$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa File: b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa (raw, json) Hash identifier: YQgSB1pWOD+V3rhUpvabXFsp6m3UwZ/5nXuQLUbJrxk= Subject key identifier: 10:5B:51:87:5A:0C:1C:8F:2D:65:0E:2F:89:A7:C2:B1:17:22:FC:CC Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B07430022F5B85038E0FD80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 74.124.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:43:00:22:f5:b8:50:38:e0:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=5ef276f4-5519-40a5-9d90-28adea32a1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:86:5d:2b:2e:25:67:3a:94:b6:12:b9:3a: 83:08:d0:f8:e8:cb:fd:33:a5:0d:a6:9c:48:0f:fc: 0d:c7:0d:c1:62:11:58:2b:5f:71:f9:fa:e1:73:7c: 79:f6:7f:84:f4:49:66:c8:82:37:fe:2d:35:fc:1f: ed:53:81:62:0f:95:2c:77:11:47:7b:67:3d:5b:04: f3:c3:93:38:2b:44:21:91:fd:4a:96:46:58:12:55: a6:1c:4f:a4:92:11:b5:57:33:01:5a:9b:3c:21:c6: d3:62:91:57:20:f7:8e:1a:f7:25:83:1d:33:75:5a: db:7d:2f:9c:e1:f7:61:f3:a6:17:cb:ed:2c:f1:74: 57:35:de:3b:38:80:05:3f:74:70:48:49:2d:42:ce: e4:24:1f:ce:8b:f5:6a:82:de:d1:3e:dd:17:83:f1: 78:78:b6:22:3f:23:81:de:e4:48:56:c9:66:b4:65: 11:2f:12:19:05:d6:fe:3f:d7:b5:1e:93:0c:85:92: bb:55:d6:dd:18:10:32:e7:9d:8a:35:45:2b:17:15: 1c:42:cb:d2:5d:af:ad:05:a2:63:e1:a9:f5:cd:6c: 8d:eb:0a:ab:1e:89:13:3b:56:57:3d:04:b7:07:95: 2d:f5:88:12:bd:f0:1e:e0:65:f0:ec:1b:6b:0f:d1: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:51:87:5A:0C:1C:8F:2D:65:0E:2F:89:A7:C2:B1:17:22:FC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 74.124.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b6:f5:b4:79:63:0a:8a:99:01:8a:2f:e7:ac:cf:f6:10:5a: 0b:90:4c:81:fa:e0:ce:43:55:2e:e6:e4:25:1d:6e:58:6f:37: d8:e4:a2:09:fa:ea:70:85:00:aa:dd:b1:67:8a:41:d3:e6:b1: 44:72:12:b0:70:ff:6f:27:75:e3:dd:15:96:78:f9:fb:51:f5: 43:86:32:03:2d:09:9f:d9:b6:3d:9a:08:2c:0a:32:a6:03:17: cf:53:8e:b7:fa:66:52:61:31:19:73:7b:4f:df:1a:e9:3a:30: a1:f8:a9:47:7c:3f:81:4f:fc:9b:fc:1b:92:bb:53:13:37:6e: f8:4f:70:57:55:e8:5f:55:26:ec:a5:c6:4d:4c:38:81:93:d3: 98:2e:03:18:56:c5:ac:2e:75:64:a8:eb:a1:cb:99:a8:ee:58: 99:54:9b:49:6d:01:4b:b3:bb:16:cb:2a:a0:6e:19:1c:65:f2: fe:81:cd:4f:b5:56:31:c2:e5:63:15:08:f9:02:2b:54:8a:a0: 88:d6:7e:46:97:f7:74:ca:f5:24:b5:34:f9:a5:cc:e5:fe:72: c6:2b:69:53:4f:84:db:7b:43:6e:e9:8c:52:63:37:d8:66:3f: f8:ce:b6:ba:69:44:f2:37:d5:40:d7:9e:3e:a3:9d:7a:d4:c4: 12:f2:87:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0MAIvW4UDjg/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NWVmMjc2ZjQtNTUxOS00MGE1LTlkOTAtMjhhZGVhMzJhMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicuGXSsuJWc6lLYSuTqDCND46Mv9M6UNppxI D/wNxw3BYhFYK19x+frhc3x59n+E9ElmyII3/i01/B/tU4FiD5UsdxFHe2c9WwTz w5M4K0Qhkf1KlkZYElWmHE+kkhG1VzMBWps8IcbTYpFXIPeOGvclgx0zdVrbfS+c 4fdh86YXy+0s8XRXNd47OIAFP3RwSEktQs7kJB/Oi/Vqgt7RPt0Xg/F4eLYiPyOB 3uRIVslmtGURLxIZBdb+P9e1HpMMhZK7VdbdGBAy552KNUUrFxUcQsvSXa+tBaJj 4an1zWyN6wqrHokTO1ZXPQS3B5Ut9YgSvfAe4GXw7BtrD9EvYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBbUYdaDByPLWUOL4mnwrEXIvzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYjJhMmUxN2MtYzc2OC0z ZDc4LWEzOGEtMGY1NjdjZjEyNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS29bR5YwqKmQGKL+esz/YQWguQTIH64M5DVS7m5CUdblhvN9jkogn6 6nCFAKrdsWeKQdPmsURyErBw/28ndePdFZZ4+ftR9UOGMgMtCZ/Ztj2aCCwKMqYD F89Tjrf6ZlJhMRlze0/fGuk6MKH4qUd8P4FP/Jv8G5K7UxM3bvhPcFdV6F9VJuyl xk1MOIGT05guAxhWxawudWSo66HLmajuWJlUm0ltAUuzuxbLKqBuGRxl8v6BzU+1 VjHC5WMVCPkCK1SKoIjWfkaX93TK9SS1NPmlzOX+csYraVNPhNt7Q27pjFJjN9hm P/jOtrppRPI31UDXnj6jnXrUxBLyh5o= -----END CERTIFICATE-----Generated at Sat Oct 11 05:04:00 2025 by rpki-client