh6+Y59MswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe/qqFqXQIm0mPElhio+JGl0Xc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNThiYjJkMWMtMTBiMi0z OTU0LWI3M2QtYTQ5Mzc2NDIwNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ8aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrwV0I2ztCLJf41NJqbFt0U/MgJN2I/nEt0kNEtWzxAydad+6aRBqH7 1hk0ToQPdoIyaFprwf8Sb4VETn8Ee4xtN7dleE0RC9MVMsb3DA2+Wsgoxw0ZqUGk 1MBpFWNT8DxQpLLB8/Sp7V7+NqAf1RGo5lIdENSr89Utw53oMR0QmOLVMigVQgle eN/eUfP6bQvDgxRnqKxyXvfKQzaUG+2BMOit/Dk0uDfSqaDqnMEThzLWhDnZbg/2 bx+Wnl2tky3ysnb6G9Noj4j8h81djO9HoMxZNkrQkXSTmmxp7W6hwI3FifWppdad jMpTrplduCMUqUfunVVUv+P9EEUKTEM= -----END CERTIFICATE-----Generated at Fri Jul 24 08:23:14 2026 by rpki-client