$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/04b3024e-4dfa-3ea1-b141-e9e1e940b2e4.roa File: 04b3024e-4dfa-3ea1-b141-e9e1e940b2e4.roa (raw, json) Hash identifier: XUUc+/RaDCUUYHU6G624lMgzcIh1KOa+AlALFxThmOU= Subject key identifier: F0:FF:52:08:74:AB:D2:16:9A:0A:2C:13:E2:AF:D4:1E:98:B7:DB:86 Certificate issuer: /CN=199dfb28-cdac-4edc-a298-dd88768e447b Certificate serial: 010D0C9F4328584B60F340D7940169E12AE38380 Authority key identifier: CB:40:12:59:2D:7D:E4:A8:D1:46:BA:92:A3:88:94:A5:EB:E9:C1:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/04b3024e-4dfa-3ea1-b141-e9e1e940b2e4.roa Signing time: Wed 01 Oct 2025 15:55:26 +0000 ROA not before: Wed 01 Oct 2025 15:55:26 +0000 ROA not after: Tue 30 Dec 2025 16:55:26 +0000 asID: 398704 IP address blocks: 74.118.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/199dfb28-cdac-4edc-a298-dd88768e447b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/199dfb28-cdac-4edc-a298-dd88768e447b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:f3:40:d7:94:01:69:e1:2a:e3:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199dfb28-cdac-4edc-a298-dd88768e447b Validity Not Before: Oct 1 15:55:26 2025 GMT Not After : Dec 30 16:55:26 2025 GMT Subject: CN=502d3c23-7f7b-44cf-aa2b-f2f9685d3c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:80:2f:34:21:ff:c8:2f:b2:d3:10:96:79: ee:a8:3c:0a:d6:ca:d4:4d:8f:cd:81:82:87:0d:f4: bd:27:cb:4c:72:87:04:63:69:f6:fd:5e:bf:01:cf: 20:0b:4f:eb:3b:18:60:bc:48:5d:cb:1b:e3:b0:3c: c0:84:aa:04:20:7f:21:7b:78:95:b0:39:4d:04:11: 82:24:18:05:42:98:9f:6e:bd:f2:f4:18:95:01:09: 8c:1a:53:89:74:70:6c:f7:39:a7:7b:26:aa:ad:a4: ad:6a:15:bf:2b:41:af:8c:f3:2b:a1:58:0f:80:88: f2:1b:8e:a0:ce:54:92:2a:46:11:f7:ce:0d:a6:76: 7c:c6:7c:3d:71:19:1d:c4:4c:77:10:7e:88:1b:54: 0e:92:3f:07:38:32:5b:08:a5:7e:da:cd:e1:ca:85: 40:8d:30:56:ae:b2:37:0c:10:64:5b:3e:3b:01:e7: 18:6d:1e:41:83:64:ba:f0:a0:bb:d9:97:03:f5:e5: c1:cd:42:43:af:02:db:e9:69:4a:a2:71:54:78:c0: fc:e4:fc:92:3b:f7:e2:7e:c3:bd:78:f4:a0:c0:af: 27:3e:fc:67:01:bb:9d:41:80:4b:66:ab:19:28:55: e2:78:f7:52:ae:48:7f:d5:7a:44:4c:f6:97:dd:3f: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FF:52:08:74:AB:D2:16:9A:0A:2C:13:E2:AF:D4:1E:98:B7:DB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/04b3024e-4dfa-3ea1-b141-e9e1e940b2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/199dfb28-cdac-4edc-a298-dd88768e447b.crl X509v3 Authority Key Identifier: keyid:CB:40:12:59:2D:7D:E4:A8:D1:46:BA:92:A3:88:94:A5:EB:E9:C1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b.cer sbgp-ipAddrBlock: critical IPv4: 74.118.