$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa File: 276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa (raw, json) Hash identifier: msz2qRmNoDk7lqVXk6ldxBnUd7zijGq7CV9Br1kF6aY= Subject key identifier: 96:BF:85:97:C7:C5:17:10:D9:0A:3C:A4:DF:AE:62:B6:D2:21:F8:64 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0D2E1EE56FA9B20CC680 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 74.222.145.0/24 maxlen: 24 74.222.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:2e:1e:e5:6f:a9:b2:0c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6a82222a-782f-4821-9d90-8a3ecd1349dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:0e:be:4b:ca:24:87:34:33:d6:70:22:8b: f0:65:af:a2:83:02:8f:ce:03:78:dc:74:bb:a3:e6: 43:6b:88:d2:6a:1b:1f:7c:52:5e:62:c1:bc:3e:10: 6b:04:76:56:4f:a3:fc:64:8a:2a:71:41:e3:77:c7: bf:bc:aa:7f:0b:1a:ff:9e:b7:74:9b:7b:ac:c0:da: d6:51:a0:ce:3b:42:b3:85:17:4b:84:51:e8:c3:12: ae:5d:af:7c:41:5c:0c:48:f8:14:dc:34:57:48:bb: a9:f0:81:e6:e9:17:cd:39:42:0e:0c:8f:34:be:5c: 6a:7e:e1:42:e7:3d:1b:0f:bb:2f:4e:08:72:00:1d: 8c:32:93:cb:86:1c:3e:70:27:3a:39:e3:b2:bf:37: fc:f7:a4:fb:b1:6c:da:ba:91:2d:1c:1b:af:3e:a4: ff:f8:1b:d8:69:60:54:b9:24:3a:55:89:e5:75:a1: 1e:39:37:72:8a:3a:aa:4a:40:34:98:7b:41:66:d1: 53:45:0e:bb:ce:27:59:b2:b4:c6:a5:ab:c0:ef:95: 06:5c:e5:d7:4c:2b:9f:f1:40:b1:5a:6e:59:8f:7b: ce:75:95:d0:e4:f2:e6:80:ad:ce:9e:c6:4b:4e:a3: fe:84:62:a0:ea:1b:89:4f:95:78:35:6d:de:d5:8e: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:85:97:C7:C5:17:10:D9:0A:3C:A4:DF:AE:62:B6:D2:21:F8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/276ab7d3-2fa3-3d76-a533-1ea55ee93389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.145.0-74.222.146.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:79:0a:2e:c1:9b:77:ff:89:3b:63:f8:57:c3:e0:e5:7f:ed: c4:55:9d:47:8b:41:40:29:01:d1:06:f0:72:de:ad:ac:97:9a: 50:35:fe:72:c9:67:56:60:ea:71:99:f1:e1:9a:3f:9d:e5:15: 4e:11:0d:fa:2f:76:e8:c9:86:14:c4:01:07:fb:81:eb:2e:6e: 8a:14:5a:67:77:74:8f:81:e0:81:ec:0a:81:4d:3a:3a:71:4b: b2:8d:06:ce:bb:e5:6e:71:19:8f:71:bc:81:e6:d0:2f:ac:03: 92:0c:8e:7e:ac:1e:32:02:a1:19:23:d4:44:ab:cc:24:2e:76: d7:ac:1a:28:ef:33:83:e9:ce:7a:6d:03:f8:52:9e:55:e7:94: a1:18:2f:4e:a1:f7:82:04:9e:db:71:47:aa:1c:25:d1:1e:97: ca:7f:a9:e1:1b:d0:e6:aa:c8:4d:08:63:5d:55:bb:a4:b6:21: 4d:4f:6d:0a:ff:dc:c7:35:2e:82:96:c1:dd:ea:b2:c4:ba:b8: 4c:e6:8d:f9:ba:f5:46:b7:a4:df:90:8d:e6:59:f6:2d:e1:df: 0f:a9:51:b4:c9:b5:a9:f0:c0:74:90:ca:2b:f8:d1:34:d0:fe: e9:59:0a:a8:4f:9d:27:94:e7:37:21:2b:6c:a4:7d:b7:5e:18: 0e:4f:b3:12 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEr8HA0uHuVvqbIMxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmE4MjIyMmEtNzgyZi00ODIxLTlkOTAtOGEzZWNkMTM0OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCUOvkvKJIc0M9ZwIovwZa+igwKPzgN43HS7 o+ZDa4jSahsffFJeYsG8PhBrBHZWT6P8ZIoqcUHjd8e/vKp/Cxr/nrd0m3uswNrW UaDOO0KzhRdLhFHowxKuXa98QVwMSPgU3DRXSLup8IHm6RfNOUIODI80vlxqfuFC 5z0bD7svTghyAB2MMpPLhhw+cCc6OeOyvzf896T7sWzaupEtHBuvPqT/+BvYaWBU uSQ6VYnldaEeOTdyijqqSkA0mHtBZtFTRQ67zidZsrTGpavA75UGXOXXTCuf8UCx Wm5Zj3vOdZXQ5PLmgK3OnsZLTqP+hGKg6huJT5V4NW3e1Y6AaQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJa/hZfHxRcQ2Qo8pN+uYrbSIfhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjc2YWI3ZDMtMmZhMy0z ZDc2LWE1MzMtMWVhNTVlZTkzMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABK3pED BABK3pIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAdnkKLsGbd/+JO2P4V8Pg5X/txFWdR4tBQCkB0Qbwct6t rJeaUDX+cslnVmDqcZnx4Zo/neUVThEN+i926MmGFMQBB/uB6y5uihRaZ3d0j4Hg gewKgU06OnFLso0GzrvlbnEZj3G8gebQL6wDkgyOfqweMgKhGSPURKvMJC5216wa KO8zg+nOem0D+FKeVeeUoRgvTqH3ggSe23FHqhwl0R6Xyn+p4RvQ5qrITQhjXVW7 pLYhTU9tCv/cxzUugpbB3eqyxLq4TOaN+br1Rrek35CN5ln2LeHfD6lRtMm1qfDA dJDKK/jRNND+6VkKqE+dJ5TnNyErbKR9t14YDk+zEg== -----END CERTIFICATE-----Generated at Tue Sep 9 20:45:55 2025 by rpki-client