$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa File: 0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa (raw, json) Hash identifier: qUDpEOPjkgPNHBNpRMn0tSeXcBgc/SwO5LDDp9EXi3o= Subject key identifier: 65:EA:6B:E7:61:D3:D9:29:24:8D:7F:FE:B3:7A:0A:4E:96:1A:45:CA Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0CF4A294DAEFB3AEFD22 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 107.6.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0c:f4:a2:94:da:ef:b3:ae:fd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=a570fde8-0533-4237-8c5b-e82026e34db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:10:76:3a:f7:74:37:8f:91:26:a8:34:09: 38:ef:9d:f0:69:96:bf:af:3b:5e:37:df:af:d2:ea: 20:8c:e2:4c:e3:37:b6:0d:b4:ee:4e:01:48:66:3d: 19:bc:6e:11:7e:1c:12:b9:cb:11:9c:84:c1:c2:fd: ff:fe:b9:66:c7:ef:c5:70:ec:51:93:f1:a7:4a:0d: 1e:8c:21:de:03:e1:bc:a9:1f:c2:0b:db:4a:90:6b: 02:52:13:e3:01:bf:36:18:3d:d6:07:be:eb:66:3e: 41:01:d5:d4:40:c0:16:74:61:dd:98:9f:88:fe:85: 80:40:ad:25:95:4c:b1:07:68:e7:2b:05:23:71:f4: 84:f0:d1:87:58:df:15:09:5b:59:2d:8e:fd:51:6c: f9:bb:94:a8:88:92:8d:45:69:96:f4:53:c1:45:9e: d6:47:a7:ef:d5:1c:aa:42:4c:4f:de:89:56:9b:b7: 92:54:d5:55:3f:a1:b6:dd:f9:d6:90:bb:43:79:ec: 87:00:31:65:76:a0:12:71:bc:17:6b:b0:ae:72:aa: 69:c1:cb:6e:5d:3b:97:ea:6f:2e:5d:6c:3a:87:ec: 69:11:bc:4c:f2:7c:85:5c:07:63:fd:96:0b:f8:9e: 44:c7:ba:26:39:d8:00:4d:eb:49:c3:25:a5:e5:2a: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EA:6B:E7:61:D3:D9:29:24:8D:7F:FE:B3:7A:0A:4E:96:1A:45:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:32:8e:90:1f:85:85:77:f5:46:f9:83:98:b9:0b:fc:b9:72: c5:2a:88:9f:53:b2:80:36:5a:b9:31:12:9e:ac:e7:e9:3e:10: 87:b7:2c:01:97:a3:5f:5f:ac:7c:3c:55:c1:97:e2:86:84:f4: 30:5b:63:ec:b9:ba:ce:98:75:57:63:57:63:7d:fe:78:a5:cf: 10:60:46:0d:74:d4:36:66:85:7a:e8:42:b4:2f:1f:1c:05:02: 82:6c:ac:51:ca:7b:46:c5:f2:e1:d0:7f:50:dc:f9:83:3a:0c: 14:6f:8d:11:99:c5:ce:ce:35:07:72:25:e7:93:d6:12:9d:46: ee:5b:78:1b:ca:60:7c:cd:f8:a7:e3:be:c4:44:10:36:9b:8c: 65:a7:1b:37:ea:5a:9f:be:1d:65:b6:1c:d4:97:2a:52:29:54: 29:ca:85:89:d4:28:29:5f:46:0d:7a:ef:f2:5d:c2:00:41:92: 0d:cd:b7:25:5e:17:0a:59:42:b2:e0:84:3d:04:ad:e8:99:e9: b8:01:e6:35:c3:cb:0b:b9:31:f5:af:81:53:2b:5d:76:49:21: 7f:25:41:b0:ba:2c:3f:a8:fd:83:3d:12:98:f3:2c:36:91:6f: b3:88:ee:2c:f4:98:64:70:b3:67:5a:2d:8c:81:74:44:d1:31: cb:b5:a3:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAz0opTa77Ou/SIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTU3MGZkZTgtMDUzMy00MjM3LThjNWItZTgyMDI2ZTM0ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv0Qdjr3dDePkSaoNAk4753waZa/rzteN9+v 0uogjOJM4ze2DbTuTgFIZj0ZvG4RfhwSucsRnITBwv3//rlmx+/FcOxRk/GnSg0e jCHeA+G8qR/CC9tKkGsCUhPjAb82GD3WB77rZj5BAdXUQMAWdGHdmJ+I/oWAQK0l lUyxB2jnKwUjcfSE8NGHWN8VCVtZLY79UWz5u5SoiJKNRWmW9FPBRZ7WR6fv1Ryq QkxP3olWm7eSVNVVP6G23fnWkLtDeeyHADFldqAScbwXa7CucqppwctuXTuX6m8u XWw6h+xpEbxM8nyFXAdj/ZYL+J5Ex7omOdgATetJwyWl5SpbQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXqa+dh09kpJI1//rN6Ck6WGkXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMGJmNGIyNWYtNTk1Yi0z YWVlLWJjZDEtMTM0MmU1ZTdlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANoyjpAfhYV39Ub5g5i5C/y5csUqiJ9TsoA2WrkxEp6s5+k+EIe3LAGX o19frHw8VcGX4oaE9DBbY+y5us6YdVdjV2N9/nilzxBgRg101DZmhXroQrQvHxwF AoJsrFHKe0bF8uHQf1Dc+YM6DBRvjRGZxc7ONQdyJeeT1hKdRu5beBvKYHzN+Kfj vsREEDabjGWnGzfqWp++HWW2HNSXKlIpVCnKhYnUKClfRg167/JdwgBBkg3NtyVe FwpZQrLghD0EreiZ6bgB5jXDywu5MfWvgVMrXXZJIX8lQbC6LD+o/YM9EpjzLDaR b7OI7iz0mGRws2daLYyBdETRMcu1o0I= -----END CERTIFICATE-----Generated at Tue Sep 9 20:45:08 2025 by rpki-client