$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71726844-e01f-3238-aa40-484e8213af7f.roa File: 71726844-e01f-3238-aa40-484e8213af7f.roa (raw, json) Hash identifier: WPBNtwkpv4xpT/ju9ICLDJNws+fAGUqlBS6j/4HFI5Q= Subject key identifier: 08:C7:83:B8:F2:9C:E7:01:49:E7:8D:82:69:DB:61:60:FB:C5:85:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B663207C4024502E2A9512600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71726844-e01f-3238-aa40-484e8213af7f.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 15169 IP address blocks: 74.114.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:07:c4:02:45:02:e2:a9:51:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=b07751ba-7577-47ff-9513-a2fab0616a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:c4:b3:2b:17:c6:f7:98:17:31:a0:ad:cf: 4d:27:af:01:a7:e2:05:16:bc:52:04:61:4e:a2:b5: 13:6d:a4:ea:3a:9c:80:b0:60:73:fd:ba:02:c6:fd: 50:eb:51:7a:3d:f5:a6:c6:86:71:c3:b1:5b:04:56: c2:aa:89:b3:79:c5:0c:3e:3d:35:ea:d2:8e:e4:35: 68:81:af:79:0e:c9:f4:2a:31:5c:21:16:1d:d1:da: ca:50:4b:7d:4c:f1:b1:3e:76:fe:9e:ad:f5:ec:18: ca:fc:a8:5d:e9:48:63:cd:ed:3d:9b:cf:98:ae:62: 54:21:ed:95:b7:bd:8d:38:87:fb:9d:28:76:4e:82: 75:67:2d:56:15:ca:e7:a5:da:28:98:d5:8b:95:64: fe:44:c0:ec:14:dd:0a:1e:19:b1:5f:c7:b0:ba:80: 2c:09:f2:be:6b:3d:f0:08:31:bd:a9:19:ae:7c:61: e6:82:06:b2:48:81:06:da:7f:8d:fb:52:cc:25:b7: 98:24:c4:6c:93:00:2d:fb:36:f3:6f:7f:94:c9:4c: a9:24:9d:93:27:44:63:f5:08:52:cf:cd:83:9b:dc: 25:6c:98:94:68:ac:6e:f6:0d:59:47:f1:31:f3:ab: fb:58:48:9d:1c:43:53:f9:fb:0b:5d:de:77:c2:dc: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:83:B8:F2:9C:E7:01:49:E7:8D:82:69:DB:61:60:FB:C5:85:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71726844-e01f-3238-aa40-484e8213af7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.114.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:35:31:8e:6d:55:ed:85:bc:3a:80:bf:ae:59:e0:07:5d:27: a1:e0:a5:f6:61:40:5c:d8:0c:40:1b:4a:e1:6d:d3:ec:66:ab: 87:86:f4:b8:b6:49:6d:9d:a2:95:c1:86:5a:b5:05:c9:fc:80: ad:57:28:ec:8b:7c:ef:78:4d:90:75:a5:da:f3:62:00:be:be: ac:45:53:f0:a6:6a:02:cb:46:15:06:fa:db:f3:47:57:58:7b: 4f:8a:d0:b9:e8:27:88:79:77:43:32:83:3a:56:8c:35:47:1a: 6b:84:d9:4f:08:94:db:2d:ee:17:22:27:fc:98:40:ff:0c:98: 33:84:fb:1a:d6:58:fc:64:56:64:7e:18:15:60:6f:94:8a:d4: 0b:27:46:77:d9:01:57:5b:64:1f:5b:28:a8:b2:89:f5:06:c3: 6e:90:27:28:03:66:30:93:92:d1:d0:92:52:84:78:fc:81:e6: bd:5d:59:15:6e:fc:23:c1:5d:7f:c3:a5:0e:b9:a5:af:06:98: 3a:e4:78:a0:72:52:73:1f:94:8d:72:96:80:49:3a:21:46:86: f1:86:3b:2b:a3:fa:06:2a:8a:27:83:3a:e7:aa:af:71:ec:ba: 33:64:f7:a1:3f:96:27:0a:71:bf:b5:ca:44:1a:23:3f:12:6c: cb:f7:22:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgfEAkUC4qlRJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YjA3NzUxYmEtNzU3Ny00N2ZmLTk1MTMtYTJmYWIwNjE2YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0vEsysXxveYFzGgrc9NJ68Bp+IFFrxSBGFO orUTbaTqOpyAsGBz/boCxv1Q61F6PfWmxoZxw7FbBFbCqomzecUMPj016tKO5DVo ga95Dsn0KjFcIRYd0drKUEt9TPGxPnb+nq317BjK/Khd6Uhjze09m8+YrmJUIe2V t72NOIf7nSh2ToJ1Zy1WFcrnpdoomNWLlWT+RMDsFN0KHhmxX8ewuoAsCfK+az3w CDG9qRmufGHmggaySIEG2n+N+1LMJbeYJMRskwAt+zbzb3+UyUypJJ2TJ0Rj9QhS z82Dm9wlbJiUaKxu9g1ZR/Ex86v7WEidHENT+fsLXd53wtyLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjHg7jynOcBSeeNgmnbYWD7xYU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzE3MjY4NDQtZTAxZi0z MjM4LWFhNDAtNDg0ZTgyMTNhZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo1MY5tVe2FvDqAv65Z4AddJ6HgpfZhQFzYDEAbSuFt0+xmq4eG9Li2 SW2dopXBhlq1Bcn8gK1XKOyLfO94TZB1pdrzYgC+vqxFU/CmagLLRhUG+tvzR1dY e0+K0LnoJ4h5d0MygzpWjDVHGmuE2U8IlNst7hciJ/yYQP8MmDOE+xrWWPxkVmR+ GBVgb5SK1AsnRnfZAVdbZB9bKKiyifUGw26QJygDZjCTktHQklKEePyB5r1dWRVu /CPBXX/DpQ65pa8GmDrkeKByUnMflI1yloBJOiFGhvGGOyuj+gYqiieDOueqr3Hs ujNk96E/licKcb+1ykQaIz8SbMv3Igk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:02 2025 by rpki-client