$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa File: 6a77ca73-dc19-3013-b245-2c1af94b6002.roa (raw, json) Hash identifier: ZQztAvzD1F7dVzjrcUYhu3sXsM5qKisqHG0M/8yxrpI= Subject key identifier: 8C:CE:ED:6A:0C:C6:55:5E:A8:97:DC:F1:E1:70:4C:7E:0F:76:3F:21 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E7E94F73D3A407730D756A680 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 4213 IP address blocks: 173.214.20.0/22 maxlen: 24 173.214.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f7:3d:3a:40:77:30:d7:56:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=20b19f4b-ceaf-4419-9b67-e79193c2b485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:fa:d1:20:a9:f4:89:37:43:f0:8c:98:51: a9:aa:55:47:2e:65:70:38:f4:cf:ed:da:16:7c:f6: fb:42:43:d8:3c:e4:2f:eb:cd:c6:64:d5:65:9a:37: e9:62:3e:3a:75:e1:13:b3:2d:41:46:16:28:e9:a1: 15:5a:97:6e:ed:88:7a:96:37:97:29:57:88:b4:98: 5a:e0:d7:7d:45:46:05:ea:ba:6e:eb:89:88:3b:78: 77:b5:7f:f2:61:28:28:ef:4d:4c:cd:8b:ca:c4:2f: 01:3c:4d:59:78:60:13:7f:27:1c:2c:58:ab:b8:f6: 86:72:5d:93:35:7b:24:6e:cc:f1:f5:6a:58:b1:c7: 2d:33:08:de:65:95:19:3e:42:d6:da:33:3e:1f:42: db:61:30:f2:fb:e8:d2:fc:89:47:ca:f7:71:34:d3: 01:6c:ef:0c:39:bd:e7:93:ac:2c:46:ab:09:f6:4a: 17:f1:60:e9:e1:84:d5:14:17:2f:d8:b7:e6:1c:c8: f6:bb:b6:0c:92:1e:91:81:66:b8:df:02:e4:b5:2c: 42:02:b6:d3:e7:7f:31:03:9b:1e:c3:59:60:b7:80: 49:88:4e:9c:7d:cf:73:61:2f:0b:e0:da:94:19:75: d4:b4:0f:3e:0d:74:48:d8:46:bd:33:2d:30:f7:69: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CE:ED:6A:0C:C6:55:5E:A8:97:DC:F1:E1:70:4C:7E:0F:76:3F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.20.0-173.214.27.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:18:1e:df:93:cd:52:ea:d3:25:39:a1:35:26:55:22:29:dc: 20:37:68:31:3b:2f:aa:56:98:4f:0b:e2:40:da:45:36:01:3c: 6a:88:32:bf:3d:b8:0d:28:e6:1f:1c:db:4a:a3:90:2e:d8:85: 23:b0:47:7d:76:68:db:4d:a0:f3:11:d1:13:38:04:37:b3:c2: 7f:26:97:8f:26:32:01:28:00:6c:cc:85:dc:79:a6:bd:9d:cc: f4:dc:f2:88:d7:dd:06:e0:4b:48:f7:e5:ad:4a:3a:85:82:8f: 54:ff:9e:6e:17:ea:76:1d:f7:67:5f:22:c7:2b:4b:0b:2a:c5: 9b:44:88:1b:41:0d:5c:5d:8d:f2:7b:df:99:65:2f:0d:9a:77: 13:35:b3:56:27:56:9f:ef:9f:49:59:68:95:74:ea:56:47:52: 6c:4c:58:c7:46:79:61:0f:06:f1:05:cd:95:4b:92:bf:be:80: 59:ab:01:a2:b7:5d:e9:33:2a:69:93:7a:8a:fa:17:b7:71:46: 88:3d:f5:99:15:9b:4a:4d:48:5c:07:42:4d:ba:ba:56:f6:e1: 3f:83:19:f8:4a:9e:d1:5a:72:8d:59:9b:57:3e:da:84:3c:ca: fe:cb:c0:dc:b3:53:2c:21:af:f0:18:6d:80:34:04:db:f8:9e: 09:41:78:51 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5+lPc9OkB3MNdWpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjBiMTlmNGItY2VhZi00NDE5LTliNjctZTc5MTkzYzJiNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1b60SCp9Ik3Q/CMmFGpqlVHLmVwOPTP7doW fPb7QkPYPOQv683GZNVlmjfpYj46deETsy1BRhYo6aEVWpdu7Yh6ljeXKVeItJha 4Nd9RUYF6rpu64mIO3h3tX/yYSgo701MzYvKxC8BPE1ZeGATfyccLFiruPaGcl2T NXskbszx9WpYscctMwjeZZUZPkLW2jM+H0LbYTDy++jS/IlHyvdxNNMBbO8MOb3n k6wsRqsJ9koX8WDp4YTVFBcv2LfmHMj2u7YMkh6RgWa43wLktSxCArbT538xA5se w1lgt4BJiE6cfc9zYS8L4NqUGXXUtA8+DXRI2Ea9My0w92nkCQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIzO7WoMxlVeqJfc8eFwTH4Pdj8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNmE3N2NhNzMtZGMxOS0z MDEzLWIyNDUtMmMxYWY5NGI2MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKt1hQD BAKt1hgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAehge35PNUurTJTmhNSZVIincIDdoMTsvqlaYTwviQNpF NgE8aogyvz24DSjmHxzbSqOQLtiFI7BHfXZo202g8xHREzgEN7PCfyaXjyYyASgA bMyF3HmmvZ3M9NzyiNfdBuBLSPflrUo6hYKPVP+ebhfqdh33Z18ixytLCyrFm0SI G0ENXF2N8nvfmWUvDZp3EzWzVidWn++fSVlolXTqVkdSbExYx0Z5YQ8G8QXNlUuS v76AWasBordd6TMqaZN6ivoXt3FGiD31mRWbSk1IXAdCTbq6VvbhP4MZ+Eqe0Vpy jVmbVz7ahDzK/svA3LNTLCGv8BhtgDQE2/ieCUF4UQ== -----END CERTIFICATE-----Generated at Fri Jul 24 08:23:39 2026 by rpki-client