$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b581a03a-80ae-3f4f-b9ad-1ce03a7342cc.roa File: b581a03a-80ae-3f4f-b9ad-1ce03a7342cc.roa (raw, json) Hash identifier: AKTCyPYDgLPzmMfFjipJzLwEbVwqzZ3Y2vuoYo4KKfU= Subject key identifier: E4:1E:93:27:58:FB:9C:E0:8C:91:B0:32:B7:8C:E4:0F:D6:68:5A:3F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806CF8B92EDEA372A909AC0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b581a03a-80ae-3f4f-b9ad-1ce03a7342cc.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 74.121.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:cf:8b:92:ed:ea:37:2a:90:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=aa0a943d-0f56-4154-bddc-adeccf4817ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:69:f9:1f:bb:1f:31:b7:4c:8a:74:63:97: 74:a0:3e:1f:8a:f0:0b:15:fb:fb:8a:12:01:3a:08: 73:5d:83:88:f7:16:70:96:54:aa:7f:56:a5:b5:0e: 6e:78:8a:27:60:2d:b2:9e:68:47:a4:5b:e0:48:ae: 93:f9:7a:b4:24:db:4d:1c:fb:89:4e:66:0f:5a:7e: 8b:9c:34:70:89:e7:41:35:d8:7d:7d:69:84:73:f8: 90:23:9e:78:32:f3:39:e8:16:d3:35:2a:15:39:12: a8:78:57:f6:b3:00:b9:c9:36:39:15:37:3a:6a:a5: 26:d9:f3:d8:e4:da:4e:2e:06:b2:9b:53:b2:a8:ad: 20:73:a9:10:05:a1:fd:74:22:a7:81:07:b1:d4:f2: 6d:c6:54:6a:4e:a4:7c:0a:8e:dc:c4:bf:98:da:bb: 83:f8:62:eb:48:b0:97:2f:6e:2d:ea:70:a3:da:7f: 51:d2:a4:3c:3b:0e:dd:25:c5:1d:11:44:57:d8:c2: 18:70:eb:93:b3:19:fd:af:ed:8e:1a:83:55:21:fc: 0c:ae:3b:5d:80:3e:9b:ce:61:0d:8f:bb:76:c6:cd: 85:1e:b1:e3:90:11:f5:50:f9:33:5c:4e:f4:f7:ee: 0c:1e:60:d5:1a:7f:0f:09:2a:47:23:9a:3f:6e:1d: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:93:27:58:FB:9C:E0:8C:91:B0:32:B7:8C:E4:0F:D6:68:5A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b581a03a-80ae-3f4f-b9ad-1ce03a7342cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.121.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:dd:42:f4:50:c0:49:08:41:2c:ea:05:f4:dc:73:c3:92: c5:4f:4d:9d:3b:bf:f2:73:1e:aa:5c:e8:fc:6f:c8:48:32:74: 22:76:d1:fd:9c:47:87:87:ba:c7:28:5e:70:7a:88:e2:79:a0: 86:39:b6:47:19:1c:a0:40:c2:4f:22:30:79:4b:5f:d1:fc:78: 71:6c:49:8d:ff:da:e1:af:9c:0a:01:1a:f8:f7:c4:84:fb:33: c3:6e:05:42:c0:a9:3d:8e:70:54:4b:57:e8:ea:05:ef:a7:7d: 54:32:34:b0:2b:3c:e9:5a:23:5f:0d:60:b7:3c:24:27:c6:b4: 2e:9d:ba:36:de:58:92:f6:f1:92:04:05:2b:5b:dc:ae:b7:2a: b0:4f:d8:10:93:3c:fd:fb:fd:6b:b1:b1:fb:d6:65:c1:b3:a2: ad:0a:fb:90:21:88:2f:24:9b:a3:b9:24:6d:b8:f1:db:18:27: 4e:bf:00:2f:37:ad:bd:1c:60:41:41:f0:84:eb:0c:4a:21:1f: 79:99:93:fd:75:5e:f6:22:d4:ea:3b:41:54:bb:e7:33:cc:89: 84:56:36:cf:f3:49:af:00:3b:b2:a3:b4:f7:0e:2a:de:ad:b4: 18:3d:a0:48:94:e0:4c:18:69:00:7f:49:0c:25:10:97:65:55: cb:3f:b6:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBs+Lku3qNyqQmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWEwYTk0M2QtMGY1Ni00MTU0LWJkZGMtYWRlY2NmNDgxN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hxp+R+7HzG3TIp0Y5d0oD4fivALFfv7ihIB OghzXYOI9xZwllSqf1altQ5ueIonYC2ynmhHpFvgSK6T+Xq0JNtNHPuJTmYPWn6L nDRwiedBNdh9fWmEc/iQI554MvM56BbTNSoVORKoeFf2swC5yTY5FTc6aqUm2fPY 5NpOLgaym1OyqK0gc6kQBaH9dCKngQex1PJtxlRqTqR8Co7cxL+Y2ruD+GLrSLCX L24t6nCj2n9R0qQ8Ow7dJcUdEURX2MIYcOuTsxn9r+2OGoNVIfwMrjtdgD6bzmEN j7t2xs2FHrHjkBH1UPkzXE709+4MHmDVGn8PCSpHI5o/bh1BAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQekydY+5zgjJGwMreM5A/WaFo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjU4MWEwM2EtODBhZS0z ZjRmLWI5YWQtMWNlMDNhNzM0MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgt3UL0UMBJCEEs6gX03HPDksVPTZ07v/JzHqpc6PxvyEgydCJ20f2c R4eHuscoXnB6iOJ5oIY5tkcZHKBAwk8iMHlLX9H8eHFsSY3/2uGvnAoBGvj3xIT7 M8NuBULAqT2OcFRLV+jqBe+nfVQyNLArPOlaI18NYLc8JCfGtC6dujbeWJL28ZIE BStb3K63KrBP2BCTPP37/WuxsfvWZcGzoq0K+5AhiC8km6O5JG248dsYJ06/AC83 rb0cYEFB8ITrDEohH3mZk/11XvYi1Oo7QVS75zPMiYRWNs/zSa8AO7KjtPcOKt6t tBg9oEiU4EwYaQB/SQwlEJdlVcs/tsM= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:55 2025 by rpki-client