$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa File: 1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa (raw, json) Hash identifier: B1rhQZWe5SJ4qtsvUkKSwA9yPAVWCJrvTpGiG2ild1I= Subject key identifier: 13:F2:F4:2F:5D:6D:F0:5C:DE:E1:40:99:36:EC:F9:66:B7:7E:E0:7C Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0D1C3F83542BF0EAB200 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 74.222.131.0/24 maxlen: 24 74.222.136.0/24 maxlen: 24 74.222.140.0/24 maxlen: 24 74.222.142.0/24 maxlen: 24 74.222.147.0/24 maxlen: 24 74.222.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:1c:3f:83:54:2b:f0:ea:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e54a8f67-d673-44b2-8f68-be532f79ebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:60:fc:c5:c5:a2:76:62:5b:c5:69:7e:a6: d3:40:e9:bd:1b:19:36:e0:92:1c:f8:cf:9b:7b:7f: 04:1d:b9:f4:67:18:16:94:90:73:e3:6b:30:dc:51: e6:33:d4:0f:f8:f8:36:6c:29:84:64:b1:f4:12:6b: 4c:24:07:35:af:25:c3:7c:db:d7:87:30:04:10:a5: 89:d2:17:b8:ae:d1:27:15:68:f1:19:43:a1:ba:7b: 1e:c4:92:78:bd:c2:65:27:45:72:82:76:f0:8a:e2: 7d:d5:ab:a7:cd:21:77:8c:e8:51:cd:4a:6b:2c:84: 41:6f:83:47:c4:d1:43:dc:ec:ae:ac:4d:69:35:04: 11:d9:cb:d8:62:96:ba:10:49:75:95:29:25:b1:2b: bd:7c:cc:78:71:34:93:5a:dc:32:2c:cc:fb:dd:bb: 2d:a8:cb:7a:15:fc:01:ce:a7:ea:94:02:95:8e:15: 92:a7:cf:4d:0b:fc:08:a3:27:c5:a3:39:c2:69:92: 08:d1:4e:6e:a7:a4:69:fa:04:d4:96:0a:b3:19:3d: 10:ef:d5:2c:d7:f3:8a:07:10:eb:2d:81:a8:22:10: c4:63:c0:37:95:e4:04:eb:9c:c7:89:d5:5a:0b:6f: 4d:ca:78:89:84:10:52:6f:a1:d9:d3:24:19:d4:f4: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F2:F4:2F:5D:6D:F0:5C:DE:E1:40:99:36:EC:F9:66:B7:7E:E0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.131.0/24 74.222.136.0/24 74.222.140.0/24 74.222.142.0/24 74.222.147.0/24 74.222.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3e:b7:54:28:50:27:73:d0:0c:03:74:79:2f:c9:de:80:e0: 38:fc:a0:ba:34:2c:1d:41:75:df:cc:9d:b0:4b:25:3f:97:ad: f8:82:c8:fa:8a:8d:bb:ca:fc:14:92:62:91:6a:ba:66:82:d5: 00:26:92:53:d5:0c:f7:a6:2e:08:f9:62:63:05:1d:81:80:e1: f3:06:36:36:e8:f1:86:7d:c1:8c:8e:e6:c4:5b:46:f2:8b:94: 86:4b:4a:78:c5:e7:8a:e7:ea:38:ec:02:7b:0f:af:43:9d:84: ee:5f:d7:d6:c5:00:04:4c:76:ad:16:8d:93:4c:b3:d1:1b:6b: ff:cf:d2:5b:5e:f6:ae:0b:5d:52:23:1d:a7:55:42:be:25:11: 0c:fb:4e:79:14:2d:d6:d8:56:20:29:e8:3f:47:91:53:e6:04: 53:71:7a:39:04:65:a7:4c:4a:34:a9:14:42:15:f8:53:d9:93: f7:e7:96:5b:09:df:38:87:5f:3c:55:c8:18:ae:25:1c:51:b9: 92:51:21:69:af:17:49:98:cc:9b:f1:96:1b:cb:b5:73:a1:1f: ec:a5:75:d0:0d:10:33:c6:5c:b5:8b:1f:29:d3:93:28:20:2c: d7:a9:06:0f:db:17:80:27:7a:b1:9e:cb:ba:6f:41:53:73:06: 53:28:67:5c -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEr8HA0cP4NUK/DqsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTU0YThmNjctZDY3My00NGIyLThmNjgtYmU1MzJmNzllYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwJg/MXFonZiW8VpfqbTQOm9Gxk24JIc+M+b e38EHbn0ZxgWlJBz42sw3FHmM9QP+Pg2bCmEZLH0EmtMJAc1ryXDfNvXhzAEEKWJ 0he4rtEnFWjxGUOhunsexJJ4vcJlJ0VygnbwiuJ91aunzSF3jOhRzUprLIRBb4NH xNFD3OyurE1pNQQR2cvYYpa6EEl1lSklsSu9fMx4cTSTWtwyLMz73bstqMt6FfwB zqfqlAKVjhWSp89NC/wIoyfFoznCaZII0U5up6Rp+gTUlgqzGT0Q79Us1/OKBxDr LYGoIhDEY8A3leQE65zHidVaC29NyniJhBBSb6HZ0yQZ1PQjfQIDAQABo4IDczCC A28wHQYDVR0OBBYEFBPy9C9dbfBc3uFAmTbs+Wa3fuB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWMxZTc4NWEtMGNiOS0z YzRjLWI0NzctMTliY2IwYjgxZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQASt6DAwQA St6IAwQASt6MAwQASt6OAwQASt6TAwQBSt6oMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAE+t1QoUCdz0AwD dHkvyd6A4Dj8oLo0LB1Bdd/MnbBLJT+XrfiCyPqKjbvK/BSSYpFqumaC1QAmklPV DPemLgj5YmMFHYGA4fMGNjbo8YZ9wYyO5sRbRvKLlIZLSnjF54rn6jjsAnsPr0Od hO5f19bFAARMdq0WjZNMs9Eba//P0lte9q4LXVIjHadVQr4lEQz7TnkULdbYViAp 6D9HkVPmBFNxejkEZadMSjSpFEIV+FPZk/fnllsJ3ziHXzxVyBiuJRxRuZJRIWmv F0mYzJvxlhvLtXOhH+ylddANEDPGXLWLHynTkyggLNepBg/bF4AnerGey7pvQVNz BlMoZ1w= -----END CERTIFICATE-----Generated at Tue Oct 28 02:21:40 2025 by rpki-client