$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa File: f4eb3f45-23aa-397c-a750-8446a726a135.roa (raw, json) Hash identifier: xJHwYh4nx8Ji7OIFIP9MiDddzP+Rmup6NqYtFlTt4kY= Subject key identifier: 44:3B:4F:DC:AA:7C:7E:8E:BA:37:C5:3D:6F:D6:D0:38:3C:A7:1F:94 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E6C6F6B1800C6D59FC7131C00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 4213 IP address blocks: 66.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:6b:18:00:c6:d5:9f:c7:13:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=25c11739-9bd5-40db-b63d-117e53d1e552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:81:c7:3f:63:e6:cd:f4:bc:09:4e:a4:f4: e7:9f:2d:0e:2c:85:fe:90:d6:f8:42:bf:15:58:6f: dc:f3:fe:f1:2a:d1:d6:b6:df:b2:2c:a1:16:75:23: c5:58:e9:03:81:db:a1:69:b2:8a:cc:48:ca:55:a7: 9c:7f:e9:fa:b4:84:5c:1f:82:db:7c:53:47:00:1f: e8:a8:90:55:1b:e1:03:d5:26:4d:9c:6e:79:94:c7: 5a:5b:8d:eb:94:28:ff:31:81:59:43:9d:9b:f4:31: a6:86:46:14:54:c2:de:d5:bf:76:40:d2:f7:7c:ae: ce:43:80:9e:02:42:98:96:72:71:2f:f2:d7:30:5e: 71:2c:ef:26:03:66:6a:4f:7a:21:3c:1f:76:ff:55: a5:9d:08:bf:06:57:97:11:cd:6c:c8:fd:2f:1d:7f: 7b:0d:da:bf:89:a3:49:ee:5d:01:45:1d:e4:e2:64: 10:0c:61:cd:fb:77:89:6d:e1:9f:3f:de:e0:7d:39: 76:95:d1:7d:58:08:5b:24:fe:f7:15:93:05:9a:e5: f3:d7:ec:d4:f1:cf:c9:0a:f0:14:71:ba:cb:85:dc: db:6d:84:3a:59:1f:ed:35:28:46:ff:dc:b5:e4:1d: ff:f7:b7:57:a9:18:57:82:d3:67:83:ca:3c:c9:c8: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3B:4F:DC:AA:7C:7E:8E:BA:37:C5:3D:6F:D6:D0:38:3C:A7:1F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:36:86:a5:dc:84:b6:35:bc:84:2a:14:aa:c2:0d:4d:67:45: b5:68:bf:ea:21:65:f2:c8:39:02:65:b3:ae:e7:a0:ca:73:4d: 61:d5:02:cd:0f:42:87:9e:55:cc:8d:76:dd:b2:90:a3:0d:18: 13:80:f2:f5:8b:05:3f:7c:62:6c:b5:67:94:37:69:85:68:ce: 38:17:59:85:a9:f5:46:c9:0e:73:d7:f2:fb:84:32:ce:e2:c7: ed:20:a0:f0:a5:0f:52:4a:3d:e4:cc:68:d0:a7:7f:41:81:a6: 62:b9:d4:ab:fa:a7:9d:e1:15:ef:54:91:d1:ce:d0:04:06:95: 18:d3:57:09:f8:b6:de:0a:f5:af:66:0a:a2:25:08:34:2d:9a: ca:d9:a1:79:b9:6f:26:47:20:ca:e2:48:5b:e1:74:dc:71:e4: 27:0f:48:0c:72:78:9c:5b:74:e9:09:99:e5:7a:79:de:f5:79: 4f:09:10:a8:a1:2d:3c:0e:97:cc:49:f9:4c:6c:5a:a7:3b:33: 18:4b:16:09:49:62:ff:99:af:f3:df:1f:b8:e3:91:ea:2a:9c: 22:8d:d1:4f:55:73:84:eb:f6:0d:54:a1:e1:de:95:8c:cb:30: 56:da:59:8c:15:5c:97:f4:f2:da:dd:6d:a8:aa:d9:cb:4e:87: 7d:4d:68:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2sYAMbVn8cTHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk MjVjMTE3MzktOWJkNS00MGRiLWI2M2QtMTE3ZTUzZDFlNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEmBxz9j5s30vAlOpPTnny0OLIX+kNb4Qr8V WG/c8/7xKtHWtt+yLKEWdSPFWOkDgduhabKKzEjKVaecf+n6tIRcH4LbfFNHAB/o qJBVG+ED1SZNnG55lMdaW43rlCj/MYFZQ52b9DGmhkYUVMLe1b92QNL3fK7OQ4Ce AkKYlnJxL/LXMF5xLO8mA2ZqT3ohPB92/1WlnQi/BleXEc1syP0vHX97Ddq/iaNJ 7l0BRR3k4mQQDGHN+3eJbeGfP97gfTl2ldF9WAhbJP73FZMFmuXz1+zU8c/JCvAU cbrLhdzbbYQ6WR/tNShG/9y15B3/97dXqRhXgtNng8o8ychiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ7T9yqfH6OujfFPW/W0Dg8px+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjRlYjNmNDUtMjNhYS0z OTdjLWE3NTAtODQ0NmE3MjZhMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA2hqXchLY1vIQqFKrCDU1nRbVov+ohZfLIOQJls67noMpzTWHVAs0P QoeeVcyNdt2ykKMNGBOA8vWLBT98Ymy1Z5Q3aYVozjgXWYWp9UbJDnPX8vuEMs7i x+0goPClD1JKPeTMaNCnf0GBpmK51Kv6p53hFe9UkdHO0AQGlRjTVwn4tt4K9a9m CqIlCDQtmsrZoXm5byZHIMriSFvhdNxx5CcPSAxyeJxbdOkJmeV6ed71eU8JEKih LTwOl8xJ+UxsWqc7MxhLFglJYv+Zr/PfH7jjkeoqnCKN0U9Vc4Tr9g1UoeHelYzL MFbaWYwVXJf08trdbaiq2ctOh31NaMM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:26:21 2026 by rpki-client