$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/92644327-a520-3966-89ac-acf3f8d723e3.roa File: 92644327-a520-3966-89ac-acf3f8d723e3.roa (raw, json) Hash identifier: bjyeQx0+yBdLE0o/ld/aHSp5yaFBX6YZlal0GsuGoAE= Subject key identifier: 94:F2:D8:2E:C5:33:5E:CC:FF:38:B8:59:B7:84:75:AB:61:3D:59:89 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0D88236FC9EC73E46300 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/92644327-a520-3966-89ac-acf3f8d723e3.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 35908 IP address blocks: 173.214.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:88:23:6f:c9:ec:73:e4:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=08d6f1a5-295a-44c3-86f3-9b4d24be78c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:42:ed:a3:1d:f9:72:d3:75:f4:06:d0:b2: 16:3f:4b:ca:c1:67:37:8b:c4:fa:e2:e7:4c:c6:a1: 95:90:42:92:5f:1e:21:90:ca:9c:dd:64:3f:63:a0: da:32:57:e3:9d:d7:de:36:01:5f:62:bc:28:1c:f5: 47:44:eb:1a:c8:0c:b8:b0:4d:00:d4:39:97:ee:a3: 4d:3d:84:3e:a5:b0:db:d4:51:6f:ae:ea:5e:45:b7: 1d:98:d9:4b:bf:bb:a6:e4:e9:d4:00:92:7a:93:f7: 6e:07:98:f2:1d:87:75:9c:58:07:ec:e7:f7:96:c0: 69:26:9b:a3:00:ac:6b:3d:a0:86:a4:21:a2:a8:95: c6:53:af:5e:4f:4f:bc:5b:dc:5a:41:f3:dc:c4:2c: 7b:2c:77:65:30:43:23:1a:7a:aa:de:32:2a:b1:08: 27:66:43:02:6f:14:a5:12:e9:aa:f6:96:43:66:11: 5f:52:71:32:c9:3f:2c:16:df:f5:9c:e0:62:59:2b: 37:ff:e3:f6:3a:b7:c4:9c:10:16:fc:4a:c3:d7:8c: 4c:aa:25:2b:f8:97:3f:8c:42:46:81:0a:ef:e7:ff: b7:e6:0e:fe:54:5a:96:21:39:b2:ce:b1:d2:e9:5c: 22:c1:a8:34:55:e4:c2:6d:64:e2:12:e8:a9:eb:9d: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F2:D8:2E:C5:33:5E:CC:FF:38:B8:59:B7:84:75:AB:61:3D:59:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/92644327-a520-3966-89ac-acf3f8d723e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a2:a8:5e:10:fb:ac:d8:8f:a7:4b:e2:fb:52:3a:c0:62:25: 08:37:e2:e4:dd:b7:6e:3f:9b:87:4b:3b:76:f8:fc:06:ee:55: 26:b8:6b:2a:a3:89:62:ae:5f:11:b7:e1:57:7c:6b:54:15:df: 84:de:5f:7d:df:5b:45:6f:85:8c:b1:01:9f:fa:1e:09:34:e0: 75:49:b7:41:fd:f4:c2:c3:97:e2:45:6f:81:05:41:21:4a:b8: 77:ea:03:61:2a:9b:c5:17:d0:de:0b:1b:94:a6:77:1d:46:54: 19:3f:69:e3:ea:6c:72:aa:b2:0e:4f:cd:bb:df:71:0d:66:ef: 07:3e:fb:43:ef:bf:ec:6a:85:91:0a:e4:18:4c:cd:6d:00:cd: 30:66:77:94:76:19:08:9c:ea:e0:73:7e:01:33:e8:dc:6c:60: d4:59:6a:a2:fa:2f:e3:bc:4f:91:98:5d:7b:95:8b:14:c3:e4: 1b:75:15:af:0c:d9:43:de:71:ae:6d:e8:2f:52:d7:e4:e1:4e: bf:f5:29:d9:d3:c1:7f:4a:ea:eb:e9:d4:30:40:2c:f7:51:1c: c4:bb:2c:32:48:db:eb:9a:a9:3e:60:8c:2d:63:bb:3b:8b:d8: d8:37:83:0e:36:01:cb:30:ab:c3:44:69:5f:f1:76:3b:9b:46: a8:8e:3d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA2II2/J7HPkYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MDhkNmYxYTUtMjk1YS00NGMzLTg2ZjMtOWI0ZDI0YmU3OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnNC7aMd+XLTdfQG0LIWP0vKwWc3i8T64udM xqGVkEKSXx4hkMqc3WQ/Y6DaMlfjndfeNgFfYrwoHPVHROsayAy4sE0A1DmX7qNN PYQ+pbDb1FFvrupeRbcdmNlLv7um5OnUAJJ6k/duB5jyHYd1nFgH7Of3lsBpJpuj AKxrPaCGpCGiqJXGU69eT0+8W9xaQfPcxCx7LHdlMEMjGnqq3jIqsQgnZkMCbxSl Eumq9pZDZhFfUnEyyT8sFt/1nOBiWSs3/+P2OrfEnBAW/ErD14xMqiUr+Jc/jEJG gQrv5/+35g7+VFqWITmyzrHS6Vwiwag0VeTCbWTiEuip653U2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTy2C7FM17M/zi4WbeEdathPVmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvOTI2NDQzMjctYTUyMC0z OTY2LTg5YWMtYWNmM2Y4ZDcyM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrdYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSiqF4Q+6zYj6dL4vtSOsBiJQg34uTdt24/m4dLO3b4/AbuVSa4ayqj iWKuXxG34Vd8a1QV34TeX33fW0VvhYyxAZ/6Hgk04HVJt0H99MLDl+JFb4EFQSFK uHfqA2Eqm8UX0N4LG5Smdx1GVBk/aePqbHKqsg5PzbvfcQ1m7wc++0Pvv+xqhZEK 5BhMzW0AzTBmd5R2GQic6uBzfgEz6NxsYNRZaqL6L+O8T5GYXXuVixTD5Bt1Fa8M 2UPeca5t6C9S1+ThTr/1KdnTwX9K6uvp1DBALPdRHMS7LDJI2+uaqT5gjC1juzuL 2Ng3gw42Acswq8NEaV/xdjubRqiOPZo= -----END CERTIFICATE-----Generated at Wed Sep 10 04:42:03 2025 by rpki-client