$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa File: bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa (raw, json) Hash identifier: nC48YsWzk3twpHs5FwK97El+fABcJnGCS1mBVHQUUQY= Subject key identifier: A2:A7:1A:C1:01:99:83:34:83:3D:93:9B:72:94:91:22:C1:0D:EE:71 Certificate issuer: /CN=bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf Certificate serial: 010D0C9F4328584B004BEC41A07CA32611CC4680 Authority key identifier: 84:E8:EF:79:DB:A6:4A:86:A0:4D:00:AF:77:74:EB:DD:84:72:0E:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 16491 IP address blocks: 199.204.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ec:41:a0:7c:a3:26:11:cc:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=b1907074-4bc4-476f-999f-aeec74068964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:c4:82:29:50:2d:86:6d:f8:2c:28:92:e5: 7c:bb:32:85:ba:ca:48:95:b6:35:7d:c2:b0:d9:1b: d5:b5:63:fd:7f:ed:94:88:00:26:f0:23:5e:10:1d: f8:9c:cd:f0:86:b6:b8:b4:cc:09:c6:39:3a:31:cc: 85:7c:4c:5b:c1:26:e9:a2:98:f0:18:9f:49:db:20: 9c:8b:3b:19:31:d2:4d:a2:04:d8:af:fc:af:f8:03: fe:58:51:94:79:39:94:4e:a3:7f:45:76:77:35:46: 00:bf:4c:9e:c9:8f:c7:92:d6:9c:af:af:14:a9:5e: 80:66:84:88:79:2e:7c:2d:2e:18:62:33:17:12:d7: 88:f3:76:c6:0e:28:53:9e:cc:80:4a:7b:1a:80:d5: 95:06:a3:6c:2c:e3:14:07:0f:82:4f:15:dd:07:30: ce:89:5e:75:37:bb:f7:ba:c1:a9:33:f0:ff:c9:d8: 2f:15:d2:e0:8a:f5:eb:2c:bf:cd:9f:fb:ef:09:3c: f9:96:c2:24:e4:f1:cf:4f:2b:9d:3e:6b:9c:a4:26: c9:06:53:95:ab:8a:ab:12:58:5d:5a:c7:94:2b:4f: f6:59:13:ab:9c:d3:ad:10:01:52:bb:61:3d:c5:a0: 5d:77:63:3d:c1:d7:05:b7:1f:b1:8c:4a:62:1e:16: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:1A:C1:01:99:83:34:83:3D:93:9B:72:94:91:22:C1:0D:EE:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl X509v3 Authority Key Identifier: keyid:84:E8:EF:79:DB:A6:4A:86:A0:4D:00:AF:77:74:EB:DD:84:72:0E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer sbgp-ipAddrBlock: critical IPv4: 199.204.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:46:e4:5f:e0:fb:3e:af:98:28:56:cc:15:2a:18:0c:ac:1a: 46:de:bb:c0:b6:79:ef:18:e1:7e:73:e5:c8:12:77:c6:5e:f6: 97:71:66:58:eb:ce:1e:ec:ff:e4:01:0a:4f:c7:dd:f0:9f:19: 8c:de:5d:c8:98:d1:cd:13:0f:aa:0a:1a:bd:22:f1:70:96:94: d0:b0:df:8f:56:64:53:bf:a0:ad:8d:2e:79:18:8f:d6:5a:13: 83:28:88:33:d1:ad:04:71:68:fd:4e:72:85:ce:d3:fd:2c:cf: 1b:a7:60:a1:fc:36:11:69:31:6e:dc:6f:00:fd:29:86:2a:8f: 8e:67:c5:5c:8f:95:f6:03:62:7b:6c:1a:c2:45:31:93:91:7a: 01:33:72:88:ff:ab:dd:8b:5b:92:e8:d5:08:20:03:02:30:0a: c6:6b:8a:90:ed:df:51:9f:32:46:4b:8a:27:2e:a9:3c:a8:f4: a7:ee:cd:67:a9:83:cf:ff:37:70:e3:b3:b6:3c:b1:7e:c5:0a: 90:65:23:72:03:75:b6:64:33:ea:7a:30:25:1f:28:86:ce:44: 3d:08:35:17:91:bb:3a:ce:a5:2f:30:b6:87:6f:56:ea:c9:61: 8c:f0:4d:b6:4d:9f:6d:f6:c3:0d:05:14:64:6d:45:40:20:6b: db:96:6c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+xBoHyjJhHMRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0ZDBmYTUtOTVjNS00YmE2LTg0NTItYjAwYmZiYWY0 MmJmMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YjE5MDcwNzQtNGJjNC00NzZmLTk5OWYtYWVlYzc0MDY4OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWbEgilQLYZt+CwokuV8uzKFuspIlbY1fcKw 2RvVtWP9f+2UiAAm8CNeEB34nM3whra4tMwJxjk6McyFfExbwSbpopjwGJ9J2yCc izsZMdJNogTYr/yv+AP+WFGUeTmUTqN/RXZ3NUYAv0yeyY/Hktacr68UqV6AZoSI eS58LS4YYjMXEteI83bGDihTnsyASnsagNWVBqNsLOMUBw+CTxXdBzDOiV51N7v3 usGpM/D/ydgvFdLgivXrLL/Nn/vvCTz5lsIk5PHPTyudPmucpCbJBlOVq4qrElhd WseUK0/2WROrnNOtEAFSu2E9xaBdd2M9wdcFtx+xjEpiHhbnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKnGsEBmYM0gz2Tm3KUkSLBDe5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZDRk MGZhNS05NWM1LTRiYTYtODQ1Mi1iMDBiZmJhZjQyYmYvYmJmNWMxZGYtYTZkZS0z YWVmLThlNmYtM2NhMGEyMjZjNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmQ0ZDBmYTUtOTVjNS00YmE2LTg0 NTItYjAwYmZiYWY0MmJmL2JkNGQwZmE1LTk1YzUtNGJhNi04NDUyLWIwMGJmYmFm NDJiZi5jcmwwHwYDVR0jBBgwFoAUhOjvedumSoagTQCvd3Tr3YRyDuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZDRkMGZhNS05NWM1LTRiYTYtODQ1Mi1iMDBi ZmJhZjQyYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8wEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVG5F/g+z6vmChWzBUqGAysGkbeu8C2ee8Y4X5z5cgSd8Ze9pdxZljr zh7s/+QBCk/H3fCfGYzeXciY0c0TD6oKGr0i8XCWlNCw349WZFO/oK2NLnkYj9Za E4MoiDPRrQRxaP1OcoXO0/0szxunYKH8NhFpMW7cbwD9KYYqj45nxVyPlfYDYnts GsJFMZORegEzcoj/q92LW5Lo1QggAwIwCsZripDt31GfMkZLiicuqTyo9KfuzWep g8//N3Djs7Y8sX7FCpBlI3IDdbZkM+p6MCUfKIbORD0INReRuzrOpS8wtodvVurJ YYzwTbZNn232ww0FFGRtRUAga9uWbAQ= -----END CERTIFICATE-----Generated at Tue Sep 9 13:39:56 2025 by rpki-client