$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa File: fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa (raw, json) Hash identifier: NNI6TKH06Sk0w9EGY/vA7qmEJFC0FXTsK3iaEh9Wbtw= Subject key identifier: 80:79:A9:2E:50:F3:8D:87:3F:9B:31:6F:27:97:9F:94:7B:2F:C9:D7 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F374D2945072DDFC6DD08E880 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11051 IP address blocks: 174.139.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:29:45:07:2d:df:c6:dd:08:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=662a1d6b-4783-46bc-97b4-3795d6ac818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f1:d5:f1:0c:22:bc:91:90:db:a4:cb:90:1a: 8e:4b:7a:8c:50:d5:18:5f:ff:b4:b0:a3:69:81:11: a6:d7:34:e5:d7:80:62:5c:69:a7:9e:d7:58:89:16: 0a:69:be:9e:d3:2b:6a:e7:4e:13:5c:bd:31:8e:47: bf:fd:07:52:d4:0e:30:36:fe:b0:42:c7:21:77:4a: fe:0d:aa:b0:be:03:4a:cb:ca:ce:11:81:67:d4:d2: af:ad:9d:03:81:2e:b5:4b:56:48:3e:9b:f6:e7:43: 57:71:56:ec:1d:c3:bb:2e:d3:94:73:67:32:e3:45: 77:85:a9:bc:58:8c:3b:a2:6a:9b:94:ba:f7:27:ec: 74:e0:6c:1c:86:31:65:ee:f7:9c:1b:30:0d:8a:f9: ec:e7:cb:ff:ea:4a:3d:16:98:eb:14:2f:42:0b:a7: cf:e6:73:fe:17:42:db:60:2f:12:51:ca:54:65:48: 90:66:02:ff:af:b2:fc:77:66:7e:cc:f5:98:2f:d2: 8d:3c:5c:9d:f6:4d:0e:61:93:b1:d6:61:dc:0b:df: 5b:4a:31:25:04:b5:24:27:e2:22:c6:a4:69:84:3f: b4:e7:c4:fb:e5:f1:6d:57:05:45:bc:bf:f8:e7:95: 0b:0b:29:91:d3:92:16:76:6f:77:4b:7a:12:f7:6a: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:A9:2E:50:F3:8D:87:3F:9B:31:6F:27:97:9F:94:7B:2F:C9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/fc523ce4-a6f4-3e53-a48b-138e5ab5098a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:42:af:4d:4e:1c:94:3e:35:94:1e:3d:d9:f8:14:15:f8:01: 43:4c:07:db:e6:82:d7:44:0b:28:c9:56:22:ea:8b:50:69:c2: c0:7d:86:7a:0b:11:69:ba:aa:a1:af:2e:ef:c2:08:c3:a8:14: 29:2f:ed:4a:fe:8a:e3:95:c9:cb:8c:a6:55:01:2c:c7:42:e7: 04:a5:16:e6:40:66:c5:e6:09:7b:6d:0d:10:b4:37:a2:01:f9: c8:de:a4:f5:bc:9f:e6:d1:22:6f:b7:7c:a7:b3:23:14:0c:ff: e7:1b:b4:f5:31:77:74:9b:35:37:53:a9:af:c3:ea:ca:f7:c2: e4:c7:c8:c5:b7:db:6e:ad:1a:a4:7c:77:e3:48:2d:81:ed:56: 4d:2a:05:d0:92:60:ea:bd:1a:9f:18:4a:f9:83:5d:d8:ef:b1: 1a:c6:5b:d1:57:e3:7a:9f:ab:a6:69:13:ad:16:e0:2e:10:10: 5d:14:15:14:09:82:7b:74:ac:16:92:d2:3c:96:18:9a:23:0e: 0b:fa:ba:74:0b:94:ad:24:f8:54:63:cb:63:26:08:82:1a:1d: 17:4b:e6:eb:b3:bf:fa:21:05:fe:26:8e:c2:24:cf:1b:cc:36: c1:30:96:e1:15:a2:a4:f6:bf:fe:70:6c:08:87:7f:f1:5d:5f: b4:5c:f3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSlFBy3fxt0I6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NjYyYTFkNmItNDc4My00NmJjLTk3YjQtMzc5NWQ2YWM4MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPHV8QwivJGQ26TLkBqOS3qMUNUYX/+0sKNp gRGm1zTl14BiXGmnntdYiRYKab6e0ytq504TXL0xjke//QdS1A4wNv6wQschd0r+ DaqwvgNKy8rOEYFn1NKvrZ0DgS61S1ZIPpv250NXcVbsHcO7LtOUc2cy40V3ham8 WIw7omqblLr3J+x04GwchjFl7vecGzANivns58v/6ko9FpjrFC9CC6fP5nP+F0Lb YC8SUcpUZUiQZgL/r7L8d2Z+zPWYL9KNPFyd9k0OYZOx1mHcC99bSjElBLUkJ+Ii xqRphD+058T75fFtVwVFvL/455ULCymR05IWdm93S3oS92pRcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB5qS5Q842HP5sxbyeXn5R7L8nXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZmM1MjNjZTQtYTZmNC0z ZTUzLWE0OGItMTM4ZTVhYjUwOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArosBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVCr01OHJQ+NZQePdn4FBX4AUNMB9vmgtdECyjJViLqi1BpwsB9hnoL EWm6qqGvLu/CCMOoFCkv7Ur+iuOVycuMplUBLMdC5wSlFuZAZsXmCXttDRC0N6IB +cjepPW8n+bRIm+3fKezIxQM/+cbtPUxd3SbNTdTqa/D6sr3wuTHyMW3226tGqR8 d+NILYHtVk0qBdCSYOq9Gp8YSvmDXdjvsRrGW9FX43qfq6ZpE60W4C4QEF0UFRQJ gnt0rBaS0jyWGJojDgv6unQLlK0k+FRjy2MmCIIaHRdL5uuzv/ohBf4mjsIkzxvM NsEwluEVoqT2v/5wbAiHf/FdX7Rc83M= -----END CERTIFICATE-----Generated at Mon Sep 21 14:01:27 2026 by rpki-client