$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/2bac16fb-ec7a-3e44-8888-7439b247143e.roa File: 2bac16fb-ec7a-3e44-8888-7439b247143e.roa (raw, json) Hash identifier: ZhiZP+51Ri8XhdAxz6seOlzs2lnthbZElyqKnUK69ek= Subject key identifier: 67:22:91:E4:EC:F0:61:C7:40:B3:39:F9:D8:97:35:E2:9B:AC:C6:95 Certificate issuer: /CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90 Certificate serial: 010D0C9F4328584B8076C7D2E8D6663F61AC8400 Authority key identifier: C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/2bac16fb-ec7a-3e44-8888-7439b247143e.roa Signing time: Sun 12 Oct 2025 22:50:30 +0000 ROA not before: Sun 12 Oct 2025 22:50:30 +0000 ROA not after: Sat 10 Jan 2026 23:50:30 +0000 asID: 401650 IP address blocks: 74.115.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:76:c7:d2:e8:d6:66:3f:61:ac:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90 Validity Not Before: Oct 12 22:50:30 2025 GMT Not After : Jan 10 23:50:30 2026 GMT Subject: CN=63f534c5-1eb7-4792-9491-f5eaf77c77bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:29:2e:95:35:0a:0c:6b:53:d7:94:2e:61: ba:62:bb:8b:c7:99:20:44:2b:4b:2a:07:39:9b:2c: ec:c0:90:da:cf:0b:46:98:a7:19:12:fc:7c:01:77: ba:1f:c7:f5:48:bc:89:62:7f:d3:d9:4a:5e:2d:0c: f7:72:fe:45:82:9f:c1:69:c1:15:e6:21:c5:0e:f2: 76:cd:d8:36:3f:76:44:86:7f:74:06:63:8f:00:06: 83:ca:f7:ab:a1:f3:34:47:57:d0:97:58:fd:d7:3f: 73:70:db:9c:70:8b:ef:8c:51:1b:a6:17:81:24:bb: 68:0a:88:49:21:8d:14:b1:92:78:ab:61:91:82:d7: fe:2d:79:d5:b9:4f:53:23:ca:88:e9:99:80:2b:ae: 30:b3:46:f9:4b:97:40:7c:4a:62:10:b9:23:e0:f6: 2b:34:fd:d4:4b:c1:2d:33:9d:4a:45:51:d0:e0:2f: 60:74:47:b6:a8:36:82:c1:07:4a:43:2b:ac:51:6e: ba:86:0e:39:86:14:af:99:21:bd:fd:be:a8:a5:90: 7e:21:0d:8b:4f:1e:d7:0c:e1:dc:1e:72:be:ea:32: 06:3f:bc:c6:bc:e8:ca:d0:e2:4b:39:f4:48:e4:30: bd:0b:74:60:d3:c5:a7:9d:f8:d9:4b:63:f7:3e:c6: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:91:E4:EC:F0:61:C7:40:B3:39:F9:D8:97:35:E2:9B:AC:C6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/2bac16fb-ec7a-3e44-8888-7439b247143e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl X509v3 Authority Key Identifier: keyid:C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer sbgp-ipAddrBlock: critical IPv4: 74.115.