$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa File: 4453567d-94a3-375d-9415-c8c1fdd02afd.roa (raw, json) Hash identifier: BZ8nK4y4/lDNWd1MaLHjFn+O3Jr+UbxrVgPHGowckhg= Subject key identifier: AE:42:84:94:9B:64:32:84:81:81:49:EE:FD:EC:A9:4E:D5:E8:CB:7D Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584B4617047CF2BA4BE22CF54380 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 401416 IP address blocks: 74.123.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:04:7c:f2:ba:4b:e2:2c:f5:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=8f80721e-f47e-4127-ae01-50b03c84f5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:d8:ae:f6:53:67:9f:ab:85:70:5d:35:34: af:0e:13:1d:5b:c6:80:d9:b4:a3:fc:36:6b:c2:6d: 54:4c:94:c4:94:54:fa:d9:57:47:34:5c:5a:82:9c: e7:00:55:f7:04:fb:cd:9a:31:ea:2c:f0:2f:1e:ef: 04:40:47:98:99:6d:4d:dd:30:cb:0d:5b:fe:f8:5e: ab:93:f5:5c:f4:62:a0:f2:14:0e:e6:21:85:0d:20: b2:90:50:ca:70:0c:05:1a:96:18:be:c8:a6:5b:37: f0:36:3e:75:c7:5f:a8:ac:d2:28:00:ca:27:6c:3e: cd:e5:23:f0:b9:b1:12:2b:2a:b7:60:c1:96:6f:fd: 1f:96:f1:4a:41:52:2d:6e:64:97:ee:de:63:27:7b: 2d:aa:51:f9:60:1a:09:bb:aa:a4:56:0c:b9:86:1d: 79:e4:fc:36:b6:3f:48:a2:e6:97:a8:c2:7e:b0:fd: 3d:bd:e3:89:a5:15:1e:da:2a:e0:85:b9:9d:a9:88: bd:d7:c6:c7:b9:08:cc:5e:a5:b6:86:07:8e:a5:ea: 0d:b6:a1:92:71:59:05:8a:f0:70:6d:8b:9d:10:d0: 19:d2:f1:91:73:4f:8d:c8:68:71:a7:1e:12:d4:90: 1d:18:05:f7:ba:a2:61:bd:c8:c8:ea:d5:db:0d:29: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:42:84:94:9B:64:32:84:81:81:49:EE:FD:EC:A9:4E:D5:E8:CB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 74.123.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ae:fc:98:7d:90:57:e4:f5:d9:62:9f:5e:40:90:bd:02:91: de:f7:14:03:d6:d5:40:d2:2f:ec:04:4c:cf:7a:35:78:bf:13: 76:ed:6a:33:2c:2c:a6:47:63:36:ce:f7:6d:39:9f:c5:93:c3: 4c:62:f9:9c:10:ac:b5:54:0c:67:25:b4:29:ca:67:bb:c1:3d: 22:e0:78:4c:43:9d:82:25:e1:e1:19:5e:83:5b:ce:72:2d:f2: 7f:c0:d5:ce:1a:7b:69:25:a0:b7:46:32:e7:88:ea:2f:4d:77: 10:a4:4d:02:54:6d:f6:f9:1e:c8:a0:22:8d:0f:59:09:2a:33: 9e:4a:2c:c5:06:dc:16:77:cb:a0:d1:a9:a4:9d:2a:e1:49:fa: ca:c1:28:82:03:76:c0:93:f1:7b:4f:95:b5:65:86:ad:ed:00: 21:37:f4:dc:40:fd:8b:cd:36:59:dc:53:09:6b:b8:97:a3:9b: d1:92:fd:52:ef:42:c6:f8:fb:66:bc:87:eb:a4:8e:87:51:70: 1b:b7:82:a5:b0:7e:40:4c:c0:57:e1:0a:45:e5:cf:e4:8a:17: 27:f4:fe:0e:07:93:d6:c7:6b:20:bb:1c:7c:a6:df:2c:02:81: 38:d3:f2:b3:d2:32:36:e0:e3:13:02:5e:6d:e1:42:d3:30:84: c1:ba:52:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwR88rpL4iz1Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGY4MDcyMWUtZjQ3ZS00MTI3LWFlMDEtNTBiMDNjODRmNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUDYrvZTZ5+rhXBdNTSvDhMdW8aA2bSj/DZr wm1UTJTElFT62VdHNFxagpznAFX3BPvNmjHqLPAvHu8EQEeYmW1N3TDLDVv++F6r k/Vc9GKg8hQO5iGFDSCykFDKcAwFGpYYvsimWzfwNj51x1+orNIoAMonbD7N5SPw ubESKyq3YMGWb/0flvFKQVItbmSX7t5jJ3stqlH5YBoJu6qkVgy5hh155Pw2tj9I ouaXqMJ+sP09veOJpRUe2irghbmdqYi918bHuQjMXqW2hgeOpeoNtqGScVkFivBw bYudENAZ0vGRc0+NyGhxpx4S1JAdGAX3uqJhvcjI6tXbDSkyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5ChJSbZDKEgYFJ7v3sqU7V6Mt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNDQ1MzU2N2QtOTRhMy0z NzVkLTk0MTUtYzhjMWZkZDAyYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESu/Jh9kFfk9dlin15AkL0Ckd73FAPW1UDSL+wETM96NXi/E3btajMs LKZHYzbO9205n8WTw0xi+ZwQrLVUDGcltCnKZ7vBPSLgeExDnYIl4eEZXoNbznIt 8n/A1c4ae2kloLdGMueI6i9NdxCkTQJUbfb5HsigIo0PWQkqM55KLMUG3BZ3y6DR qaSdKuFJ+srBKIIDdsCT8XtPlbVlhq3tACE39NxA/YvNNlncUwlruJejm9GS/VLv Qsb4+2a8h+ukjodRcBu3gqWwfkBMwFfhCkXlz+SKFyf0/g4Hk9bHayC7HHym3ywC gTjT8rPSMjbg4xMCXm3hQtMwhMG6UmM= -----END CERTIFICATE-----Generated at Thu Oct 9 01:24:11 2025 by rpki-client