$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa File: 06677e83-0c67-3aee-be47-b4de3ad1063f.roa (raw, json) Hash identifier: X+B9z6PYRt29fKOIA8Pg6JNvOJvpzwPfsAHx8foUUn8= Subject key identifier: 08:D5:7C:91:01:9D:19:00:4B:84:27:24:51:57:3B:FF:54:13:EF:22 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806CFA1D2BCF2CBC2C6D880 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 74.121.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cf:a1:d2:bc:f2:cb:c2:c6:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=fbe2687c-3be7-4b4c-8ab7-e70b66630300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:60:29:f5:d7:96:32:52:8a:ab:2d:40:4f: 30:97:b2:e5:eb:e7:ea:3f:06:d7:47:a4:fb:48:63: f8:f8:05:88:a2:2b:a4:c7:85:36:59:6e:df:a2:21: 7d:d1:2c:bb:48:90:bf:49:ba:cc:6b:b5:54:50:06: 05:48:6c:23:f7:10:af:95:0f:6a:9d:1f:63:6b:70: 0b:df:e6:11:ec:55:8a:4d:8d:fd:42:40:cc:d4:bc: 58:fb:4b:be:56:ef:4d:d1:bb:42:63:41:42:b0:9f: d2:c9:47:7e:50:e3:67:09:18:d2:6e:5f:7a:f9:7c: 0b:b6:64:cb:64:51:a2:cb:18:24:64:f9:5c:ab:08: cf:c8:bf:da:fa:a1:bd:46:fe:19:23:ce:17:33:e1: a7:63:45:59:5d:e4:d8:e1:80:88:29:93:60:32:97: 60:e7:e9:5b:0d:66:7b:2a:2e:5b:6e:36:cf:09:f8: 40:b2:8c:34:78:e4:79:f8:5b:63:ab:ba:bd:75:97: eb:e2:05:f8:87:a1:b1:c8:59:46:f0:48:33:44:84: 79:0d:7a:02:fb:11:16:fe:77:09:86:78:63:42:f5: a7:77:2e:c1:9b:ea:1d:70:23:e1:fb:f2:8a:d5:b9: 2d:10:e6:1d:a4:e8:3f:f8:90:5e:79:af:d8:e6:7e: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D5:7C:91:01:9D:19:00:4B:84:27:24:51:57:3B:FF:54:13:EF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.121.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f4:87:25:d9:1b:32:a2:2e:f6:a8:c9:de:d2:10:c2:a9:d0: 48:bd:e1:32:6f:d6:07:b7:94:db:3a:df:6f:c8:26:08:e8:3c: b4:3f:27:78:82:10:55:f5:65:ba:25:d1:3f:8e:74:00:be:11: 54:ac:c6:26:32:9b:92:e6:20:b1:2f:da:2c:3e:5d:2c:38:1a: f6:bd:2f:07:a0:3b:85:f4:49:21:cb:6d:35:80:83:a6:66:f7: e6:67:03:20:26:bf:9b:ad:df:79:81:3c:21:00:53:d8:32:c1: 8c:37:8d:1b:ee:63:64:24:4f:8b:01:31:b9:62:e1:97:ad:89: 13:a8:95:ff:56:c0:04:27:f6:83:52:84:55:f3:76:72:0d:32: c7:81:64:31:11:1c:52:a6:4d:a1:de:9e:6a:3b:f0:f3:7a:c5: 1d:15:bd:df:ba:de:7c:51:56:ab:4c:8b:14:a5:dd:07:ca:d0: 6a:b1:3e:2d:bc:af:e1:f7:04:9e:8a:6e:13:a6:c0:7c:61:d5: b3:5c:69:8f:b9:3e:58:b9:74:fb:63:11:ef:1e:10:e7:0d:86: 13:5b:6f:ce:9a:78:96:8d:79:fd:c9:c0:01:26:9f:2e:d7:29: e8:f1:bf:6d:6b:78:7f:19:af:75:72:4e:3a:1a:3a:40:68:f1: cf:24:54:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBs+h0rzyy8LG2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmJlMjY4N2MtM2JlNy00YjRjLThhYjctZTcwYjY2NjMwMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVNgKfXXljJSiqstQE8wl7Ll6+fqPwbXR6T7 SGP4+AWIoiukx4U2WW7foiF90Sy7SJC/SbrMa7VUUAYFSGwj9xCvlQ9qnR9ja3AL 3+YR7FWKTY39QkDM1LxY+0u+Vu9N0btCY0FCsJ/SyUd+UONnCRjSbl96+XwLtmTL ZFGiyxgkZPlcqwjPyL/a+qG9Rv4ZI84XM+GnY0VZXeTY4YCIKZNgMpdg5+lbDWZ7 Ki5bbjbPCfhAsow0eOR5+Ftjq7q9dZfr4gX4h6GxyFlG8EgzRIR5DXoC+xEW/ncJ hnhjQvWndy7Bm+odcCPh+/KK1bktEOYdpOg/+JBeea/Y5n6QRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjVfJEBnRkAS4QnJFFXO/9UE+8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDY2NzdlODMtMGM2Ny0z YWVlLWJlNDctYjRkZTNhZDEwNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn0hyXZGzKiLvaoyd7SEMKp0Ei94TJv1ge3lNs632/IJgjoPLQ/J3iC EFX1Zbol0T+OdAC+EVSsxiYym5LmILEv2iw+XSw4Gva9LwegO4X0SSHLbTWAg6Zm 9+ZnAyAmv5ut33mBPCEAU9gywYw3jRvuY2QkT4sBMbli4ZetiROolf9WwAQn9oNS hFXzdnINMseBZDERHFKmTaHenmo78PN6xR0Vvd+63nxRVqtMixSl3QfK0GqxPi28 r+H3BJ6KbhOmwHxh1bNcaY+5Pli5dPtjEe8eEOcNhhNbb86aeJaNef3JwAEmny7X Kejxv21reH8Zr3VyTjoaOkBo8c8kVMQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:46 2025 by rpki-client