$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa File: b818da63-b5bf-3282-a0d6-062f6b347687.roa (raw, json) Hash identifier: K6p+kQwMWO/DTMkmTTVLdQD11oRztMlnn4Uww3Y73Cw= Subject key identifier: D5:07:78:D5:E1:77:4B:3A:05:70:1B:B0:03:52:E7:63:2F:CF:86:76 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F0ED2367F6C1E6A3A5079A520 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 35908 IP address blocks: 174.139.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:36:7f:6c:1e:6a:3a:50:79:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=376cf4ef-ab6b-41da-aad4-918cac45c0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:79:42:0f:41:52:31:af:c6:19:38:85:b7: 3f:f1:d1:87:72:d7:27:6a:93:e5:d9:e7:18:0c:0c: 4c:b7:37:60:c3:96:8e:3e:be:8b:da:2b:6a:82:a7: fb:1b:c2:a1:01:0b:04:6c:39:57:aa:51:70:d1:4e: 0a:cb:6c:48:43:a8:08:60:6b:a4:71:e0:d7:59:e7: 52:36:7e:07:e7:09:61:7e:ca:ef:7f:d9:f2:7a:b2: d8:43:95:e3:1b:78:bb:92:ee:0c:25:80:f7:0a:f5: 52:d6:87:9b:90:9e:0a:87:f3:14:2a:2b:2c:bc:2e: d5:e0:c8:8d:dc:0b:00:f4:de:bc:5a:73:de:35:5b: 7d:c6:aa:ef:ac:c5:e0:ca:5e:4e:bd:f6:ee:c3:5c: 39:9d:b7:31:26:58:0b:ed:5f:7d:49:bd:6e:f3:f1: b1:f0:e2:b4:c9:c4:4d:8a:48:1f:e3:d6:d4:62:39: e8:0e:24:82:9a:26:79:95:57:6d:79:ca:d7:d2:30: 57:ab:03:0f:12:8c:06:a5:9e:7c:61:c3:ea:7f:f9: 5b:a5:ff:d7:0e:39:c4:72:50:a0:3a:8a:df:02:ef: 26:bc:a4:64:a8:1b:b8:6a:50:d4:cd:e1:2f:9a:c6: e2:d4:bb:a5:42:65:74:8b:a4:15:11:d6:ed:28:0b: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:07:78:D5:E1:77:4B:3A:05:70:1B:B0:03:52:E7:63:2F:CF:86:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b818da63-b5bf-3282-a0d6-062f6b347687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:59:fb:74:3b:9c:64:fb:81:67:0a:75:6f:52:d4:74:cc:b7: 33:05:3e:f4:1d:ca:f7:87:1f:aa:b2:da:44:7b:28:7e:52:a8: 03:d3:34:c2:46:f8:9e:72:ad:9a:39:1f:96:cb:81:19:3f:c2: 1c:2e:23:bd:88:53:62:54:42:da:cc:ea:55:12:78:03:24:cb: 11:2e:c4:1d:1f:96:22:34:d2:7b:75:4d:59:91:b1:00:59:ac: 1f:a5:88:0f:94:79:42:f1:90:e3:e3:49:fa:77:82:6d:73:ad: 8d:cf:92:c9:41:97:0d:4d:87:5d:13:d6:c2:ff:a0:33:ae:a6: 19:c8:b8:18:04:5c:dd:98:0a:0e:ef:86:9d:89:9b:40:19:50: 9d:fa:cb:8a:76:a9:22:72:ac:c5:14:1a:2c:f8:36:0f:01:5d: 26:75:ae:fb:5d:ff:d8:32:d9:10:05:6b:43:3f:4b:90:f8:34: fc:9d:d7:bb:b8:ca:ea:54:52:a1:a1:73:ab:fb:60:fa:23:12: 57:85:f3:bb:00:49:bc:ba:2c:e9:82:c5:a8:75:24:df:80:11: 64:08:e6:6d:4f:30:20:88:ef:c0:4f:da:3f:a7:39:9d:35:4f: b4:7c:03:9a:3b:be:c4:71:5f:44:dc:d4:15:ad:75:03:53:8d: ce:ce:88:93 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8O0jZ/bB5qOlB5pSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk Mzc2Y2Y0ZWYtYWI2Yi00MWRhLWFhZDQtOTE4Y2FjNDVjMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4N5Qg9BUjGvxhk4hbc/8dGHctcnapPl2ecY DAxMtzdgw5aOPr6L2itqgqf7G8KhAQsEbDlXqlFw0U4Ky2xIQ6gIYGukceDXWedS Nn4H5wlhfsrvf9nyerLYQ5XjG3i7ku4MJYD3CvVS1oebkJ4Kh/MUKissvC7V4MiN 3AsA9N68WnPeNVt9xqrvrMXgyl5Ovfbuw1w5nbcxJlgL7V99Sb1u8/Gx8OK0ycRN ikgf49bUYjnoDiSCmiZ5lVdtecrX0jBXqwMPEowGpZ58YcPqf/lbpf/XDjnEclCg OorfAu8mvKRkqBu4alDUzeEvmsbi1LulQmV0i6QVEdbtKAsmGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNUHeNXhd0s6BXAbsANS52Mvz4Z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYjgxOGRhNjMtYjViZi0z MjgyLWEwZDYtMDYyZjZiMzQ3Njg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAroswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhln7dDucZPuBZwp1b1LUdMy3MwU+9B3K94cfqrLaRHsoflKoA9M0wkb4 nnKtmjkflsuBGT/CHC4jvYhTYlRC2szqVRJ4AyTLES7EHR+WIjTSe3VNWZGxAFms H6WID5R5QvGQ4+NJ+neCbXOtjc+SyUGXDU2HXRPWwv+gM66mGci4GARc3ZgKDu+G nYmbQBlQnfrLinapInKsxRQaLPg2DwFdJnWu+13/2DLZEAVrQz9LkPg0/J3Xu7jK 6lRSoaFzq/tg+iMSV4XzuwBJvLos6YLFqHUk34ARZAjmbU8wIIjvwE/aP6c5nTVP tHwDmju+xHFfRNzUFa11A1ONzs6Ikw== -----END CERTIFICATE-----Generated at Fri Sep 25 20:07:46 2026 by rpki-client