$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa File: a4302370-01cb-38d0-a7bd-f931561466c3.roa (raw, json) Hash identifier: jSM6VEciYxJKz7z5qp6xptvQOQpkUK7APpryrGqX/Yk= Subject key identifier: EE:1E:17:05:BD:86:53:1C:FF:EA:12:75:47:2B:C8:AB:93:F6:3D:B0 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0D7752D379EF63B6E100 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 173.214.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:77:52:d3:79:ef:63:b6:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9e184142-dd92-49c6-89f3-bae6b41a24ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:cd:87:89:88:1a:a3:92:d5:6e:8c:88:a9: 1b:35:24:28:34:11:5e:c6:3a:c4:e9:9d:5b:02:ee: 09:ce:24:24:b6:d7:e4:d5:1d:f9:33:51:69:a8:13: 54:51:eb:09:2a:c2:07:5a:cf:a5:08:44:35:b6:d4: 69:5d:23:bb:0e:78:a2:59:d7:e6:ce:86:b1:9d:61: d5:b8:69:df:af:af:9c:81:29:6d:06:d6:98:8c:90: c7:d6:d3:0a:54:8a:d8:b2:40:97:dc:cb:f5:e1:0a: 0c:01:ec:42:4f:41:7f:f9:50:5e:af:9a:0d:57:3e: f7:59:03:d0:eb:29:cf:03:b0:31:41:8d:2c:87:cf: b1:bf:4a:97:4d:b4:3d:de:59:52:64:9c:6c:b2:cb: a9:08:54:94:16:20:82:74:8f:b5:2c:f2:ea:d6:82: 62:e4:9e:26:7b:48:d5:f9:15:ae:69:20:75:f0:ef: ab:8e:09:63:21:ba:68:1c:76:90:d5:f9:c5:2a:f1: 69:ba:ba:9b:b8:8a:c9:c1:d3:a9:28:fb:1f:de:1e: c4:cb:d1:56:9d:2b:06:c2:fe:99:17:e0:d9:60:63: e9:09:ca:a9:9f:bb:c4:aa:f7:41:37:b3:e5:cc:3c: 08:16:87:15:3b:9b:bf:2e:60:18:6b:e0:94:25:91: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1E:17:05:BD:86:53:1C:FF:EA:12:75:47:2B:C8:AB:93:F6:3D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/a4302370-01cb-38d0-a7bd-f931561466c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 173.214.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:03:d5:13:9f:f3:a1:33:6c:bd:40:57:08:bb:c3:0c:7f: 70:3a:be:eb:d5:79:54:5a:9b:84:93:e3:39:c8:62:ca:d8:eb: 64:4d:b7:25:2b:7f:9c:a5:16:4f:9a:76:9e:48:77:11:ef:57: e2:a4:c8:92:bf:3c:0d:4c:51:87:ed:95:80:7f:41:08:74:8b: 9a:55:8b:bb:4d:9a:be:64:ec:55:a3:8f:cd:ef:94:e8:49:d7: db:0c:c0:e0:b4:52:d6:9f:0a:08:5e:d0:f2:b1:c4:63:f1:9d: 35:a4:c5:3b:78:a6:27:30:d6:29:f5:68:24:0a:ae:84:40:22: db:7e:46:46:89:e7:71:2c:12:65:f5:e1:e3:66:7a:06:d1:e6: 0d:8e:70:07:6f:f8:19:41:4a:e2:66:ff:c7:0b:90:59:e5:94: 43:83:ab:78:0f:2d:e7:4e:6f:c9:42:52:34:af:cb:f3:04:c8: cc:92:b9:45:de:50:68:27:4b:d2:70:9d:07:f2:63:de:db:57: 59:7c:f0:1d:0e:76:c9:17:47:38:ea:04:59:2d:46:80:9d:db: 08:d8:4c:e0:fd:6e:fd:e3:19:35:85:59:53:92:91:dd:28:69: 66:74:07:bb:6f:c2:fa:00:be:4a:59:27:cd:41:2e:93:9c:72: b2:6e:29:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA13UtN572O24QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWUxODQxNDItZGQ5Mi00OWM2LTg5ZjMtYmFlNmI0MWEyNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rjNh4mIGqOS1W6MiKkbNSQoNBFexjrE6Z1b Au4JziQkttfk1R35M1FpqBNUUesJKsIHWs+lCEQ1ttRpXSO7DniiWdfmzoaxnWHV uGnfr6+cgSltBtaYjJDH1tMKVIrYskCX3Mv14QoMAexCT0F/+VBer5oNVz73WQPQ 6ynPA7AxQY0sh8+xv0qXTbQ93llSZJxsssupCFSUFiCCdI+1LPLq1oJi5J4me0jV +RWuaSB18O+rjgljIbpoHHaQ1fnFKvFpurqbuIrJwdOpKPsf3h7Ey9FWnSsGwv6Z F+DZYGPpCcqpn7vEqvdBN7PlzDwIFocVO5u/LmAYa+CUJZHr2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4eFwW9hlMc/+oSdUcryKuT9j2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYTQzMDIzNzAtMDFjYi0z OGQwLWE3YmQtZjkzMTU2MTQ2NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIBA9UTn/OhM2y9QFcIu8MMf3A6vuvVeVRam4ST4znIYsrY62RNtyUr f5ylFk+adp5IdxHvV+KkyJK/PA1MUYftlYB/QQh0i5pVi7tNmr5k7FWjj83vlOhJ 19sMwOC0UtafCghe0PKxxGPxnTWkxTt4picw1in1aCQKroRAItt+RkaJ53EsEmX1 4eNmegbR5g2OcAdv+BlBSuJm/8cLkFnllEODq3gPLedOb8lCUjSvy/MEyMySuUXe UGgnS9JwnQfyY97bV1l88B0OdskXRzjqBFktRoCd2wjYTOD9bv3jGTWFWVOSkd0o aWZ0B7tvwvoAvkpZJ81BLpOccrJuKWg= -----END CERTIFICATE-----Generated at Tue Oct 28 02:22:35 2025 by rpki-client