$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1bd0d80b-41cc-399c-979f-b7c9398d5f0e.roa File: 1bd0d80b-41cc-399c-979f-b7c9398d5f0e.roa (raw, json) Hash identifier: HaI/xZIFmFVXXJr7PANXFzdrQptVriXi+Dptstq5zSI= Subject key identifier: D8:50:1D:69:BE:26:DB:CB:2B:42:DD:58:F1:CF:93:52:DE:81:6D:36 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0D3F7FC39E9A2DCB0A80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1bd0d80b-41cc-399c-979f-b7c9398d5f0e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 74.222.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:3f:7f:c3:9e:9a:2d:cb:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6508f31d-101c-4fb3-8cc6-59bfabfefe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:f6:9e:af:00:61:7a:d0:73:18:61:a3:05: 59:01:87:72:75:eb:61:3f:1a:fe:99:a4:ac:87:dd: ac:f4:bf:26:07:07:42:2f:00:64:ea:19:e9:0a:c1: bd:e3:79:1d:57:f4:b4:2a:b6:e8:7a:d6:f4:7e:63: a1:53:7b:cf:43:b7:fa:c1:8a:fc:f3:cc:5e:9b:53: 87:a1:b6:dd:0d:76:b0:5e:6a:de:a3:f8:3d:5c:10: cc:3f:5a:45:13:b3:d6:da:73:8b:6f:24:b5:6e:0d: be:65:a0:4e:75:79:45:25:37:db:bf:db:1c:d8:aa: 73:2b:96:d2:e3:3e:0c:db:66:53:98:d7:57:83:28: 2d:f9:99:e1:c7:15:32:43:7b:be:9b:b4:f7:58:43: 8b:ee:1d:e3:74:45:fe:97:ee:8c:6b:44:75:2f:65: d0:61:af:39:26:63:5a:22:d6:f9:0e:c2:a5:91:c3: 6d:e0:9e:b4:fc:b3:0f:dd:55:77:d9:ed:02:3e:cc: a4:23:ee:6d:77:66:85:dd:f4:68:a4:bc:ae:12:8b: bd:54:d9:7b:89:66:2f:4e:ac:51:5f:ad:b5:3a:08: ac:e6:f9:ca:d2:6e:f9:c5:60:60:bb:2e:9d:2f:6a: 50:1c:71:1d:07:91:1e:29:36:53:6c:b9:a0:45:2a: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:50:1D:69:BE:26:DB:CB:2B:42:DD:58:F1:CF:93:52:DE:81:6D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1bd0d80b-41cc-399c-979f-b7c9398d5f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0f:1b:61:c2:63:39:a9:b7:9d:2a:0a:c1:4a:64:96:1f:75: 0e:d9:68:73:1b:dc:9c:4e:e1:4f:27:60:bd:06:c3:77:ad:3c: 0c:8c:cb:19:36:f2:96:55:e6:d8:8b:c3:9b:8e:fe:f9:36:20: b4:ba:0a:67:29:9a:75:f0:03:e4:3a:02:97:06:c6:da:4b:2f: f5:94:fb:da:3f:cd:06:01:20:71:be:36:e1:c2:b1:04:80:4b: 36:f4:cc:87:ee:07:01:1f:68:d4:d3:28:c6:d1:cf:3e:f5:2b: 41:ba:a6:cd:c0:69:b5:f5:ba:68:7a:95:c8:6e:23:7b:cd:ec: dc:9d:97:f0:22:91:9d:d9:ce:9d:ba:ea:8e:7d:84:a1:8d:93: d8:7f:c4:c5:b1:a8:ea:d5:5f:71:fd:00:fb:2f:eb:c4:eb:58: b0:19:cb:3b:08:e7:97:4f:e9:30:7e:c8:d6:0e:12:bc:35:bb: 61:2b:59:d2:77:bd:6e:ed:f7:22:a1:fa:9c:94:2b:f6:93:e1: 88:23:71:8b:1c:3f:7f:3b:a2:17:25:88:b9:41:b6:e4:c0:81: 56:49:29:e2:8b:9c:35:7c:5b:2f:2e:e4:b1:99:26:33:de:34: 98:3f:95:20:d0:40:c0:a8:bb:45:38:68:a2:a6:14:c4:1b:73: 85:32:e2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA0/f8Oemi3LCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NjUwOGYzMWQtMTAxYy00ZmIzLThjYzYtNTliZmFiZmVmZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNX2nq8AYXrQcxhhowVZAYdydethPxr+maSs h92s9L8mBwdCLwBk6hnpCsG943kdV/S0Krboetb0fmOhU3vPQ7f6wYr888xem1OH obbdDXawXmreo/g9XBDMP1pFE7PW2nOLbyS1bg2+ZaBOdXlFJTfbv9sc2KpzK5bS 4z4M22ZTmNdXgygt+ZnhxxUyQ3u+m7T3WEOL7h3jdEX+l+6Ma0R1L2XQYa85JmNa Itb5DsKlkcNt4J60/LMP3VV32e0CPsykI+5td2aF3fRopLyuEou9VNl7iWYvTqxR X621Ogis5vnK0m75xWBguy6dL2pQHHEdB5EeKTZTbLmgRSrOHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhQHWm+JtvLK0LdWPHPk1LegW02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWJkMGQ4MGItNDFjYy0z OTljLTk3OWYtYjdjOTM5OGQ1ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEPG2HCYzmpt50qCsFKZJYfdQ7ZaHMb3JxO4U8nYL0Gw3etPAyMyxk2 8pZV5tiLw5uO/vk2ILS6CmcpmnXwA+Q6ApcGxtpLL/WU+9o/zQYBIHG+NuHCsQSA Szb0zIfuBwEfaNTTKMbRzz71K0G6ps3AabX1umh6lchuI3vN7Nydl/AikZ3Zzp26 6o59hKGNk9h/xMWxqOrVX3H9APsv68TrWLAZyzsI55dP6TB+yNYOErw1u2ErWdJ3 vW7t9yKh+pyUK/aT4YgjcYscP387ohcliLlBtuTAgVZJKeKLnDV8Wy8u5LGZJjPe NJg/lSDQQMCou0U4aKKmFMQbc4Uy4oI= -----END CERTIFICATE-----Generated at Tue Sep 9 20:45:08 2025 by rpki-client