$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa File: a4302370-01cb-38d0-a7bd-f931561466c3.roa (raw, json) Hash identifier: y01P/0Hpv0Kw/0dotfaulTkGaWppbTW7tEC/6ReXBCQ= Subject key identifier: E3:82:69:AD:D2:FA:DC:55:A0:A7:F1:68:9A:B3:46:2C:6C:0A:D6:27 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D9E501B68E5D4E3836332CC46 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 4213 IP address blocks: 173.214.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1b:68:e5:d4:e3:83:63:32:cc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=4e9b70da-fdc6-4724-adca-2be9c3d552c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:c8:39:46:e9:1d:b1:e1:c1:55:1c:82:d3: 5a:df:ee:f2:41:03:ba:9f:51:51:bd:7a:ee:bc:8c: d0:40:33:04:72:67:93:fe:f4:e8:b6:81:c3:59:2f: f7:32:83:f4:43:e6:3d:e5:71:ca:b4:fe:18:0f:fb: 77:a2:c5:f3:24:52:e9:9e:2f:ea:14:58:07:0b:67: e6:59:fe:1c:8e:84:43:0d:6c:9d:3a:63:88:00:25: 30:a2:c4:b2:21:54:58:09:09:d8:56:32:62:54:b6: e6:0a:64:98:4d:64:7a:e9:8e:cc:d8:d8:0d:16:1b: fa:e8:14:9c:6d:b9:b0:54:09:8d:49:be:b2:37:ac: 72:a3:a2:0d:7d:f4:8c:db:50:ca:ee:a5:19:73:63: b7:8f:80:55:79:33:08:63:19:09:17:73:ff:b7:fd: 2e:fb:f4:40:60:ea:ed:0a:cb:7d:91:e7:ad:07:62: 72:e8:8a:5d:22:1e:8a:ae:7d:01:8e:bd:da:e7:62: f1:be:3d:0e:f9:5f:80:29:cb:d5:c4:50:4c:cb:b8: bf:95:fd:c6:70:07:5d:b2:8e:ef:e3:98:79:ce:b6: e8:c3:f8:d6:51:65:f1:f1:ef:9e:41:ba:06:2a:6b: b8:bd:42:76:a4:55:02:b9:7d:4c:a8:d3:b0:ce:93: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:82:69:AD:D2:FA:DC:55:A0:A7:F1:68:9A:B3:46:2C:6C:0A:D6:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e1:8b:5e:66:2c:df:09:c5:d0:ed:c5:c3:7a:ca:9b:86:ff: 81:3d:b2:f8:d6:62:94:92:48:45:dd:d5:7c:59:a4:2f:a0:f3: e3:70:8c:3c:66:7a:2f:cc:6f:86:d0:48:29:17:6d:f7:10:3d: 4a:28:92:cd:0b:7a:1d:7b:74:2b:ec:3f:37:56:e0:b1:bd:fd: a5:10:4a:44:a4:8c:c9:20:a0:81:12:82:b6:3e:01:aa:04:0d: 22:16:3a:c5:73:6c:5a:67:b5:74:06:a8:0c:cf:ab:ac:d0:43: 1c:16:6e:ca:f8:8d:df:31:49:38:a8:15:6b:73:92:5d:dc:f3: 9c:75:1a:45:e3:f9:e1:01:f6:d2:5f:77:81:b5:2f:04:0c:8a: 56:ed:6d:73:8a:d2:75:8c:fd:8c:e2:46:bc:35:54:ac:e3:e1: 06:e4:69:3c:d0:81:61:0a:8e:c5:66:17:1f:85:f5:33:e4:e0: 2e:f5:74:66:75:ab:05:2b:b7:b8:11:cd:d9:ac:ef:8e:bb:3d: 4b:df:bb:b6:9e:5e:fc:41:e7:97:cb:85:83:7e:c5:af:59:7d: 34:72:9a:c1:6f:b2:a7:51:ef:f7:5e:71:99:0d:95:a6:6c:72: fb:e8:d7:cb:93:8b:20:6d:e8:4e:a3:94:ad:c8:e0:6e:53:39: a6:cd:0c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBto5dTjg2MyzEYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NGU5YjcwZGEtZmRjNi00NzI0LWFkY2EtMmJlOWMzZDU1MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdXIOUbpHbHhwVUcgtNa3+7yQQO6n1FRvXru vIzQQDMEcmeT/vTotoHDWS/3MoP0Q+Y95XHKtP4YD/t3osXzJFLpni/qFFgHC2fm Wf4cjoRDDWydOmOIACUwosSyIVRYCQnYVjJiVLbmCmSYTWR66Y7M2NgNFhv66BSc bbmwVAmNSb6yN6xyo6INffSM21DK7qUZc2O3j4BVeTMIYxkJF3P/t/0u+/RAYOrt Cst9keetB2Jy6IpdIh6Krn0Bjr3a52Lxvj0O+V+AKcvVxFBMy7i/lf3GcAddso7v 45h5zrbow/jWUWXx8e+eQboGKmu4vUJ2pFUCuX1MqNOwzpMVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOCaa3S+txVoKfxaJqzRixsCtYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYTQzMDIzNzAtMDFjYi0z OGQwLWE3YmQtZjkzMTU2MTQ2NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrhi15mLN8JxdDtxcN6ypuG/4E9svjWYpSSSEXd1XxZpC+g8+NwjDxm ei/Mb4bQSCkXbfcQPUooks0Leh17dCvsPzdW4LG9/aUQSkSkjMkgoIESgrY+AaoE DSIWOsVzbFpntXQGqAzPq6zQQxwWbsr4jd8xSTioFWtzkl3c85x1GkXj+eEB9tJf d4G1LwQMilbtbXOK0nWM/YziRrw1VKzj4QbkaTzQgWEKjsVmFx+F9TPk4C71dGZ1 qwUrt7gRzdms7467PUvfu7aeXvxB55fLhYN+xa9ZfTRymsFvsqdR7/decZkNlaZs cvvo18uTiyBt6E6jlK3I4G5TOabNDCM= -----END CERTIFICATE-----Generated at Wed May 13 11:04:21 2026 by rpki-client