$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8dc359-f18c-335e-b4e1-ab30b7f7d5e9.roa File: bf8dc359-f18c-335e-b4e1-ab30b7f7d5e9.roa (raw, json) Hash identifier: FGPQOPh/l9gXPqXmOVTi0N0Y66IfFNzs1GzxBDnB+mo= Subject key identifier: 92:3F:AF:CD:18:3C:45:5F:CF:72:1F:55:CA:D1:E8:53:25:BA:DF:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E614502A020FD366E81EE6B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8dc359-f18c-335e-b4e1-ab30b7f7d5e9.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 33659 IP address blocks: 174.57.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:02:a0:20:fd:36:6e:81:ee:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=bbbea80e-c3b9-4697-af4f-ec7d69054210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:87:bb:dc:97:5c:93:4d:04:14:12:e6:af: 05:ef:f3:24:46:9c:52:57:8e:aa:82:14:bb:6f:b8: e7:ee:2e:0f:65:a5:cb:e8:45:a2:06:b3:c0:94:c1: b8:6b:36:8c:45:88:8c:95:f0:96:2a:c4:a1:c7:89: 1e:18:51:f1:24:04:ce:b7:32:cb:e7:37:70:ef:a6: 78:22:f9:6d:b5:b4:21:cc:92:fc:3f:93:a0:d0:6f: 74:36:bb:44:db:d0:56:6a:dc:99:78:9e:b1:b6:a4: 6f:67:2c:3b:dc:83:50:ed:f1:6b:43:1a:b8:c9:21: d4:8e:3d:c5:37:3b:6a:de:d8:bd:72:b3:8d:8b:1d: 0c:b3:99:90:87:7c:52:8d:36:d4:0f:6a:ee:8f:db: 53:f2:8c:76:37:1d:1a:4b:1c:1e:05:7b:b0:d5:54: 71:de:2f:75:08:1c:5c:75:a9:01:af:cb:88:03:37: da:aa:3f:7f:08:9d:74:98:bd:96:9d:9a:f9:21:27: 1a:e8:cf:07:89:55:9f:c2:73:f6:4e:d2:86:23:72: f5:81:b9:94:6a:fa:08:85:6d:dc:cc:cf:d6:9d:4b: ea:cf:57:75:ce:0b:92:69:cf:ce:fa:4b:de:91:7b: 32:cc:fc:c7:3e:dd:8a:92:60:89:50:c7:32:28:24: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:AF:CD:18:3C:45:5F:CF:72:1F:55:CA:D1:E8:53:25:BA:DF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf8dc359-f18c-335e-b4e1-ab30b7f7d5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2f:24:45:fb:2e:3d:b5:53:cb:9d:5a:0e:48:98:14:9c:ac: 3d:e1:35:91:bd:14:56:24:7a:bb:da:bc:7b:b2:75:43:6c:03: 9f:36:56:9c:44:9a:af:a1:4e:d8:13:1e:35:56:b9:fe:dc:51: 46:35:a4:50:cf:c3:c7:50:1c:38:92:18:01:24:d8:00:5e:14: 58:70:12:3a:fd:4c:3e:ea:99:cd:a3:95:5e:66:28:f3:87:68: 96:d3:19:71:6f:a8:ae:5c:95:e0:d6:31:e7:98:51:e9:cc:a0: a7:51:26:9e:7e:a2:0c:be:13:75:4f:98:b5:f9:93:ec:bd:53: e8:f2:a7:18:13:c7:bd:c8:8f:70:cd:62:d2:3f:39:6f:f3:09: 06:0f:8d:15:5b:6f:45:23:0c:06:f7:6d:44:ed:ab:ee:a0:af: 6d:97:97:4c:d4:ff:6c:81:0f:2f:64:88:5a:e5:53:bb:bf:c8: 83:60:95:6c:b5:d1:40:5e:d2:29:6c:7d:b5:60:34:38:d7:26: 4e:a3:5c:83:5b:3d:74:88:6b:06:61:42:fc:44:ba:db:bd:79: dd:13:64:75:5a:c0:b9:a5:6c:e4:c4:fc:a8:77:52:fb:94:c5: 18:95:18:6c:55:6d:d1:b4:90:93:12:7e:56:c7:48:05:9d:1e: 45:f1:47:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQKgIP02boHuawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk YmJiZWE4MGUtYzNiOS00Njk3LWFmNGYtZWM3ZDY5MDU0MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzKHu9yXXJNNBBQS5q8F7/MkRpxSV46qghS7 b7jn7i4PZaXL6EWiBrPAlMG4azaMRYiMlfCWKsShx4keGFHxJATOtzLL5zdw76Z4 IvlttbQhzJL8P5Og0G90NrtE29BWatyZeJ6xtqRvZyw73INQ7fFrQxq4ySHUjj3F Nztq3ti9crONix0Ms5mQh3xSjTbUD2ruj9tT8ox2Nx0aSxweBXuw1VRx3i91CBxc dakBr8uIAzfaqj9/CJ10mL2WnZr5ISca6M8HiVWfwnP2TtKGI3L1gbmUavoIhW3c zM/WnUvqz1d1zguSac/O+kvekXsyzPzHPt2KkmCJUMcyKCQ6dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI/r80YPEVfz3IfVcrR6FMlut+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY4ZGMzNTktZjE4Yy0z MzVlLWI0ZTEtYWIzMGI3ZjdkNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYvJEX7Lj21U8udWg5ImBScrD3hNZG9FFYkervavHuydUNsA582VpxE mq+hTtgTHjVWuf7cUUY1pFDPw8dQHDiSGAEk2ABeFFhwEjr9TD7qmc2jlV5mKPOH aJbTGXFvqK5cleDWMeeYUenMoKdRJp5+ogy+E3VPmLX5k+y9U+jypxgTx73Ij3DN YtI/OW/zCQYPjRVbb0UjDAb3bUTtq+6gr22Xl0zU/2yBDy9kiFrlU7u/yINglWy1 0UBe0ilsfbVgNDjXJk6jXINbPXSIawZhQvxEutu9ed0TZHVawLmlbOTE/Kh3UvuU xRiVGGxVbdG0kJMSflbHSAWdHkXxRyk= -----END CERTIFICATE-----Generated at Tue Jul 21 20:08:47 2026 by rpki-client