$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa File: df882eef-1faf-3541-8255-366c9e2451b2.roa (raw, json) Hash identifier: VfaZ58ieru4yKNxxQenq5fJtnk+y9XjJlnd5UF60ijM= Subject key identifier: CD:0B:92:CF:35:14:93:08:DE:6E:ED:7E:CC:5C:A7:0B:5E:93:31:63 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A093AA01564BFD8A21A8216A0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 4213 IP address blocks: 174.139.126.0/23 maxlen: 24 174.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a0:15:64:bf:d8:a2:1a:82:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=44d08c0c-5667-4193-86b9-c26c50dc1e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e5:13:4e:f1:02:d6:4d:09:08:e1:89:27:6b: 4f:2d:f2:d5:0e:6a:f3:1a:b8:f6:fd:c6:6c:19:c8: 81:a7:1d:4a:21:21:2a:8c:40:8f:4c:6e:13:4e:e1: 44:f7:aa:0a:c1:65:e8:c3:59:2e:8c:95:70:9c:26: a0:1f:4f:ae:3e:0a:6d:45:86:1f:24:10:8d:d0:6a: d7:d0:86:c3:97:4c:48:5f:e3:95:7d:cc:42:9a:d4: f3:2c:fa:2c:32:47:7b:a8:7d:20:b5:b6:86:df:e2: bc:34:58:cd:03:ce:be:a2:d1:82:2a:d5:2a:d9:38: 26:fc:51:1b:b9:fe:50:77:5b:b5:a5:e2:5b:8e:af: 15:40:1a:81:9b:b8:3b:7d:9b:95:a9:5f:dc:cd:4f: 7b:d1:4d:83:1f:09:61:b9:21:e3:f4:ca:0c:e9:a1: 63:dd:df:6f:72:45:be:47:86:7e:c5:f2:fa:23:29: 3a:a5:d5:c1:55:0e:81:ec:15:41:7c:df:a5:ed:72: 80:75:7e:2b:fd:88:56:da:4a:33:44:f8:2f:18:90: 68:86:76:77:f3:67:9d:5e:c1:30:89:6f:4a:da:a1: 85:d6:88:e9:ea:ef:b4:0a:69:d3:cf:a4:e0:f6:44: ef:dd:1f:0b:ea:60:c0:63:b1:0a:b2:54:f5:c7:53: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0B:92:CF:35:14:93:08:DE:6E:ED:7E:CC:5C:A7:0B:5E:93:31:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.126.0/23 174.139.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2d:0a:a2:1d:54:b1:72:cf:a7:8a:c7:2e:72:ce:9a:01:b9: 27:51:7f:ff:34:d7:e2:bb:b7:13:d0:8b:e2:39:0f:58:69:cb: 17:ca:53:d1:f4:68:af:70:6c:69:22:f5:88:bc:11:65:c7:64: c5:ae:c6:79:cc:6f:71:2a:b4:11:88:36:52:c9:79:54:45:70: e6:9d:53:a3:64:6b:5c:45:e2:ee:64:cd:4c:56:d4:de:51:63: 5c:65:61:53:78:8a:64:7d:e8:ec:ba:8a:4b:7c:92:9f:6c:fb: 2a:e4:34:86:b7:8e:34:af:db:a5:6d:8a:65:86:a3:20:68:04: 54:2a:8a:20:25:e1:ec:54:62:d5:61:3e:c2:a1:2b:86:fd:93: b4:84:53:74:11:97:1e:31:30:61:b6:5c:ef:ac:1d:57:9d:d7: 46:04:48:f7:fe:df:17:10:d3:52:d4:46:d6:22:97:1d:46:56: 8a:c9:7b:6d:7f:1e:05:1f:ed:34:79:53:05:14:27:d5:d7:de: ea:0f:f1:9b:c2:58:29:ac:cc:4e:a3:0d:a1:41:0c:0f:85:28: a1:ab:f5:55:fe:7d:98:28:5f:53:e1:f7:70:bf:40:d6:a8:a7: 19:55:76:6a:13:2e:f8:36:d6:30:35:67:e5:e9:83:7c:49:19: b9:7a:7e:64 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoJOqAVZL/YohqCFqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NDRkMDhjMGMtNTY2Ny00MTkzLTg2YjktYzI2YzUwZGMxZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+UTTvEC1k0JCOGJJ2tPLfLVDmrzGrj2/cZs GciBpx1KISEqjECPTG4TTuFE96oKwWXow1kujJVwnCagH0+uPgptRYYfJBCN0GrX 0IbDl0xIX+OVfcxCmtTzLPosMkd7qH0gtbaG3+K8NFjNA86+otGCKtUq2Tgm/FEb uf5Qd1u1peJbjq8VQBqBm7g7fZuVqV/czU970U2DHwlhuSHj9MoM6aFj3d9vckW+ R4Z+xfL6Iyk6pdXBVQ6B7BVBfN+l7XKAdX4r/YhW2kozRPgvGJBohnZ382edXsEw iW9K2qGF1ojp6u+0CmnTz6Tg9kTv3R8L6mDAY7EKslT1x1NcdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM0Lks81FJMI3m7tfsxcpwtekzFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZGY4ODJlZWYtMWZhZi0z NTQxLTgyNTUtMzY2YzllMjQ1MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrot+AwQA rouJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIAtCqIdVLFyz6eKxy5yzpoBuSdRf/801+K7txPQi+I5D1hp yxfKU9H0aK9wbGki9Yi8EWXHZMWuxnnMb3EqtBGINlLJeVRFcOadU6Nka1xF4u5k zUxW1N5RY1xlYVN4imR96Oy6ikt8kp9s+yrkNIa3jjSv26VtimWGoyBoBFQqiiAl 4exUYtVhPsKhK4b9k7SEU3QRlx4xMGG2XO+sHVed10YESPf+3xcQ01LURtYilx1G VorJe21/HgUf7TR5UwUUJ9XX3uoP8ZvCWCmszE6jDaFBDA+FKKGr9VX+fZgoX1Ph 93C/QNaopxlVdmoTLvg21jA1Z+Xpg3xJGbl6fmQ= -----END CERTIFICATE-----Generated at Sun Jun 15 20:40:20 2025 by rpki-client