$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa File: df882eef-1faf-3541-8255-366c9e2451b2.roa (raw, json) Hash identifier: s3XSXX5aTnX8u4mUv00wtTHn6Dq303J2H2x/jEJzIYc= Subject key identifier: 56:A0:63:30:9B:BA:27:BE:2C:D4:8C:F0:C7:A7:F4:A0:61:F0:35:74 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AE9F66C3AC32DDCC7EB0C9600 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 4213 IP address blocks: 174.139.126.0/23 maxlen: 24 174.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:3a:c3:2d:dc:c7:eb:0c:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=6c9e6888-9773-4a28-9d9b-25d983d5061f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:9a:d6:3f:82:c0:3f:0d:7f:fd:07:4e:9f: 1c:50:49:c6:01:72:dc:e5:f5:8a:fc:a5:08:45:d0: 5e:e0:d4:89:1b:cc:f1:7d:f9:8c:b5:4e:e8:bc:f0: 92:0f:95:2b:8c:61:62:b1:9f:83:52:a8:df:e3:de: e2:c4:1c:c6:bf:c9:95:bd:6c:95:4a:db:50:97:b3: 66:4d:ef:0c:7f:7a:fb:78:fb:27:e5:81:56:58:6c: 49:4a:74:de:56:c6:df:b9:e4:e5:e6:61:06:d6:0b: cb:6d:d3:58:d5:3c:e7:5f:66:cd:d1:b9:28:14:72: 1b:48:ea:4a:07:7e:6a:df:00:73:64:85:bf:a2:26: 01:6f:4a:aa:eb:8d:e4:29:19:33:01:87:bc:bf:e7: 2e:45:bb:e0:d3:85:75:53:73:31:ca:99:0f:0d:d0: fb:96:4a:4a:55:3d:99:55:e3:3b:eb:ca:b5:48:93: 5c:0e:4f:9b:c9:8a:34:5a:ab:6c:2b:5f:51:66:be: db:5c:02:4e:72:70:72:de:ba:22:a8:57:14:42:84: 69:b9:88:a9:a7:db:06:4b:be:20:8d:b9:06:06:07: 97:cf:23:a1:41:ec:f4:3e:13:c3:15:c0:f5:a9:69: cc:d8:0a:f2:e0:45:7d:2a:4f:53:38:1d:85:db:90: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A0:63:30:9B:BA:27:BE:2C:D4:8C:F0:C7:A7:F4:A0:61:F0:35:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.126.0/23 174.139.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0e:b8:e6:33:89:f7:6e:3d:37:15:82:95:72:de:91:aa:d1: d7:a7:79:94:5d:00:6c:08:f8:cb:9c:6a:15:24:80:74:79:d7: 03:e2:1e:8a:b7:10:fe:ef:42:cc:47:5c:00:12:66:41:bb:61: 8b:2a:fd:b1:d7:65:e8:97:86:a7:d2:f5:fe:55:6a:9d:b8:23: 03:2c:95:8e:fb:52:bd:80:99:49:b0:79:aa:3d:96:d4:69:42: 90:b3:b1:ce:07:63:4d:51:d3:8d:d0:3c:d2:1f:e1:95:ff:7b: bd:da:0e:2b:6f:25:2f:84:54:b9:d5:52:d6:c4:81:00:15:25: 06:9d:f9:b6:ef:8d:16:87:df:50:78:09:d1:03:b7:cc:c2:34: 7d:ed:ed:4d:a5:a0:96:eb:ab:14:22:68:aa:f7:f7:3c:c6:6e: 69:ad:35:d1:55:df:42:53:b3:40:84:ad:a4:a6:e8:6a:c7:ea: 96:24:df:d4:7c:de:b8:35:ff:ca:ad:cb:1b:a2:33:fb:7a:55: 42:8d:0c:5d:f8:fa:c4:3f:20:19:74:37:2e:84:d4:7a:91:cc: d4:7c:04:a9:06:2b:f8:b7:13:98:b6:27:38:ec:06:79:f1:77: 5a:47:a8:4a:b9:50:ed:99:d9:f2:ab:dc:c5:8a:f4:a1:93:65: 08:24:26:a0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErp9mw6wy3cx+sMlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NmM5ZTY4ODgtOTc3My00YTI4LTlkOWItMjVkOTgzZDUwNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyKa1j+CwD8Nf/0HTp8cUEnGAXLc5fWK/KUI RdBe4NSJG8zxffmMtU7ovPCSD5UrjGFisZ+DUqjf497ixBzGv8mVvWyVSttQl7Nm Te8Mf3r7ePsn5YFWWGxJSnTeVsbfueTl5mEG1gvLbdNY1TznX2bN0bkoFHIbSOpK B35q3wBzZIW/oiYBb0qq643kKRkzAYe8v+cuRbvg04V1U3MxypkPDdD7lkpKVT2Z VeM768q1SJNcDk+byYo0WqtsK19RZr7bXAJOcnBy3roiqFcUQoRpuYipp9sGS74g jbkGBgeXzyOhQez0PhPDFcD1qWnM2Ary4EV9Kk9TOB2F25DRAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFagYzCbuie+LNSM8Men9KBh8DV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZGY4ODJlZWYtMWZhZi0z NTQxLTgyNTUtMzY2YzllMjQ1MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrot+AwQA rouJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIwOuOYzifduPTcVgpVy3pGq0deneZRdAGwI+MucahUkgHR5 1wPiHoq3EP7vQsxHXAASZkG7YYsq/bHXZeiXhqfS9f5Vap24IwMslY77Ur2AmUmw eao9ltRpQpCzsc4HY01R043QPNIf4ZX/e73aDitvJS+EVLnVUtbEgQAVJQad+bbv jRaH31B4CdEDt8zCNH3t7U2loJbrqxQiaKr39zzGbmmtNdFV30JTs0CEraSm6GrH 6pYk39R83rg1/8qtyxuiM/t6VUKNDF34+sQ/IBl0Ny6E1HqRzNR8BKkGK/i3E5i2 JzjsBnnxd1pHqEq5UO2Z2fKr3MWK9KGTZQgkJqA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:05:04 2025 by rpki-client