$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa File: 58bb2d1c-10b2-3954-b73d-a493764205ed.roa (raw, json) Hash identifier: kSARXeTo7tgb+NTjKEfmYmJ/g/uAfr0Yf0jvoMxe4Ro= Subject key identifier: B3:0C:44:5A:1D:F9:4A:5A:FA:FF:CE:0B:28:46:48:40:27:FE:A8:DF Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C02076CC7A13456DED900 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 35908 IP address blocks: 67.198.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:02:07:6c:c7:a1:34:56:de:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=46336109-f749-49f9-a383-dc300c9034a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:11:d4:3b:d0:32:1c:01:ca:86:d0:c9:1b: ea:8b:39:f3:a8:52:b2:4f:2c:6d:0c:bf:1c:82:a3: e9:66:95:24:f6:40:10:02:9b:7c:4a:e4:72:d9:6f: 3e:90:38:dd:2a:07:51:b3:48:f3:f6:bc:40:9e:dd: af:58:9f:79:27:a6:16:46:5f:22:ec:4d:ab:bf:e9: 45:4a:ea:ef:35:d3:90:7a:44:8b:62:83:53:aa:0b: 2a:e5:c8:bf:07:90:fd:15:7c:a1:93:03:06:07:6e: e0:be:7d:8d:80:8f:84:be:c0:8f:fe:43:85:4f:32: 7c:c1:ae:ea:5c:dc:fb:58:33:b1:4f:72:9e:f9:60: f9:c6:fe:92:06:0d:e6:a1:f4:18:4d:9e:fb:cf:2c: 80:bb:6a:9c:76:4a:e0:00:98:50:29:e1:b8:cd:b0: f1:ec:aa:6b:28:e9:c3:13:62:6c:7a:4a:f1:8f:69: 30:03:3d:a1:e9:55:e0:f2:f0:04:24:27:0e:e7:3c: 08:43:b5:1c:f2:46:33:28:6e:86:83:0c:86:7a:76: a6:d5:b8:cf:91:4d:f5:56:03:3b:5d:e7:c0:0c:dc: ff:ee:bd:f0:28:13:62:a0:74:09:0d:58:c9:39:5a: f2:23:a8:6c:c4:1c:57:80:fb:c4:92:4d:60:c9:53: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:44:5A:1D:F9:4A:5A:FA:FF:CE:0B:28:46:48:40:27:FE:A8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:7b:97:bf:86:89:a4:1d:35:28:d4:f8:e5:fc:a7:a4:4c:82: ba:57:db:2b:58:1b:2c:ca:61:d4:23:da:ba:f0:59:e4:e6:15: cf:03:40:04:d2:b5:b5:e7:80:5b:0b:9d:03:13:1e:e6:db:19: 45:92:16:11:36:37:f8:a1:80:d8:b9:95:8d:9d:14:2a:ec:02: 07:44:d5:7b:31:f3:6a:c9:5a:8d:ed:64:43:28:94:8a:ba:98: 17:c7:f6:b9:cf:12:26:0b:42:4c:27:b1:c6:1b:65:e7:7c:ab: 98:81:1e:50:de:60:c3:48:0f:bd:b0:bc:bc:a0:54:5c:ea:45: 0b:ba:5a:3a:f5:e2:d3:b5:df:a4:90:56:10:4b:b3:81:c6:f4: 11:4c:91:54:43:f8:bd:e1:13:be:09:5b:1c:38:7f:3c:98:64: 77:56:88:ec:9c:a5:26:ec:69:4a:32:68:98:64:64:39:8a:21: 10:a5:69:bd:22:eb:46:2c:c9:47:52:8f:68:45:d6:5a:3c:97: 35:c4:03:2b:75:bd:0d:9c:a3:1c:50:ff:c6:56:f8:83:c0:a9: e7:0c:b2:fb:4f:05:5a:c4:1e:4e:43:55:e4:7f:28:85:1a:e7: cd:f1:ea:d5:f6:d4:b1:6e:d4:86:63:7a:6d:84:45:fe:da:ec: a9:07:c1:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAIHbMehNFbe2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDYzMzYxMDktZjc0OS00OWY5LWEzODMtZGMzMDBjOTAzNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU4R1DvQMhwByobQyRvqiznzqFKyTyxtDL8c gqPpZpUk9kAQApt8SuRy2W8+kDjdKgdRs0jz9rxAnt2vWJ95J6YWRl8i7E2rv+lF SurvNdOQekSLYoNTqgsq5ci/B5D9FXyhkwMGB27gvn2NgI+EvsCP/kOFTzJ8wa7q XNz7WDOxT3Ke+WD5xv6SBg3mofQYTZ77zyyAu2qcdkrgAJhQKeG4zbDx7KprKOnD E2Jsekrxj2kwAz2h6VXg8vAEJCcO5zwIQ7Uc8kYzKG6GgwyGenam1bjPkU31VgM7 XefADNz/7r3wKBNioHQJDVjJOVryI6hsxBxXgPvEkk1gyVNs4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMMRFod+Upa+v/OCyhGSEAn/qjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNThiYjJkMWMtMTBiMi0z OTU0LWI3M2QtYTQ5Mzc2NDIwNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ8aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL97l7+GiaQdNSjU+OX8p6RMgrpX2ytYGyzKYdQj2rrwWeTmFc8DQATS tbXngFsLnQMTHubbGUWSFhE2N/ihgNi5lY2dFCrsAgdE1Xsx82rJWo3tZEMolIq6 mBfH9rnPEiYLQkwnscYbZed8q5iBHlDeYMNID72wvLygVFzqRQu6Wjr14tO136SQ VhBLs4HG9BFMkVRD+L3hE74JWxw4fzyYZHdWiOycpSbsaUoyaJhkZDmKIRClab0i 60YsyUdSj2hF1lo8lzXEAyt1vQ2coxxQ/8ZW+IPAqecMsvtPBVrEHk5DVeR/KIUa 583x6tX21LFu1IZjem2ERf7a7KkHwZ8= -----END CERTIFICATE-----Generated at Wed Sep 10 04:47:11 2025 by rpki-client