$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: bzezq8fYRF3dhcB9Hqz8Xil+ZjxnBedgScP9WpxgFzM= Subject key identifier: F2:E2:41:F5:00:0A:AC:5A:36:9A:E9:CD:64:0C:63:B9:2A:0E:EE:2B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E94EA5A3F2150D2F9FDE10300 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:5a:3f:21:50:d2:f9:fd:e1:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=65f07f78-8f23-40fa-91bd-778612658c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:99:59:0a:0b:54:5b:bc:cb:6e:84:96:15: 1c:e3:f6:a5:4b:c8:31:0a:b8:bb:f1:97:5c:a6:b9: d4:df:73:30:63:fd:ca:ea:b9:f0:aa:9a:4c:7f:fb: 04:0d:c7:49:af:03:1e:67:96:aa:ec:9f:35:00:f6: 7d:13:af:eb:c9:bf:40:5e:1a:7d:f9:75:8a:78:d0: b5:69:a6:ea:6a:97:c8:a3:65:59:0f:e3:56:17:ab: 56:cf:78:20:8c:67:34:3b:c6:dd:9e:0a:8f:d7:ee: 07:6a:01:65:1a:f7:b5:11:0a:fa:8d:bc:67:25:d1: b4:e2:b9:ae:9f:20:dd:7a:7c:4c:4e:d3:02:30:0f: 94:d1:85:80:c8:f9:e8:94:07:ad:43:ce:f4:c6:09: 2e:25:99:97:af:bd:b8:49:7b:00:b0:f1:8c:e5:ca: de:aa:c1:3d:35:24:be:a2:9c:6d:d7:da:e4:c5:d6: 6b:52:75:6c:d2:a6:3b:f0:c2:05:c9:5e:08:61:a6: 8a:1e:21:a9:13:f2:c5:86:5e:47:78:5b:81:35:76: f1:08:4c:cb:2c:e5:3d:80:c9:e3:6c:c1:d7:52:ee: 01:51:cc:f0:55:0f:b4:cc:77:b7:13:7b:78:0d:8a: ac:3b:d7:20:3f:bd:3a:23:bf:5f:3d:45:f0:64:3a: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E2:41:F5:00:0A:AC:5A:36:9A:E9:CD:64:0C:63:B9:2A:0E:EE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:47:12:c8:ff:84:bd:e3:f5:23:59:fe:42:35:dc:60:3d:18: 74:b6:50:a6:7b:38:5e:9b:77:3d:9f:0d:21:8e:5e:06:2a:67: 75:a9:46:d2:82:21:ba:34:54:2c:66:d1:d0:fc:e9:2a:31:5b: ff:00:85:38:d9:dc:7a:ed:d6:dd:68:36:27:a4:e8:c3:1a:9e: 76:a5:cb:79:18:89:4e:0e:b8:19:5e:0a:3e:1e:b1:48:2c:ce: 14:06:72:e9:8d:c8:92:be:4a:c7:46:98:da:9b:31:1b:2c:45: 90:04:f9:0b:8c:21:2a:3d:8e:a4:98:71:3d:cf:0c:34:f5:9a: 8e:07:bd:a3:e7:ea:20:92:c1:f6:66:5d:bd:5c:73:89:0b:2b: 9f:90:5b:01:36:cc:2e:df:5d:0f:90:92:44:12:87:ae:3a:14: 6e:23:f7:8c:f7:d1:ab:4f:03:75:17:20:67:99:7f:95:63:d6: 11:eb:01:c2:0c:64:b6:50:40:b4:b3:1f:b1:b6:91:1a:a9:da: 35:f1:ea:a8:3e:3c:ab:4d:e1:ab:43:ba:72:20:f6:33:ac:e7: ee:6d:22:6f:62:94:e6:9c:ec:a8:ff:4c:bc:8a:40:b1:6f:34: 55:3e:39:bb:b6:c6:1d:f7:ed:7c:c1:53:61:86:00:a6:72:81: 7f:8f:12:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lo/IVDS+f3hAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk NjVmMDdmNzgtOGYyMy00MGZhLTkxYmQtNzc4NjEyNjU4YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgiZWQoLVFu8y26ElhUc4/alS8gxCri78Zdc prnU33MwY/3K6rnwqppMf/sEDcdJrwMeZ5aq7J81APZ9E6/ryb9AXhp9+XWKeNC1 aabqapfIo2VZD+NWF6tWz3ggjGc0O8bdngqP1+4HagFlGve1EQr6jbxnJdG04rmu nyDdenxMTtMCMA+U0YWAyPnolAetQ870xgkuJZmXr724SXsAsPGM5creqsE9NSS+ opxt19rkxdZrUnVs0qY78MIFyV4IYaaKHiGpE/LFhl5HeFuBNXbxCEzLLOU9gMnj bMHXUu4BUczwVQ+0zHe3E3t4DYqsO9cgP706I79fPUXwZDqZFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLiQfUACqxaNprpzWQMY7kqDu4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9HEsj/hL3j9SNZ/kI13GA9GHS2UKZ7OF6bdz2fDSGOXgYqZ3WpRtKC Ibo0VCxm0dD86SoxW/8AhTjZ3Hrt1t1oNiek6MMannaly3kYiU4OuBleCj4esUgs zhQGcumNyJK+SsdGmNqbMRssRZAE+QuMISo9jqSYcT3PDDT1mo4HvaPn6iCSwfZm Xb1cc4kLK5+QWwE2zC7fXQ+QkkQSh646FG4j94z30atPA3UXIGeZf5Vj1hHrAcIM ZLZQQLSzH7G2kRqp2jXx6qg+PKtN4atDunIg9jOs5+5tIm9ilOac7Kj/TLyKQLFv NFU+Obu2xh337XzBU2GGAKZygX+PErY= -----END CERTIFICATE-----Generated at Fri Jul 24 13:54:25 2026 by rpki-client