$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/84890823-5c5d-352d-8be0-e616158bef5c.roa File: 84890823-5c5d-352d-8be0-e616158bef5c.roa (raw, json) Hash identifier: bNJvN+t+OeZ5nsBbfvM6vDgbf6zlbz1U1TVJuFhyn7s= Subject key identifier: E7:7D:60:D0:E2:65:BA:D5:B8:96:04:DB:FF:71:8D:27:7D:14:AD:CD Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0395E4060AC60267B000 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/84890823-5c5d-352d-8be0-e616158bef5c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 67.198.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:03:95:e4:06:0a:c6:02:67:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=4ac5810b-79e7-4be3-bda0-d73efbfc960b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:b0:e5:ce:df:0f:51:14:a4:2b:e3:69:60: fb:63:87:f3:18:ec:fb:65:93:23:78:5e:58:89:d6: 4b:73:0a:79:b7:e7:f0:d7:3a:03:01:7d:ae:5b:86: 66:f6:53:f0:cb:3e:cd:71:fa:66:0d:ae:e6:7d:a0: 84:db:08:cb:2e:c9:3d:09:84:e4:7d:b3:ab:a7:69: b2:9a:a5:8e:d6:b9:9c:7c:99:50:99:55:66:54:72: 0d:bc:9a:e5:d3:a4:e5:44:b9:42:87:22:74:6c:86: bf:26:11:86:6f:ec:da:7f:d8:e7:85:5d:50:7b:3e: b9:29:ca:19:7e:2a:c4:04:af:09:d9:b9:06:69:b9: 9b:c9:1e:86:50:92:fe:d0:b6:68:d7:15:25:c9:d9: 44:e6:f8:ec:d6:83:53:40:ae:82:24:0c:ac:1c:b8: 74:46:e1:4e:9a:f3:88:a0:45:ea:80:4c:be:e9:49: db:65:54:9d:d2:a8:58:de:48:98:a6:8f:b9:b7:36: 08:c3:d6:5e:02:0b:d0:4d:0c:5e:8c:24:e3:a7:30: 63:75:88:c5:18:25:b4:72:b2:4f:2b:d5:1f:7e:93: 5d:bc:de:6e:41:f7:7d:ce:1a:72:2c:6e:31:e2:4c: ab:83:07:0a:09:ec:8c:43:a5:16:69:15:51:e7:15: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:60:D0:E2:65:BA:D5:B8:96:04:DB:FF:71:8D:27:7D:14:AD:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/84890823-5c5d-352d-8be0-e616158bef5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cd:c2:c4:6a:0e:f9:5e:f3:be:8e:c8:7c:97:b0:66:21:c3: c9:f7:1c:5e:a7:7c:bb:47:bb:c2:9e:1e:0c:3d:1f:2c:2c:d9: 4b:c9:a8:a6:f8:09:50:84:3c:83:6a:bb:81:2a:88:a4:74:16: c1:ed:93:fc:b2:4d:54:1f:3f:fe:26:90:b9:7b:d9:31:77:d9: 10:42:1d:98:87:f7:76:8c:0e:a6:16:0e:75:f6:27:b7:5a:cf: 54:45:d4:f9:65:4e:0e:fb:57:13:68:48:bd:ae:80:c4:f5:2e: 3b:93:4a:fb:49:b3:91:14:a9:b2:43:8c:f6:41:fb:c9:82:4b: d1:ba:ae:4e:19:80:2a:d8:ff:51:c2:8c:52:ee:92:06:37:0b: d5:20:6c:f4:92:f1:13:8f:7d:7a:09:74:9b:4a:cb:71:54:fe: 5d:5c:3b:69:76:4d:0d:09:d2:28:78:c5:cd:a6:3f:90:5a:70: ad:94:f4:61:a2:93:9a:6d:4f:b5:f1:8e:98:ab:53:7e:52:10: 3c:1e:8e:ca:be:98:81:eb:95:75:f7:5a:8f:5a:d6:ee:ad:a5: 28:17:a8:39:86:64:5a:28:b7:30:40:06:64:55:42:0f:ed:a9: be:03:a3:07:40:71:31:53:cb:ca:9c:c6:d1:d6:0b:97:95:42: 5c:97:3c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAOV5AYKxgJnsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NGFjNTgxMGItNzllNy00YmUzLWJkYTAtZDczZWZiZmM5NjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0yw5c7fD1EUpCvjaWD7Y4fzGOz7ZZMjeF5Y idZLcwp5t+fw1zoDAX2uW4Zm9lPwyz7NcfpmDa7mfaCE2wjLLsk9CYTkfbOrp2my mqWO1rmcfJlQmVVmVHINvJrl06TlRLlChyJ0bIa/JhGGb+zaf9jnhV1Qez65KcoZ firEBK8J2bkGabmbyR6GUJL+0LZo1xUlydlE5vjs1oNTQK6CJAysHLh0RuFOmvOI oEXqgEy+6UnbZVSd0qhY3kiYpo+5tzYIw9ZeAgvQTQxejCTjpzBjdYjFGCW0crJP K9UffpNdvN5uQfd9zhpyLG4x4kyrgwcKCeyMQ6UWaRVR5xWbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd9YNDiZbrVuJYE2/9xjSd9FK3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvODQ4OTA4MjMtNWM1ZC0z NTJkLThiZTAtZTYxNjE1OGJlZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8bVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrNwsRqDvle876OyHyXsGYhw8n3HF6nfLtHu8KeHgw9Hyws2UvJqKb4 CVCEPINqu4EqiKR0FsHtk/yyTVQfP/4mkLl72TF32RBCHZiH93aMDqYWDnX2J7da z1RF1PllTg77VxNoSL2ugMT1LjuTSvtJs5EUqbJDjPZB+8mCS9G6rk4ZgCrY/1HC jFLukgY3C9UgbPSS8ROPfXoJdJtKy3FU/l1cO2l2TQ0J0ih4xc2mP5BacK2U9GGi k5ptT7XxjpirU35SEDwejsq+mIHrlXX3Wo9a1u6tpSgXqDmGZFootzBABmRVQg/t qb4DowdAcTFTy8qcxtHWC5eVQlyXPPI= -----END CERTIFICATE-----Generated at Tue Sep 9 20:46:47 2025 by rpki-client