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b7:b6:d7:00:54:94:c1:8d:7a:91:b7:86:fb:c4:74:2a:40: e6:1a:7c:e7:bf:98:6b:8c:3a:f7:23:b9:e9:65:87:27:03:a3: a9:ba:15:41:32:ee:2b:27:d0:9f:61:d7:c2:53:6c:50:03:fe: e0:e7:50:b8:58:9a:c3:38:f8:ab:94:b3:64:ee:7b:c4:db:e5: fb:88:19:60:c3:49:fd:3a:70:ff:78:c8:55:27:f4:a1:ce:02: b8:6f:f8:a6:eb:20:a7:58:f6:46:4b:c3:0c:26:a8:42:72:45: 34:8a:6e:4e:17:f1:d2:f7:c5:ca:08:63:15:13:bb:b4:ee:ce: 7b:7b:00:b0:dc:f6:fb:59:bf:0f:83:32:e8:95:77:6e:74:42: c0:cc:0e:b5:74:4a:dc:8c:90:77:e5:1d:69:13:07:fc:d0:d5: a1:8d:a1:3c:55:6f:73:50:23:25:78:59:8c:08:ef:63:08:4e: 25:fd:46:13:56:ab:b7:ae:81:0a:5e:f1:67:d1:65:4c:99:7b: 7c:85:54:b2:e8:c2:d0:f4:ef:de:02:f8:16:7f:3a:6f:f8:10: 47:6b:de:a2:3b:f1:99:f4:96:98:d0:09:e1:d4:2c:30:58:8d: 77:0c:a9:0c:92:fd:7f:06:bf:24:31:db:33:87:7d:4a:78:40: 3c:5f:07:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtg80DXlAFp4Srjg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk5ZGZiMjgtY2RhYy00ZWRjLWEyOTgtZGQ4ODc2OGU0 NDdiMB4XDTI1MTAwMTE1NTUyNloXDTI1MTIzMDE2NTUyNlowLzEtMCsGA1UEAxMk NTAyZDNjMjMtN2Y3Yi00NGNmLWFhMmItZjJmOTY4NWQzYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XKALzQh/8gvstMQlnnuqDwK1srUTY/NgYKH DfS9J8tMcocEY2n2/V6/Ac8gC0/rOxhgvEhdyxvjsDzAhKoEIH8he3iVsDlNBBGC JBgFQpifbr3y9BiVAQmMGlOJdHBs9zmneyaqraStahW/K0GvjPMroVgPgIjyG46g zlSSKkYR984NpnZ8xnw9cRkdxEx3EH6IG1QOkj8HODJbCKV+2s3hyoVAjTBWrrI3 DBBkWz47AecYbR5Bg2S68KC72ZcD9eXBzUJDrwLb6WlKonFUeMD85PySO/fifsO9 ePSgwK8nPvxnAbudQYBLZqsZKFXiePdSrkh/1XpETPaX3T8A2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD/Ugh0q9IWmgosE+Kv1B6Yt9uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xOTlk ZmIyOC1jZGFjLTRlZGMtYTI5OC1kZDg4NzY4ZTQ0N2IvMDRiMzAyNGUtNGRmYS0z ZWExLWIxNDEtZTllMWU5NDBiMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTk5ZGZiMjgtY2RhYy00ZWRjLWEy OTgtZGQ4ODc2OGU0NDdiLzE5OWRmYjI4LWNkYWMtNGVkYy1hMjk4LWRkODg3Njhl NDQ3Yi5jcmwwHwYDVR0jBBgwFoAUy0ASWS195KjRRrqSo4iUpevpwVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xOTlkZmIyOC1jZGFjLTRlZGMtYTI5OC1kZDg4 NzY4ZTQ0N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm3ttcAVJTBjXqRt4b7xHQqQOYafOe/mGuMOvcjuellhycDo6m6FUEy 7isn0J9h18JTbFAD/uDnULhYmsM4+KuUs2Tue8Tb5fuIGWDDSf06cP94yFUn9KHO Arhv+KbrIKdY9kZLwwwmqEJyRTSKbk4X8dL3xcoIYxUTu7Tuznt7ALDc9vtZvw+D MuiVd250QsDMDrV0StyMkHflHWkTB/zQ1aGNoTxVb3NQIyV4WYwI72MITiX9RhNW q7eugQpe8WfRZUyZe3yFVLLowtD0794C+BZ/Om/4EEdr3qI78Zn0lpjQCeHULDBY jXcMqQyS/X8GvyQx2zOHfUp4QDxfB3A= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:41 2025 by rpki-client