$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa File: 2744b9df-6b90-37a0-ad0e-89af24e611e0.roa (raw, json) Hash identifier: j79cuET5EO7cG93GGvdj4pLJVrLKHiZ3uLaUEji80Uc= Subject key identifier: 6B:34:5A:B1:E9:21:4F:E3:D9:8C:5B:4F:24:A0:BB:1A:20:FD:64:B5 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0DC2A522433747B3F3C0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 209.11.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:c2:a5:22:43:37:47:b3:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ea05f72a-11c7-48ff-ab88-d50acf2c425e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:e6:33:4c:ec:e4:46:82:24:a5:c1:f8:3b: c7:55:12:54:70:77:be:35:11:7b:a9:6f:9d:4a:bf: 02:14:63:12:1f:f1:d4:b2:ec:93:76:46:b7:7d:a2: 9d:b7:05:91:3c:1c:0a:65:7c:42:cd:9d:85:40:1b: 36:6c:de:67:c6:0b:67:97:3f:90:5d:7a:50:b0:b3: 9e:9e:05:36:c7:fa:17:26:99:1d:b4:f8:30:70:57: e5:71:78:0d:26:be:64:80:91:4c:c2:18:b8:09:d0: 54:7f:c6:f3:a2:ea:55:38:7c:c0:26:20:65:c9:0d: db:59:1d:ef:d6:eb:b6:ee:6c:c7:8f:47:e1:79:14: 5f:dd:7d:ea:11:5d:d1:cb:ff:85:ae:01:41:50:cf: 5c:9d:5d:85:91:7a:c5:ff:6d:29:4f:92:c7:7e:61: 7d:ec:81:cc:fa:d9:d4:6b:db:fb:75:55:93:6a:1c: 26:1c:f3:17:c5:e3:03:27:9f:1a:63:2a:7a:96:e7: 00:89:de:96:af:62:bb:8b:4e:63:58:ac:78:bd:a8: b4:23:60:af:99:ff:99:60:08:f4:91:58:a4:39:2a: 44:b2:8e:78:c7:36:20:77:4c:50:c2:0a:cf:11:b5: c9:69:9d:fd:b9:ee:cb:f9:82:b3:48:ee:01:dd:4b: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:34:5A:B1:E9:21:4F:E3:D9:8C:5B:4F:24:A0:BB:1A:20:FD:64:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/2744b9df-6b90-37a0-ad0e-89af24e611e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c3:b2:ec:8f:81:fa:fe:0b:7b:d4:d4:fe:e0:6a:6b:27:82: 3f:40:b1:8f:ba:48:5f:5f:c3:99:c7:fd:95:cb:95:87:24:55: 3a:48:aa:82:81:12:e9:1e:cb:10:bf:ed:8a:51:d1:b0:72:ae: 09:b9:df:54:bc:fb:b4:08:7d:17:8d:93:23:56:e6:b2:08:dd: f1:c5:42:a6:4d:1f:e2:db:93:0b:0d:e1:d7:15:11:0b:6d:6c: c7:5d:49:eb:f0:f4:8d:ae:63:ed:d0:a2:fe:42:e5:41:58:15: 30:10:94:8d:c6:14:0c:dc:b4:bd:f9:d3:7d:96:35:97:4a:ce: bf:17:5c:b8:48:c3:5e:68:33:9f:49:9a:b1:d2:2e:cd:22:1f: 14:c7:94:02:85:44:9a:08:31:be:84:cd:4d:ce:da:6a:e2:d3: ec:98:a9:fe:b6:d7:2a:8d:ae:99:ff:29:1f:b9:bf:cc:47:d6: 44:06:b9:28:ff:89:8a:da:50:83:9b:51:1c:1c:fd:b5:95:77: 7f:f3:2b:5c:25:06:1e:e6:c4:27:35:82:e6:f6:b7:32:e9:d7: 5c:3d:c4:90:0b:59:a6:bc:05:d8:f1:c1:97:8d:6f:29:f3:6c: 65:27:63:1d:1b:5f:ca:49:7c:2b:6a:94:73:88:12:c8:c6:da: 6d:53:47:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA3CpSJDN0ez88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWEwNWY3MmEtMTFjNy00OGZmLWFiODgtZDUwYWNmMmM0MjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5LmM0zs5EaCJKXB+DvHVRJUcHe+NRF7qW+d Sr8CFGMSH/HUsuyTdka3faKdtwWRPBwKZXxCzZ2FQBs2bN5nxgtnlz+QXXpQsLOe ngU2x/oXJpkdtPgwcFflcXgNJr5kgJFMwhi4CdBUf8bzoupVOHzAJiBlyQ3bWR3v 1uu27mzHj0fheRRf3X3qEV3Ry/+FrgFBUM9cnV2FkXrF/20pT5LHfmF97IHM+tnU a9v7dVWTahwmHPMXxeMDJ58aYyp6lucAid6Wr2K7i05jWKx4vai0I2Cvmf+ZYAj0 kVikOSpEso54xzYgd0xQwgrPEbXJaZ39ue7L+YKzSO4B3UuXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs0WrHpIU/j2YxbTySguxog/WS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjc0NGI5ZGYtNmI5MC0z N2EwLWFkMGUtODlhZjI0ZTYxMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Qv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTDsuyPgfr+C3vU1P7gamsngj9AsY+6SF9fw5nH/ZXLlYckVTpIqoKB EukeyxC/7YpR0bByrgm531S8+7QIfReNkyNW5rII3fHFQqZNH+LbkwsN4dcVEQtt bMddSevw9I2uY+3Qov5C5UFYFTAQlI3GFAzctL35032WNZdKzr8XXLhIw15oM59J mrHSLs0iHxTHlAKFRJoIMb6EzU3O2mri0+yYqf621yqNrpn/KR+5v8xH1kQGuSj/ iYraUIObURwc/bWVd3/zK1wlBh7mxCc1gub2tzLp11w9xJALWaa8BdjxwZeNbynz bGUnYx0bX8pJfCtqlHOIEsjG2m1TR4c= -----END CERTIFICATE-----Generated at Tue Sep 9 20:45:08 2025 by rpki-client