$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: eCtOpYGSpXV2WYcgyfZPX7l1eCF3bLacP6juih88qB0= Subject key identifier: 48:4D:8D:56:7E:1A:45:24:6E:78:9E:74:E0:12:DA:3C:35:D1:29:73 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A331AF2A3F40F6477FCE33F00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f2:a3:f4:0f:64:77:fc:e3:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=e1fa22e4-cec5-4da2-a4c1-85d216f7de54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:60:85:b5:5d:51:76:7c:21:75:63:eb:ca: ea:47:bb:ad:3f:0c:4e:3c:4a:8f:fd:6d:52:ec:b1: 5e:60:cd:38:9f:8b:67:36:49:ba:8a:11:28:3f:a7: b8:ec:28:e9:cf:c1:eb:12:67:06:e4:26:12:fc:5b: 63:f3:fc:84:fa:2c:6a:ca:d1:9b:a8:c6:b8:6f:db: 5c:90:0f:d7:7a:95:05:b2:7c:cf:79:ac:1b:49:09: 9c:1e:34:be:7b:74:a1:fa:10:fd:f2:c5:c1:9e:c3: 62:d7:7d:b8:8a:14:0f:d8:63:91:07:0a:8f:43:fb: 6e:44:19:13:48:9c:62:8a:5e:2e:16:89:78:25:bc: 1a:4d:af:5e:fd:b4:cb:4e:83:29:ba:44:bc:65:0a: 26:c2:d8:7b:16:e4:f7:46:06:c9:83:59:6d:13:77: ad:29:7c:d8:e9:1e:a3:24:19:06:97:63:fe:52:b7: 6e:bb:be:88:72:a4:a1:19:7e:af:2d:cd:68:c3:3d: 19:69:b1:c3:35:f1:a3:0f:00:f1:f0:dd:28:54:21: 6e:cf:65:fe:83:0b:2f:44:e6:e5:ea:e4:aa:90:e0: 6d:c0:04:06:ee:cf:eb:f1:89:53:07:f5:05:89:00: 5c:d8:76:58:2d:a2:59:0e:e9:0f:21:ae:e5:76:78: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4D:8D:56:7E:1A:45:24:6E:78:9E:74:E0:12:DA:3C:35:D1:29:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:54:ed:4a:5b:cc:b9:59:38:5e:ff:23:dc:5e:e5:08:f5:aa: d6:1c:d5:ae:e3:4d:10:97:db:dc:85:4e:91:7f:a7:76:38:b4: 67:a6:2c:80:34:1d:8b:7f:c0:b2:9a:d4:03:d1:d3:35:ad:99: aa:7f:02:3b:d5:44:00:78:0d:0d:11:bf:f9:d6:0a:73:03:38: f4:e7:bf:4e:ea:d0:93:d4:5b:6f:99:e5:df:3b:8f:89:57:68: 4c:6d:ea:fb:60:e9:91:3f:d5:55:c2:0d:10:a7:48:0e:8e:46: 14:63:42:6e:d7:cd:8f:10:a7:66:47:93:74:a5:36:53:5e:e7: 4c:f5:cd:8d:da:b6:44:78:01:76:8e:7e:ec:55:fd:64:cf:43: ca:f0:c7:49:bf:68:16:fb:57:19:27:a4:4e:08:f0:1a:3e:43: c8:6c:86:ac:7e:bd:5a:b2:81:36:35:f9:80:5c:d3:93:cf:36: 91:bf:b9:da:7d:37:70:0f:ef:04:61:5d:72:74:8e:5b:af:f1: 42:d2:ad:3d:e1:ca:0d:74:36:66:d3:96:d5:ab:40:9b:63:7a: 05:a6:d9:b4:c8:48:b4:d2:f8:20:54:8d:a2:17:29:0a:92:14: a6:79:8b:91:87:c6:e6:d6:75:42:a0:44:87:6d:fe:94:2e:48: 29:24:a6:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvKj9A9kd/zjPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZTFmYTIyZTQtY2VjNS00ZGEyLWE0YzEtODVkMjE2ZjdkZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb5ghbVdUXZ8IXVj68rqR7utPwxOPEqP/W1S 7LFeYM04n4tnNkm6ihEoP6e47Cjpz8HrEmcG5CYS/Ftj8/yE+ixqytGbqMa4b9tc kA/XepUFsnzPeawbSQmcHjS+e3Sh+hD98sXBnsNi1324ihQP2GORBwqPQ/tuRBkT SJxiil4uFol4JbwaTa9e/bTLToMpukS8ZQomwth7FuT3RgbJg1ltE3etKXzY6R6j JBkGl2P+Urduu76IcqShGX6vLc1owz0ZabHDNfGjDwDx8N0oVCFuz2X+gwsvRObl 6uSqkOBtwAQG7s/r8YlTB/UFiQBc2HZYLaJZDukPIa7ldnj8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhNjVZ+GkUkbniedOAS2jw10SlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVU7UpbzLlZOF7/I9xe5Qj1qtYc1a7jTRCX29yFTpF/p3Y4tGemLIA0 HYt/wLKa1APR0zWtmap/AjvVRAB4DQ0Rv/nWCnMDOPTnv07q0JPUW2+Z5d87j4lX aExt6vtg6ZE/1VXCDRCnSA6ORhRjQm7XzY8Qp2ZHk3SlNlNe50z1zY3atkR4AXaO fuxV/WTPQ8rwx0m/aBb7VxknpE4I8Bo+Q8hshqx+vVqygTY1+YBc05PPNpG/udp9 N3AP7wRhXXJ0jluv8ULSrT3hyg10NmbTltWrQJtjegWm2bTISLTS+CBUjaIXKQqS FKZ5i5GHxubWdUKgRIdt/pQuSCkkpgc= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:53 2025 by rpki-client