$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa File: afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa (raw, json) Hash identifier: tKm/ihFCxXdy50hNcmcoAP/lqEjbR3BjyQWxp1JHE40= Subject key identifier: 56:96:24:4F:19:D4:4A:AA:9D:30:BF:E5:DC:90:64:80:45:13:F3:5E Certificate issuer: /CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Certificate serial: 010D0C9F4328584B0A115E51A669782AB94FA880 Authority key identifier: 7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 8075 IP address blocks: 74.80.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5e:51:a6:69:78:2a:b9:4f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=74586019-3b08-482a-82f2-c624c934b321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:67:e8:bf:68:80:86:28:b3:5f:79:5e:4f: 35:ce:b9:c8:84:3d:b1:c1:e7:dd:a5:d5:64:4d:67: b0:4a:86:4a:e2:e3:3e:db:bc:ea:c0:26:08:d2:ca: 60:67:c3:0c:20:96:9f:e5:68:aa:10:e8:b8:ce:a3: 8c:44:51:cf:7e:fc:07:99:72:c7:a2:9f:c4:e3:6b: f6:a8:31:e2:4b:bf:97:49:85:e5:c7:6b:8f:70:98: 8d:82:dd:48:af:41:ae:06:b3:7e:1d:f6:0f:72:65: 9e:09:97:5a:99:c1:93:b7:98:66:16:28:62:db:a4: 92:30:02:9d:2d:cb:5f:1d:17:27:53:12:40:ab:60: b0:86:a4:43:0e:a4:85:8c:96:7f:36:0e:54:d9:f9: 96:3a:df:42:b6:da:fa:18:ed:91:a1:89:09:ff:55: 28:26:46:58:fe:00:dc:ed:8c:32:72:d7:47:e4:6e: 5b:c3:67:1f:c1:5b:19:48:66:d8:9b:44:31:ae:8c: 6c:f8:71:13:42:e7:41:a1:03:4b:68:90:05:60:ca: 6f:6b:15:66:a7:f2:00:21:94:c6:c0:82:3a:2d:e2: 8e:b3:95:62:55:d0:f1:3d:f5:71:0e:c1:4d:f1:f2: d4:5b:d2:93:e5:d3:5d:79:83:63:20:76:88:ab:c7: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:96:24:4F:19:D4:4A:AA:9D:30:BF:E5:DC:90:64:80:45:13:F3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl X509v3 Authority Key Identifier: keyid:7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer sbgp-ipAddrBlock: critical IPv4: 74.80.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:20:5b:a0:a6:26:58:f3:40:b4:93:5b:02:e4:53:ad:fa:7f: 25:88:1c:67:2f:37:65:f8:0f:37:d1:59:33:56:cb:12:da:d1: c6:4f:ea:a4:58:d8:aa:5a:6d:c2:8c:ec:cb:9a:5f:17:1f:b0: 08:05:8c:e9:8b:23:94:70:cc:fb:7e:5a:b9:a5:80:bb:a0:d8: 9d:c9:e2:ca:84:fe:2b:69:06:d5:ad:bd:08:83:ae:50:55:08: 3f:94:4c:a4:cc:82:8a:b0:75:fb:09:d3:bf:8c:bb:d9:b1:fa: 63:46:49:b7:e1:2d:6e:70:bf:a8:98:94:bc:97:3d:4b:3e:22: 60:fe:1d:64:11:bd:24:78:99:60:d7:c7:aa:e1:84:b7:34:92: 25:97:30:d9:16:a4:3c:09:4d:ba:5b:1f:84:4d:d3:76:5d:e3: ad:aa:f7:b7:c0:00:46:1a:4e:02:82:69:57:48:20:e7:c6:a2: 22:09:8a:d8:c0:40:ad:93:8f:f3:ab:b8:21:a4:48:05:d3:e2: eb:93:4e:ff:13:df:6e:eb:c6:b4:c0:ba:fb:f9:9b:12:20:58: 80:1d:bd:50:44:96:83:bd:aa:02:88:56:c0:7d:ce:84:4f:83: ec:cb:6f:43:10:7f:41:26:51:57:cd:5e:e7:bf:30:67:84:fa: 8d:5d:9d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEV5Rpml4KrlPqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU1OGZlODMtNjBlMy00MjNhLWI4MjMtYzNjMjRiOWE2 MGRkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NzQ1ODYwMTktM2IwOC00ODJhLTgyZjItYzYyNGM5MzRiMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrJn6L9ogIYos195Xk81zrnIhD2xwefdpdVk TWewSoZK4uM+27zqwCYI0spgZ8MMIJaf5WiqEOi4zqOMRFHPfvwHmXLHop/E42v2 qDHiS7+XSYXlx2uPcJiNgt1Ir0GuBrN+HfYPcmWeCZdamcGTt5hmFihi26SSMAKd LctfHRcnUxJAq2CwhqRDDqSFjJZ/Ng5U2fmWOt9Cttr6GO2RoYkJ/1UoJkZY/gDc 7YwyctdH5G5bw2cfwVsZSGbYm0Qxroxs+HETQudBoQNLaJAFYMpvaxVmp/IAIZTG wII6LeKOs5ViVdDxPfVxDsFN8fLUW9KT5dNdeYNjIHaIq8eS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaWJE8Z1EqqnTC/5dyQZIBFE/NeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4 ZmU4My02MGUzLTQyM2EtYjgyMy1jM2MyNGI5YTYwZGQvYWZlNTRlODMtY2QwZi0z OGE0LTgwNjktNGEwZWFjM2M2MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU1OGZlODMtNjBlMy00MjNhLWI4 MjMtYzNjMjRiOWE2MGRkL2I1NThmZTgzLTYwZTMtNDIzYS1iODIzLWMzYzI0Yjlh NjBkZC5jcmwwHwYDVR0jBBgwFoAUfNuurgigkqgxUlUmvivhB0Plm8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4ZmU4My02MGUzLTQyM2EtYjgyMy1jM2My NGI5YTYwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlDlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIgW6CmJljzQLSTWwLkU636fyWIHGcvN2X4DzfRWTNWyxLa0cZP6qRY 2KpabcKM7MuaXxcfsAgFjOmLI5RwzPt+WrmlgLug2J3J4sqE/itpBtWtvQiDrlBV CD+UTKTMgoqwdfsJ07+Mu9mx+mNGSbfhLW5wv6iYlLyXPUs+ImD+HWQRvSR4mWDX x6rhhLc0kiWXMNkWpDwJTbpbH4RN03Zd462q97fAAEYaTgKCaVdIIOfGoiIJitjA QK2Tj/OruCGkSAXT4uuTTv8T327rxrTAuvv5mxIgWIAdvVBEloO9qgKIVsB9zoRP g+zLb0MQf0EmUVfNXue/MGeE+o1dnaM= -----END CERTIFICATE-----Generated at Sat Oct 11 04:28:18 2025 by rpki-client