$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa File: 6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa (raw, json) Hash identifier: 0P0IdlA+v63NMs91nT3+oo477c04Y3e9YyzwMeCrhZo= Subject key identifier: 11:BD:D0:F4:90:F7:48:46:65:17:F1:83:A3:47:85:B6:60:6F:84:62 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C01F1BA7CFD5302B8FBC0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 67.198.230.0/23 maxlen: 24 67.198.232.0/23 maxlen: 24 67.198.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:01:f1:ba:7c:fd:53:02:b8:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6de9f1e4-cd3b-424f-a723-124380efd0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:e2:72:94:b6:1a:9c:80:66:4f:f7:e9:51: 31:c7:bc:ce:0e:5b:09:ea:29:42:02:73:84:03:94: 81:29:ae:64:2c:48:8d:ba:39:0a:2a:bd:1a:6f:32: 40:66:12:f0:6c:ba:bd:04:0e:eb:31:66:25:4d:1b: 9e:be:31:69:56:8b:b9:3c:76:86:be:be:1e:a6:25: 9b:fd:e4:31:26:ff:bf:36:20:98:24:e2:87:30:9f: ed:bf:2d:f6:bf:61:c6:0f:21:4b:3f:8a:a2:99:03: 22:21:c6:3d:c5:e4:f3:f8:bb:b9:c3:72:eb:00:be: 45:ed:d1:ab:38:ac:17:de:bf:20:95:61:f6:a9:79: d4:cc:10:a4:7c:1b:1d:26:24:f5:36:30:94:69:0f: 41:bd:7d:27:b5:04:55:c9:4c:9b:58:ec:e8:17:77: dc:1b:3f:f2:46:60:9b:c3:b6:40:ab:90:c7:ee:6a: 1d:85:f1:51:cb:3e:f8:4a:39:54:11:34:53:07:bf: 25:84:ca:13:2e:d5:3b:5a:89:bf:49:65:ad:f6:c5: 1f:60:b8:c7:1a:59:0c:8b:2c:69:1e:9c:c0:ff:81: 99:f0:aa:f2:23:32:f3:d7:e0:b6:c0:22:2d:15:67: 67:46:44:ea:07:2b:da:8a:4c:6e:b2:78:91:f0:6e: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BD:D0:F4:90:F7:48:46:65:17:F1:83:A3:47:85:B6:60:6F:84:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6082c470-de4b-3da8-a2e4-c0b1e9a9edfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.230.0-67.198.233.255 67.198.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1e:d1:f4:57:3b:f8:be:bf:86:44:89:78:87:7c:e2:eb:57: b6:07:83:2c:5b:0d:e9:82:c6:76:30:85:b5:49:4f:f0:b7:6d: 3c:2e:3a:46:1b:7d:20:c6:31:0f:37:be:ca:be:1b:05:04:53: e2:28:2c:57:94:6f:65:d6:82:a5:af:08:94:b5:1b:67:04:da: 5f:a9:f8:68:97:31:84:5d:8f:59:55:61:23:f1:f5:25:18:2d: 53:c3:5c:e9:6a:98:4b:35:fc:13:0b:73:0a:40:4d:d5:87:8e: e7:4c:8c:d8:cc:46:80:22:97:a1:9d:fa:1f:80:03:19:fc:e7: 4f:70:e9:24:48:b6:69:21:fe:98:be:33:a5:96:68:7d:8b:0e: 6d:ef:e5:a8:2b:86:93:39:09:25:e4:b1:d0:ec:92:6c:9d:04: 94:fc:39:00:bd:9e:5d:f1:f1:44:35:a1:ef:b9:19:0f:c3:2b: 08:15:38:d5:e0:97:48:c2:e4:ac:0f:5b:e2:cf:9c:e8:cf:39: 8f:b9:1d:99:12:b5:b9:9b:a6:0a:55:2a:7e:a9:5d:b0:1c:d2: 99:74:97:8a:dd:d5:b6:3d:ab:b2:a9:e5:ad:91:94:3b:98:84: 73:42:ef:cd:95:67:bc:2d:a4:15:68:67:f0:cd:84:62:68:4f: fb:1a:43:21 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEr8HAHxunz9UwK4+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmRlOWYxZTQtY2QzYi00MjRmLWE3MjMtMTI0MzgwZWZkMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUficpS2GpyAZk/36VExx7zODlsJ6ilCAnOE A5SBKa5kLEiNujkKKr0abzJAZhLwbLq9BA7rMWYlTRuevjFpVou5PHaGvr4epiWb /eQxJv+/NiCYJOKHMJ/tvy32v2HGDyFLP4qimQMiIcY9xeTz+Lu5w3LrAL5F7dGr OKwX3r8glWH2qXnUzBCkfBsdJiT1NjCUaQ9BvX0ntQRVyUybWOzoF3fcGz/yRmCb w7ZAq5DH7modhfFRyz74SjlUETRTB78lhMoTLtU7Wom/SWWt9sUfYLjHGlkMiyxp HpzA/4GZ8KryIzLz1+C2wCItFWdnRkTqByvaikxusniR8G4OVwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFBG90PSQ90hGZRfxg6NHhbZgb4RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNjA4MmM0NzAtZGU0Yi0z ZGE4LWEyZTQtYzBiMWU5YTllZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFDxuYD BAFDxugDBABDxvAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAEB7R9Fc7+L6/hkSJeId84utXtgeDLFsN6YLG djCFtUlP8LdtPC46Rht9IMYxDze+yr4bBQRT4igsV5RvZdaCpa8IlLUbZwTaX6n4 aJcxhF2PWVVhI/H1JRgtU8Nc6WqYSzX8EwtzCkBN1YeO50yM2MxGgCKXoZ36H4AD GfznT3DpJEi2aSH+mL4zpZZofYsObe/lqCuGkzkJJeSx0OySbJ0ElPw5AL2eXfHx RDWh77kZD8MrCBU41eCXSMLkrA9b4s+c6M85j7kdmRK1uZumClUqfqldsBzSmXSX it3Vtj2rsqnlrZGUO5iEc0LvzZVnvC2kFWhn8M2EYmhP+xpDIQ== -----END CERTIFICATE-----Generated at Tue Sep 9 20:42:16 2025 by rpki-client