$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa File: 457d63bd-1b71-323a-a54b-ee6030546945.roa (raw, json) Hash identifier: aPC7agvf6hWR0EXZykr4JntRf/VeEwAZPpoNfx3aQ6A= Subject key identifier: 76:15:AF:6F:4C:F2:81:9F:E4:66:16:C7:EC:D9:50:FA:8B:B5:BF:4E Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C01C76F96F4A92D1C8080 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 67.229.252.0/23 maxlen: 24 67.229.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:01:c7:6f:96:f4:a9:2d:1c:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=394e72e2-bfa7-4f01-ad2c-2438691506ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8f:ca:7b:ba:d8:73:d3:e0:d6:46:2f:1e:d5: 8d:dd:e4:93:72:51:65:92:c0:68:79:0b:4b:b9:be: 6e:cc:62:57:56:57:b5:8b:e1:16:19:d6:63:34:ed: a6:af:8b:70:0a:fd:d4:89:a9:6b:60:4a:8a:cd:78: 2a:c9:9e:b8:2f:65:d1:bd:83:63:b4:5a:77:1f:66: 94:0f:72:92:6b:2a:eb:5e:6b:a5:c9:fb:e9:ad:40: 8b:f3:b3:a8:71:36:8a:c1:a8:e2:20:ac:2b:66:1d: 5a:05:ec:89:a8:3d:0d:72:2d:35:ee:cd:ff:4e:52: 14:55:3e:6d:77:0e:2f:cf:6d:92:4c:51:fc:62:86: 39:69:9a:67:dc:3e:56:dc:d1:77:82:80:bd:f8:16: 2c:0e:14:11:a8:e2:17:a5:2c:5a:36:14:3c:25:7f: 27:e4:41:59:2a:cc:c3:7b:51:b6:18:aa:77:5c:aa: 39:2e:14:88:ac:04:e9:0b:59:6b:26:df:a6:bc:9c: 8b:9b:34:be:b5:93:cb:22:ea:5a:97:54:b0:25:2d: 32:b8:d4:57:42:34:07:43:b3:7d:55:7b:1f:e9:a7: ea:20:08:77:27:a3:b8:12:ff:ed:01:97:13:de:6e: 0b:b4:cb:e6:cd:0b:18:ba:85:04:e6:57:4b:12:8f: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:15:AF:6F:4C:F2:81:9F:E4:66:16:C7:EC:D9:50:FA:8B:B5:BF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.229.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:08:22:5a:12:cf:b5:54:47:69:28:54:05:39:2e:82:f6:fa: d8:5b:b0:13:58:7c:d2:27:07:d3:6f:48:86:48:8f:60:f9:1d: 34:9e:6f:d7:c0:39:92:c3:be:42:73:69:2a:bd:91:14:34:a0: 6c:f8:ae:50:4a:f3:7d:38:d3:b2:fd:87:f4:14:88:c0:20:38: 03:fb:f9:ac:dc:a8:f6:7d:e6:d2:89:e6:99:c9:b2:14:03:f9: 1e:a0:1c:9e:da:42:f2:04:97:02:f3:ed:cc:5c:0f:59:ca:48: 87:5e:f1:c0:af:8a:f5:01:5c:bd:3a:cd:10:64:f1:61:33:c7: ae:70:ee:a4:ec:c4:c1:9f:86:fe:57:32:65:0f:51:75:73:f6: 3e:bf:c6:52:c4:6a:56:8a:35:4d:0d:32:a5:2f:61:d4:9b:61: d2:3f:7f:20:61:11:05:39:08:db:09:cb:d0:59:56:9d:fc:24: 66:6b:ff:3b:a7:94:c7:5e:70:86:de:fa:11:5b:d0:64:e2:e1: 20:af:18:5d:c8:46:70:ce:62:e6:cf:92:65:66:29:5e:95:3b: cc:bf:fd:0a:a7:b2:2f:01:ac:4e:9e:3d:3a:3a:9c:0f:e7:a3: 46:8a:dd:b0:21:53:99:7e:30:87:0d:28:27:9c:03:54:d6:0c: e7:a1:91:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAHHb5b0qS0cgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk Mzk0ZTcyZTItYmZhNy00ZjAxLWFkMmMtMjQzODY5MTUwNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI/Ke7rYc9Pg1kYvHtWN3eSTclFlksBoeQtL ub5uzGJXVle1i+EWGdZjNO2mr4twCv3UialrYEqKzXgqyZ64L2XRvYNjtFp3H2aU D3KSayrrXmulyfvprUCL87OocTaKwajiIKwrZh1aBeyJqD0Nci017s3/TlIUVT5t dw4vz22STFH8YoY5aZpn3D5W3NF3goC9+BYsDhQRqOIXpSxaNhQ8JX8n5EFZKszD e1G2GKp3XKo5LhSIrATpC1lrJt+mvJyLmzS+tZPLIupal1SwJS0yuNRXQjQHQ7N9 VXsf6afqIAh3J6O4Ev/tAZcT3m4LtMvmzQsYuoUE5ldLEo+NQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYVr29M8oGf5GYWx+zZUPqLtb9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNDU3ZDYzYmQtMWI3MS0z MjNhLWE1NGItZWU2MDMwNTQ2OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ+X8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAIIloSz7VUR2koVAU5LoL2+thbsBNYfNInB9NvSIZIj2D5HTSeb9fA OZLDvkJzaSq9kRQ0oGz4rlBK830407L9h/QUiMAgOAP7+azcqPZ95tKJ5pnJshQD +R6gHJ7aQvIElwLz7cxcD1nKSIde8cCvivUBXL06zRBk8WEzx65w7qTsxMGfhv5X MmUPUXVz9j6/xlLEalaKNU0NMqUvYdSbYdI/fyBhEQU5CNsJy9BZVp38JGZr/zun lMdecIbe+hFb0GTi4SCvGF3IRnDOYubPkmVmKV6VO8y//Qqnsi8BrE6ePTo6nA/n o0aK3bAhU5l+MIcNKCecA1TWDOehkes= -----END CERTIFICATE-----Generated at Tue Sep 9 20:46:47 2025 by rpki-client