$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa File: f411f7e3-a030-33c6-a8e2-d381a9731d20.roa (raw, json) Hash identifier: QfnJeKjHlRJN2qeVzMJkGlgAtbmvfG+mOTpaoS1zSqY= Subject key identifier: 9A:15:FE:21:1A:85:C5:16:F7:B4:BE:1C:FE:31:AE:C2:9D:1C:25:61 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E7E94F725E13E4ED904486720 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 4213 IP address blocks: 74.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f7:25:e1:3e:4e:d9:04:48:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=26703e0e-ef05-4646-a42f-8085284af265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:4d:c5:24:16:51:59:99:8e:c0:b5:d8:a0: 34:dc:86:a1:db:7c:2a:4d:fa:89:39:88:3c:55:32: f9:8c:d2:9a:2c:4a:22:96:f8:e7:d3:3f:cf:9e:72: b3:56:77:ed:8a:ee:fe:be:8e:b7:73:30:17:57:c4: 35:c3:73:7a:42:fb:72:3f:b0:10:42:da:8e:6b:4d: c3:f9:b0:ae:30:f6:a8:72:cc:4d:79:38:60:49:77: d0:a4:ac:17:0a:ee:a0:bd:a5:ef:43:8f:10:ce:d2: ae:1f:ae:d1:05:eb:07:71:60:09:3e:f5:b6:b5:09: 10:b4:43:97:8d:22:d8:ec:0a:2d:84:ba:c3:67:39: 2e:df:66:5c:89:7e:6d:51:38:68:91:7a:7c:e6:ad: 2b:e7:00:26:9e:c5:6e:da:18:c7:86:8f:c1:27:28: c3:e3:16:ac:99:1a:be:53:14:46:9e:23:20:0a:f1: 4b:8d:5d:b5:31:85:48:36:a1:ae:e3:92:0a:09:1c: b4:dd:52:1e:6a:01:a9:4e:bd:94:73:0f:9e:35:25: 94:35:ef:30:dd:76:9b:ef:34:77:fc:2b:db:3a:8a: ee:5f:f4:cd:c0:b3:e9:6f:f7:6a:8e:80:83:3c:1e: 36:dd:99:3c:b0:08:6e:90:5a:28:6d:52:8a:b0:a0: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:FE:21:1A:85:C5:16:F7:B4:BE:1C:FE:31:AE:C2:9D:1C:25:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f0:32:53:33:45:2e:bf:2e:71:09:4e:87:45:fe:55:1a:06: 58:f1:0f:32:d5:29:22:46:1d:41:40:f0:f9:d7:69:43:34:14: 8c:4c:a8:05:fc:b9:fe:87:72:5d:6e:d1:fc:0b:65:78:b5:f2: ab:55:f2:dd:cf:9e:0d:56:66:cc:9c:b3:89:3f:16:02:9f:f8: 4c:8b:f2:8c:a1:03:c8:96:e8:30:07:7a:12:8a:9c:d8:05:a2: 6f:6b:e3:48:c0:1d:48:0a:cf:78:1b:71:97:8f:21:bd:57:3a: 4d:2f:23:5b:82:ca:95:8d:a6:13:f2:83:62:7a:19:58:2c:79: ea:4c:d3:df:95:67:1e:b6:55:b3:b8:8c:31:02:3d:fe:8e:b9: 24:3b:c6:f6:36:8f:2b:7e:0c:ac:18:0f:f7:24:39:05:b0:fa: a1:21:2f:87:1f:20:91:ba:77:e2:53:a0:20:d5:dc:f3:f1:78: e1:96:ce:1a:47:13:d7:e0:c4:84:3c:60:a0:87:6f:77:42:03: ca:47:db:f3:95:d4:55:d7:b8:22:3d:56:a2:93:42:61:69:dc: da:ac:f2:50:20:25:a0:fb:cd:a7:2f:88:59:31:8e:e9:6c:7c: be:fe:b7:46:1c:00:cd:42:49:6c:57:63:8d:13:7f:5a:60:3e: 5f:fc:67:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPcl4T5O2QRIZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjY3MDNlMGUtZWYwNS00NjQ2LWE0MmYtODA4NTI4NGFmMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT9NxSQWUVmZjsC12KA03Iah23wqTfqJOYg8 VTL5jNKaLEoilvjn0z/PnnKzVnftiu7+vo63czAXV8Q1w3N6QvtyP7AQQtqOa03D +bCuMPaocsxNeThgSXfQpKwXCu6gvaXvQ48QztKuH67RBesHcWAJPvW2tQkQtEOX jSLY7AothLrDZzku32ZciX5tUThokXp85q0r5wAmnsVu2hjHho/BJyjD4xasmRq+ UxRGniMgCvFLjV21MYVINqGu45IKCRy03VIeagGpTr2Ucw+eNSWUNe8w3Xab7zR3 /CvbOoruX/TNwLPpb/dqjoCDPB423Zk8sAhukFoobVKKsKDmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoV/iEahcUW97S+HP4xrsKdHCVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjQxMWY3ZTMtYTAzMC0z M2M2LWE4ZTItZDM4MWE5NzMxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzwMlMzRS6/LnEJTodF/lUaBljxDzLVKSJGHUFA8PnXaUM0FIxMqAX8 uf6Hcl1u0fwLZXi18qtV8t3Png1WZsycs4k/FgKf+EyL8oyhA8iW6DAHehKKnNgF om9r40jAHUgKz3gbcZePIb1XOk0vI1uCypWNphPyg2J6GVgseepM09+VZx62VbO4 jDECPf6OuSQ7xvY2jyt+DKwYD/ckOQWw+qEhL4cfIJG6d+JToCDV3PPxeOGWzhpH E9fgxIQ8YKCHb3dCA8pH2/OV1FXXuCI9VqKTQmFp3Nqs8lAgJaD7zacviFkxjuls fL7+t0YcAM1CSWxXY40Tf1pgPl/8Z30= -----END CERTIFICATE-----Generated at Fri Jul 24 06:35:22 2026 by rpki-client