$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: dh/0A1+M4J9wM7wy28Issu2DY6M9V6b8n1xRQ84SjHE= Subject key identifier: CC:24:CB:7B:4D:ED:21:F4:09:6D:64:55:F2:FF:F7:28:56:26:D0:3D Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584B13D6BDEB08D267D6BFE13230 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bd:eb:08:d2:67:d6:bf:e1:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=3c305bf5-cf48-4db8-9a2d-ca4b28dcfc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:6d:1d:ab:7e:98:62:c9:99:50:62:55:ee: 92:18:82:42:bb:3a:25:d4:37:6a:ff:92:3e:5e:9e: c8:b3:c2:3f:4d:15:67:c5:e7:dc:ca:f6:d0:b1:74: 88:a8:8b:10:71:fc:c6:d6:8a:7f:04:24:76:3a:0f: 36:9e:be:f4:a9:63:bc:7d:67:17:10:28:5c:c8:5e: 68:82:fc:d7:0f:f3:d1:11:8a:62:66:c8:c2:40:c5: eb:35:e3:d8:c2:a4:97:88:9b:bb:e2:0a:95:12:7b: f5:18:3c:f5:fa:4b:3b:a5:2b:30:99:e5:ce:e2:c5: 71:6d:eb:ad:8c:f9:17:f2:80:8b:5b:87:94:96:60: d1:6a:d3:1c:b3:fc:ab:77:d2:19:41:72:12:ff:c8: 8b:9c:48:ab:34:ac:c1:de:e8:d6:4c:fb:d8:08:ab: 3e:ea:2e:c1:6d:14:c3:d0:00:b0:26:a3:d8:fd:af: e2:fd:7e:50:09:7b:b6:34:9e:61:d4:f1:18:06:fb: 0f:06:e7:7f:43:be:56:11:3c:76:70:35:76:9b:2e: a6:56:06:bd:57:2a:e3:90:a2:b4:69:dc:8e:95:f5: 9f:f3:12:30:88:eb:0c:e2:24:bb:86:4d:19:86:fc: 29:6d:61:f5:3f:35:38:0b:c5:58:ce:2c:2e:b8:81: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:24:CB:7B:4D:ED:21:F4:09:6D:64:55:F2:FF:F7:28:56:26:D0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:67:8e:f2:fe:a4:30:fb:2b:54:bd:af:ef:ca:06:ca:f9:71: aa:7a:23:fc:cd:a7:db:46:56:c4:96:b0:a0:ae:a4:57:78:22: c7:36:9d:d6:0d:16:3f:f1:5e:0e:a2:69:2e:bb:e8:f0:bc:f0: 69:1f:a4:5b:40:5a:ff:19:85:4a:ee:3c:29:f8:ae:93:c6:59: 7b:be:ae:4d:7e:cc:48:5d:fa:6c:73:b3:fb:00:a2:2a:60:04: ee:27:d1:af:ea:0a:3e:6e:c2:ae:97:d2:6e:b3:32:29:f1:43: db:54:b2:36:5f:b8:27:7a:1f:65:a7:57:f9:37:c7:43:39:f4: d6:f6:91:8f:79:1f:97:d3:1b:7d:2a:7c:c1:2f:e2:a2:ea:00: 75:9f:0d:53:16:93:0a:94:63:8b:b8:ef:d8:1e:a9:3f:f2:c8: 68:3c:59:54:a4:19:87:08:90:27:a1:f8:1d:da:3e:a0:1b:f5: 5e:58:57:8b:c1:8c:15:99:a8:6f:11:fc:d5:ee:4d:9d:b5:64: 60:ae:98:11:4f:7c:8b:34:95:0d:75:4c:43:0b:ff:98:fb:8a: ad:17:af:e8:4c:01:b6:fa:8b:d2:a8:8e:31:c0:35:08:33:e9: 24:90:da:4e:fd:71:f6:96:99:c7:62:f6:86:2d:3d:bb:46:b1: d9:96:f0:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1r3rCNJn1r/hMjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk M2MzMDViZjUtY2Y0OC00ZGI4LTlhMmQtY2E0YjI4ZGNmYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqRtHat+mGLJmVBiVe6SGIJCuzol1Ddq/5I+ Xp7Is8I/TRVnxefcyvbQsXSIqIsQcfzG1op/BCR2Og82nr70qWO8fWcXEChcyF5o gvzXD/PREYpiZsjCQMXrNePYwqSXiJu74gqVEnv1GDz1+ks7pSswmeXO4sVxbeut jPkX8oCLW4eUlmDRatMcs/yrd9IZQXIS/8iLnEirNKzB3ujWTPvYCKs+6i7BbRTD 0ACwJqPY/a/i/X5QCXu2NJ5h1PEYBvsPBud/Q75WETx2cDV2my6mVga9VyrjkKK0 adyOlfWf8xIwiOsM4iS7hk0ZhvwpbWH1PzU4C8VYziwuuIHxLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwky3tN7SH0CW1kVfL/9yhWJtA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFnjvL+pDD7K1S9r+/KBsr5cap6I/zNp9tGVsSWsKCupFd4Isc2ndYN Fj/xXg6iaS676PC88GkfpFtAWv8ZhUruPCn4rpPGWXu+rk1+zEhd+mxzs/sAoipg BO4n0a/qCj5uwq6X0m6zMinxQ9tUsjZfuCd6H2WnV/k3x0M59Nb2kY95H5fTG30q fMEv4qLqAHWfDVMWkwqUY4u479geqT/yyGg8WVSkGYcIkCeh+B3aPqAb9V5YV4vB jBWZqG8R/NXuTZ21ZGCumBFPfIs0lQ11TEML/5j7iq0Xr+hMAbb6i9KojjHANQgz 6SSQ2k79cfaWmcdi9oYtPbtGsdmW8F8= -----END CERTIFICATE-----Generated at Tue Oct 28 00:13:39 2025 by rpki-client