$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa File: df882eef-1faf-3541-8255-366c9e2451b2.roa (raw, json) Hash identifier: 36pnaoYJylO3QczXVW7xlQ1K/nqZmsPw6uTKF8Er9Ig= Subject key identifier: 04:68:D2:21:31:FC:2F:2D:32:6C:46:01:6F:1D:D4:A5:88:FB:66:FE Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E6C6F69276E08A02FA420C2C0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 4213 IP address blocks: 174.139.126.0/23 maxlen: 24 174.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:69:27:6e:08:a0:2f:a4:20:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=f73b2c7c-4996-4845-9ef9-b0fc234f80d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:c4:e3:32:c1:7d:fd:e1:1e:ba:b3:42:34: 4f:05:d5:66:95:50:e6:64:82:d1:02:41:1c:76:ca: 12:64:df:2b:12:05:56:9b:a6:93:ae:af:a8:64:c4: 48:50:88:ad:9a:1c:a6:4c:ee:f5:44:2c:f3:ed:36: c0:c9:90:ab:a2:4b:58:5f:3d:29:be:5d:87:f4:16: 88:ba:f6:1e:77:27:b8:21:15:4f:5d:d4:74:e4:2b: cf:7a:89:4a:7b:95:aa:64:cb:4a:b8:f4:97:0b:72: bf:18:d7:ea:21:47:03:df:b9:1a:8b:fe:70:51:1a: db:fe:ee:e8:22:a9:64:a9:d8:4b:b9:d9:03:85:30: 3b:86:ef:15:35:cb:1c:08:4b:a2:67:c9:95:85:4a: 39:c3:7d:47:4c:a2:59:bb:0b:38:c3:cc:44:54:af: bf:91:8a:90:ac:ce:07:9b:20:06:51:7b:16:75:8f: b7:06:cb:2b:49:22:39:97:b6:3d:d6:9c:ee:7b:11: 76:e9:52:06:7f:11:1d:83:00:76:d2:db:6f:15:1b: a7:5f:89:2f:0f:37:9a:7a:82:e6:b1:f8:bb:ce:77: 51:f1:b1:b7:75:16:7d:9b:9e:db:28:d1:73:fe:cf: ce:8f:b6:0c:66:1e:b0:d3:b3:46:52:da:35:90:cb: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:D2:21:31:FC:2F:2D:32:6C:46:01:6F:1D:D4:A5:88:FB:66:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.126.0/23 174.139.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4b:81:3f:8c:9c:9b:8d:62:56:aa:8e:26:33:80:46:a8:31: 87:fd:e3:2a:37:83:99:28:af:c4:40:ce:54:69:ba:09:33:25: 2d:43:b5:a1:a4:3f:b4:6d:85:40:86:9c:5c:6f:e5:64:b9:87: 8a:5f:3a:e6:69:2d:9c:24:ad:7e:99:84:ea:3a:4c:60:d6:21: f0:ca:db:50:02:6e:e2:0b:e9:a6:08:62:7a:fe:79:0e:f1:f6: 74:f8:8f:50:e2:92:4c:b6:35:b1:01:5a:22:6d:ad:1b:58:2c: 36:ba:17:f7:03:9b:a3:ab:d1:cc:60:28:44:c6:47:26:9c:ba: 38:88:dd:e7:d3:53:a7:07:df:59:7c:50:f6:52:1d:90:96:1c: 90:57:ff:fd:c4:c1:47:54:f9:da:f6:4d:08:3e:32:a8:d2:c2: 7e:7f:e9:5c:a5:15:d0:a6:60:07:58:71:55:05:ea:5d:40:4b: bc:95:9d:dc:45:53:52:96:ae:f5:51:91:46:c5:06:85:81:c4: dd:43:0f:f2:be:13:33:4e:a3:c9:44:cd:59:9f:65:43:c3:41: 84:15:0e:ee:98:a2:d3:c1:e4:c0:91:19:32:a0:d5:42:8d:a4: 01:7f:7f:5e:82:d7:df:7c:c0:ca:7b:3a:49:31:88:d6:0e:e3: ea:32:b0:be -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5sb2knbgigL6QgwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk ZjczYjJjN2MtNDk5Ni00ODQ1LTllZjktYjBmYzIzNGY4MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DjE4zLBff3hHrqzQjRPBdVmlVDmZILRAkEc dsoSZN8rEgVWm6aTrq+oZMRIUIitmhymTO71RCzz7TbAyZCroktYXz0pvl2H9BaI uvYedye4IRVPXdR05CvPeolKe5WqZMtKuPSXC3K/GNfqIUcD37kai/5wURrb/u7o IqlkqdhLudkDhTA7hu8VNcscCEuiZ8mVhUo5w31HTKJZuws4w8xEVK+/kYqQrM4H myAGUXsWdY+3BssrSSI5l7Y91pzuexF26VIGfxEdgwB20ttvFRunX4kvDzeaeoLm sfi7zndR8bG3dRZ9m57bKNFz/s/Oj7YMZh6w07NGUto1kMuziwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFARo0iEx/C8tMmxGAW8d1KWI+2b+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZGY4ODJlZWYtMWZhZi0z NTQxLTgyNTUtMzY2YzllMjQ1MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrot+AwQA rouJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADxLgT+MnJuNYlaqjiYzgEaoMYf94yo3g5kor8RAzlRpugkz JS1DtaGkP7RthUCGnFxv5WS5h4pfOuZpLZwkrX6ZhOo6TGDWIfDK21ACbuIL6aYI Ynr+eQ7x9nT4j1Dikky2NbEBWiJtrRtYLDa6F/cDm6Or0cxgKETGRyacujiI3efT U6cH31l8UPZSHZCWHJBX//3EwUdU+dr2TQg+MqjSwn5/6VylFdCmYAdYcVUF6l1A S7yVndxFU1KWrvVRkUbFBoWBxN1DD/K+EzNOo8lEzVmfZUPDQYQVDu6YotPB5MCR GTKg1UKNpAF/f16C1998wMp7OkkxiNYO4+oysL4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:07:41 2026 by rpki-client