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f3:74:0c:79:ac:d5:bb:a7:a2:13:09:57:fc:e5:93:e1:df: 4c:c4:4f:e8:84:08:86:50:85:a3:77:de:7f:0a:60:e9:f1:81: 4f:79:81:84:e0:0d:f5:4b:d0:73:9c:79:6c:1b:a3:41:47:a9: 20:0b:4a:b2:47:23:6e:5c:27:d0:5e:db:12:e6:ce:bf:43:bb: ec:74:5f:bd:a5:da:3a:0d:13:57:69:e4:3d:2e:d9:8d:10:aa: f5:d0:d8:72:bf:45:12:f3:46:28:43:1a:e5:b9:10:58:37:16: 1a:e9:0f:7d:5b:da:e0:e5:d0:00:83:ee:5a:ff:c0:e0:34:50: 15:e5:78:1c:51:64:5b:59:e7:e7:2b:86:d9:6f:1d:02:c5:65: 52:2d:03:df:84:69:98:c5:5a:1c:15:9d:3e:23:a1:56:3e:4e: 8d:e1:9d:e3:79:11:52:ca:6b:3a:a1:e4:c2:50:b5:d7:5a:bc: 28:1a:a6:2d:a2:e7:bf:4d:71:48:47:d4:0f:c2:9d:99:0f:eb: 65:73:bf:77:0b:a4:b2:3e:43:db:94:3a:5f:e8:22:df:ad:3d: 07:8b:4d:ce:83:32:23:2e:f1:5c:3c:b5:d3:0b:07:2c:20:28: 74:cc:89:53:ee:1c:a9:16:24:43:88:28:f6:c5:ef:8c:2b:29: 6d:52:a1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAdsfS6NZmP2GshAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIxYTMzZDQtOWU4Yy00NjViLTg2ZDYtYWIwYjEzN2Nh ZTkwMB4XDTI1MTAxMjIyNTAzMFoXDTI2MDExMDIzNTAzMFowLzEtMCsGA1UEAxMk NjNmNTM0YzUtMWViNy00NzkyLTk0OTEtZjVlYWY3N2M3N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+spLpU1CgxrU9eULmG6YruLx5kgRCtLKgc5 myzswJDazwtGmKcZEvx8AXe6H8f1SLyJYn/T2UpeLQz3cv5Fgp/BacEV5iHFDvJ2 zdg2P3ZEhn90BmOPAAaDyverofM0R1fQl1j91z9zcNuccIvvjFEbpheBJLtoCohJ IY0UsZJ4q2GRgtf+LXnVuU9TI8qI6ZmAK64ws0b5S5dAfEpiELkj4PYrNP3US8Et M51KRVHQ4C9gdEe2qDaCwQdKQyusUW66hg45hhSvmSG9/b6opZB+IQ2LTx7XDOHc HnK+6jIGP7zGvOjK0OJLOfRI5DC9C3Rg08WnnfjZS2P3Psa2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcikeTs8GHHQLM5+diXNeKbrMaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YjFh MzNkNC05ZThjLTQ2NWItODZkNi1hYjBiMTM3Y2FlOTAvMmJhYzE2ZmItZWM3YS0z ZTQ0LTg4ODgtNzQzOWIyNDcxNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGIxYTMzZDQtOWU4Yy00NjViLTg2 ZDYtYWIwYjEzN2NhZTkwLzRiMWEzM2Q0LTllOGMtNDY1Yi04NmQ2LWFiMGIxMzdj YWU5MC5jcmwwHwYDVR0jBBgwFoAUx+B1/O35S86QXAHOJypDPVW/10YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YjFhMzNkNC05ZThjLTQ2NWItODZkNi1hYjBi MTM3Y2FlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbzdAx5rNW7p6ITCVf85ZPh30zET+iECIZQhaN33n8KYOnxgU95gYTg DfVL0HOceWwbo0FHqSALSrJHI25cJ9Be2xLmzr9Du+x0X72l2joNE1dp5D0u2Y0Q qvXQ2HK/RRLzRihDGuW5EFg3FhrpD31b2uDl0ACD7lr/wOA0UBXleBxRZFtZ5+cr htlvHQLFZVItA9+EaZjFWhwVnT4joVY+To3hneN5EVLKazqh5MJQtddavCgapi2i 579NcUhH1A/CnZkP62Vzv3cLpLI+Q9uUOl/oIt+tPQeLTc6DMiMu8Vw8tdMLBywg KHTMiVPuHKkWJEOIKPbF74wrKW1Soa0= -----END CERTIFICATE-----Generated at Tue Oct 14 08:08:38 2025 by rpki-client