$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35766664-0ec1-32b3-ad03-dec27e97baba.roa File: 35766664-0ec1-32b3-ad03-dec27e97baba.roa (raw, json) Hash identifier: SG+5i/1B/rJl3ZQCnt78QIA24t0d3hd2S5IBD2Wgj4A= Subject key identifier: 98:CF:76:2E:F5:58:AB:1F:F1:89:89:75:E7:67:4C:3A:9C:12:06:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2B91986AC994177AEF4FBC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35766664-0ec1-32b3-ad03-dec27e97baba.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 27338 IP address blocks: 74.11.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:98:6a:c9:94:17:7a:ef:4f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=8e2098c8-46ce-490b-b348-b3844596887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:e1:5b:0b:8c:e9:b2:85:e5:70:63:78:72: 14:f0:15:99:31:8b:1b:06:41:4c:ae:c1:74:0b:86: e3:54:b9:56:d7:8d:4e:b0:d3:1c:53:c0:af:de:c9: fa:21:d1:ae:83:22:11:77:c7:77:23:7e:0e:f4:82: 7d:ac:e9:e1:0e:76:f5:7f:e0:37:5d:7b:e7:2d:80: f4:80:f3:2a:c4:61:f5:22:3c:0a:33:61:19:1b:e3: eb:32:09:71:68:38:63:9a:ad:d4:03:c0:75:0e:ac: 70:d3:64:d9:60:02:e5:b2:56:05:9f:a4:30:7b:16: 79:09:57:8b:ee:13:36:73:ec:16:aa:60:42:ad:ce: f3:27:64:fc:df:a9:5a:f9:b6:62:53:b1:c6:07:b8: 6d:fc:f7:f2:be:68:53:91:d2:45:66:59:fb:6f:f2: 62:0e:97:ff:ae:eb:8f:25:9c:c2:bc:af:71:d3:bc: 7b:32:1b:27:40:c0:4a:ee:44:d0:b5:d8:28:58:1d: 2a:b6:37:a3:c7:e9:f2:52:c3:e3:16:f5:2b:af:35: 65:79:d5:e9:5f:45:5e:4e:3b:44:44:2b:4d:2f:10: 70:21:05:0b:8d:99:c8:7f:aa:fa:e1:21:e4:ce:d2: 45:75:95:eb:65:79:22:f8:1e:71:6e:8c:ba:97:9c: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CF:76:2E:F5:58:AB:1F:F1:89:89:75:E7:67:4C:3A:9C:12:06:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35766664-0ec1-32b3-ad03-dec27e97baba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.11.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:51:31:2c:49:eb:f8:71:df:b0:83:3b:fd:31:e5:a5:d1:d9: 13:94:31:73:20:ca:54:0a:ec:b6:77:dc:30:fd:72:eb:53:c5: ce:93:e2:82:d4:7f:ba:9f:36:2b:88:54:97:87:fc:ac:c2:e4: 3a:18:52:7b:2e:0b:1e:15:12:e3:dd:e1:7e:9c:8d:f7:2f:24: 00:3a:b6:07:09:8c:d5:6b:7e:a4:d4:41:d0:7d:c6:5c:e1:6a: 01:46:8c:53:3b:42:59:53:6b:a2:de:0f:8e:04:40:e8:f8:c7: 61:dd:48:62:9a:96:99:d5:ee:9e:f4:64:54:c9:1f:b3:f8:64: 6f:06:43:b8:25:3d:a5:04:5a:3d:6b:60:b3:41:0d:df:88:84: 7c:07:04:7f:ef:83:0a:72:cf:32:33:89:2f:3a:87:a1:f4:81: 2d:57:9e:03:c9:a9:9f:8f:34:67:32:01:33:34:50:d6:cb:8f: ae:65:c1:7e:07:de:ab:17:12:22:c2:70:2c:5a:6f:fe:47:7c: 84:d0:74:98:ed:23:53:31:78:7e:2a:f2:2d:62:7c:a1:14:85: c0:bd:de:46:d8:70:e0:9e:03:af:87:4d:8d:d0:1f:cc:e4:c0: 02:2b:7d:7d:92:2f:fa:20:63:39:5d:4e:01:8e:a0:fe:f2:52: 88:90:b3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZhqyZQXeu9PvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk OGUyMDk4YzgtNDZjZS00OTBiLWIzNDgtYjM4NDQ1OTY4ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf/hWwuM6bKF5XBjeHIU8BWZMYsbBkFMrsF0 C4bjVLlW141OsNMcU8Cv3sn6IdGugyIRd8d3I34O9IJ9rOnhDnb1f+A3XXvnLYD0 gPMqxGH1IjwKM2EZG+PrMglxaDhjmq3UA8B1Dqxw02TZYALlslYFn6QwexZ5CVeL 7hM2c+wWqmBCrc7zJ2T836la+bZiU7HGB7ht/PfyvmhTkdJFZln7b/JiDpf/ruuP JZzCvK9x07x7MhsnQMBK7kTQtdgoWB0qtjejx+nyUsPjFvUrrzVledXpX0VeTjtE RCtNLxBwIQULjZnIf6r64SHkztJFdZXrZXki+B5xboy6l5xGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjPdi71WKsf8YmJdednTDqcEga/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU3NjY2NjQtMGVjMS0z MmIzLWFkMDMtZGVjMjdlOTdiYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERRMSxJ6/hx37CDO/0x5aXR2ROUMXMgylQK7LZ33DD9cutTxc6T4oLU f7qfNiuIVJeH/KzC5DoYUnsuCx4VEuPd4X6cjfcvJAA6tgcJjNVrfqTUQdB9xlzh agFGjFM7QllTa6LeD44EQOj4x2HdSGKalpnV7p70ZFTJH7P4ZG8GQ7glPaUEWj1r YLNBDd+IhHwHBH/vgwpyzzIziS86h6H0gS1XngPJqZ+PNGcyATM0UNbLj65lwX4H 3qsXEiLCcCxab/5HfITQdJjtI1MxeH4q8i1ifKEUhcC93kbYcOCeA6+HTY3QH8zk wAIrfX2SL/ogYzldTgGOoP7yUoiQs8Q= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:00 2025 by rpki-client