$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa File: 490e40f9-36a1-3d80-91b1-b67f36065073.roa (raw, json) Hash identifier: N7zlCsTogvUvbxPlPeWSy+XBi6XpRLxDeBCFyuI8lBE= Subject key identifier: 98:7A:35:13:5D:D7:83:5A:09:B3:12:70:D2:C6:8F:01:9E:C1:3F:56 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584B68FC9DD8172C8CA6E9D13100 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 54668 IP address blocks: 174.137.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9d:d8:17:2c:8c:a6:e9:d1:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=f77ab4b2-9822-4c7d-8d27-d5719e045b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:84:0d:47:bb:bb:66:2e:b1:9e:3e:d3:4f: 31:d4:d8:17:93:e6:0b:c1:ee:f5:e0:97:15:78:18: 21:fd:55:7f:51:bc:bf:95:d3:66:96:e2:b5:5e:8a: ff:e0:a0:b2:44:22:8d:bc:81:21:a9:0d:86:7c:b8: bf:c7:2e:9e:f5:36:5d:97:8d:e1:2e:7d:3b:48:78: 89:d2:d9:ac:79:13:97:71:51:48:fa:7d:98:15:b4: a5:2f:bc:ec:25:54:29:d5:61:cc:79:61:d6:cc:19: a8:cb:01:a5:50:96:4d:18:c2:21:af:30:58:cc:14: a1:87:67:1b:8e:e4:25:83:83:f0:73:c3:d9:10:81: e9:be:82:cf:3b:2a:a0:6a:86:28:e9:b0:be:3c:57: 44:cf:f2:07:9a:d9:26:00:51:52:07:9a:df:cd:4a: 04:94:58:e1:b6:ea:9e:1a:ba:23:72:aa:b5:3a:3d: c5:cc:d7:a0:fe:06:91:c9:ae:78:ff:29:68:82:6c: b9:1e:ac:07:68:67:fb:54:ce:ea:9d:98:94:16:a7: b9:c1:da:bd:43:a0:fb:18:ec:7a:60:f5:09:75:c0: cc:25:30:32:86:cb:05:af:ae:6f:46:f1:e4:b2:72: 9d:a2:47:0f:29:70:fa:88:30:c8:1a:4e:d7:5c:7a: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:35:13:5D:D7:83:5A:09:B3:12:70:D2:C6:8F:01:9E:C1:3F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1a:1c:ac:24:83:0b:a3:35:33:10:5e:02:24:7b:d7:f7:fc: 2a:b5:7d:c9:63:fd:cf:a4:24:06:a2:e0:b2:7e:0d:9d:cd:75: 73:cd:af:ef:2e:ef:a0:d9:6b:2d:6a:67:01:a5:23:bb:41:2a: f0:49:36:af:ec:ab:43:50:1a:2a:44:67:55:dd:7d:23:dc:65: 40:93:a9:ae:48:4e:15:bd:ae:06:9c:ac:a6:60:53:eb:6a:d6: 74:fb:93:9c:6a:a1:85:06:38:3c:d0:a9:cf:40:b5:c0:a3:0c: 6f:80:ce:12:d5:51:f4:55:b6:9d:a1:e1:26:0f:8e:55:86:0a: 4f:d8:7a:a8:40:af:3e:85:e3:d1:34:aa:fe:02:f6:8c:7d:73: 5f:50:fe:83:28:d6:02:0d:7c:e7:c8:d5:de:eb:8d:ca:00:0e: e7:4a:7f:32:32:49:3d:3d:ba:e6:44:7d:bf:a6:d6:10:39:84: ea:d2:82:df:51:69:fd:c1:87:86:44:ed:07:d0:e0:de:1a:27: bf:01:1e:12:76:e0:2e:b3:b0:0b:c3:c0:d5:ae:62:49:0b:ca: 5d:25:dc:2c:2c:11:32:e7:56:b6:15:d1:9b:d6:ed:b7:c7:a2: e8:92:72:5b:dd:50:20:c7:16:96:ca:c7:9b:2a:13:51:28:d0: fc:fa:cd:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J3YFyyMpunRMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk Zjc3YWI0YjItOTgyMi00YzdkLThkMjctZDU3MTllMDQ1YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/OEDUe7u2YusZ4+008x1NgXk+YLwe714JcV eBgh/VV/Uby/ldNmluK1Xor/4KCyRCKNvIEhqQ2GfLi/xy6e9TZdl43hLn07SHiJ 0tmseROXcVFI+n2YFbSlL7zsJVQp1WHMeWHWzBmoywGlUJZNGMIhrzBYzBShh2cb juQlg4Pwc8PZEIHpvoLPOyqgaoYo6bC+PFdEz/IHmtkmAFFSB5rfzUoElFjhtuqe Grojcqq1Oj3FzNeg/gaRya54/ylogmy5HqwHaGf7VM7qnZiUFqe5wdq9Q6D7GOx6 YPUJdcDMJTAyhssFr65vRvHksnKdokcPKXD6iDDIGk7XXHrvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh6NRNd14NaCbMScNLGjwGewT9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvNDkwZTQwZjktMzZhMS0z ZDgwLTkxYjEtYjY3ZjM2MDY1MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkaHKwkgwujNTMQXgIke9f3/Cq1fclj/c+kJAai4LJ+DZ3NdXPNr+8u 76DZay1qZwGlI7tBKvBJNq/sq0NQGipEZ1XdfSPcZUCTqa5IThW9rgacrKZgU+tq 1nT7k5xqoYUGODzQqc9AtcCjDG+AzhLVUfRVtp2h4SYPjlWGCk/YeqhArz6F49E0 qv4C9ox9c19Q/oMo1gINfOfI1d7rjcoADudKfzIyST09uuZEfb+m1hA5hOrSgt9R af3Bh4ZE7QfQ4N4aJ78BHhJ24C6zsAvDwNWuYkkLyl0l3CwsETLnVrYV0ZvW7bfH ouiSclvdUCDHFpbKx5sqE1Eo0Pz6zXk= -----END CERTIFICATE-----Generated at Thu Oct 9 03:52:54 2025 by rpki-client