$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa File: a8a014a5-2be6-3918-9e0a-0f728c23059e.roa (raw, json) Hash identifier: I/uK595RilS3DNeb6+/CbzOwnevvseeD8KDvVShwqLM= Subject key identifier: 09:92:F4:B3:69:89:19:4D:20:C8:37:75:0F:37:9B:B7:75:8F:35:6E Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F4328584B2CF6DC35BC0D7A8646E32080 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 23352 IP address blocks: 74.113.150.0/24 maxlen: 24 2620:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:dc:35:bc:0d:7a:86:46:e3:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=2a324d07-58f0-458c-b2aa-7f80e9854743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:fa:84:3e:81:4b:04:0b:ad:bb:a2:89:1a: 25:d5:ba:21:e5:44:90:b6:a9:f1:2e:c0:0e:1e:b5: 64:9b:2a:2b:91:e9:4d:69:ea:09:d2:1c:0c:fe:e3: 8f:2d:19:6c:2e:d3:80:ae:f6:15:b8:a1:25:3d:b7: 11:a6:6f:2c:1d:f3:27:51:30:ae:2c:5f:34:57:b7: 6a:b8:ad:d7:a2:35:ec:bd:bb:4f:94:c6:57:88:fa: fc:38:6c:d2:b0:2b:0d:ef:7a:09:34:fd:d4:18:ba: ca:65:a3:06:67:ae:b1:ba:d1:ef:64:fc:cc:f7:c4: ab:a5:15:7f:0c:da:3c:06:46:3e:1e:fd:e4:3d:35: bf:fe:0c:ce:8d:85:49:0e:7d:d6:f9:d0:67:25:ef: 51:3d:55:72:5b:57:85:1f:65:ba:fd:88:48:e1:6e: 0c:9f:47:1f:4a:3f:fd:67:5b:75:58:4f:72:ab:a5: eb:d5:f8:28:8a:0d:27:ac:b2:6a:c4:2d:fd:dd:03: 98:b9:49:5a:23:d0:03:5c:db:5c:96:ce:68:ae:30: d0:84:08:95:31:3e:b8:32:6e:61:5e:23:65:a0:a5: 2b:e0:c2:f9:f5:80:8a:35:ab:e6:8c:0c:95:48:7e: 53:5d:a9:59:d1:61:8d:be:79:0e:42:62:f7:c7:35: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:92:F4:B3:69:89:19:4D:20:C8:37:75:0F:37:9B:B7:75:8F:35:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 74.113.150.0/24 IPv6: 2620:7d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:03:d2:1c:87:2b:98:c8:31:aa:3a:f1:46:6d:21:d9:ab:f8: 3b:1c:15:eb:66:97:76:f6:59:fb:fc:d0:dd:c6:92:b9:be:dc: 4f:b4:52:2c:a3:b6:14:9c:fc:87:b1:8d:16:10:bb:c7:20:8b: 8e:be:73:15:f9:a5:ed:0d:6e:1d:d2:2a:ac:1c:64:50:ec:29: 79:1a:a9:c2:d5:17:85:fc:ca:54:c2:6e:a6:63:1c:9e:19:e5: bb:71:ff:b9:8d:b8:93:24:89:87:bb:9f:37:72:8c:63:5a:13: 2a:05:22:0e:d8:46:14:90:da:62:9e:4a:a5:22:0e:2f:c0:ef: 89:03:5c:44:a2:61:89:dc:da:17:b2:d9:30:1b:c3:5a:78:c6: 71:3f:0b:39:fd:ec:80:02:41:14:d5:4d:d0:a7:9a:6e:ac:db: cd:9b:70:8c:d9:15:28:f8:b3:05:8e:03:60:e7:a0:ed:92:ff: d1:37:63:7a:98:87:17:b3:fe:61:cb:ee:46:ab:ff:28:35:f5: a9:67:c1:cf:8d:f3:18:1c:0c:cc:95:c5:42:35:56:a6:ba:d4: 5d:4c:43:b0:72:4e:4d:cb:82:c2:7b:1d:bd:d4:73:70:c8:23: db:16:4b:32:99:fa:c6:c0:76:35:e4:df:7e:f6:a8:ba:82:9a: df:48:61:40 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEss9tw1vA16hkbjIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MmEzMjRkMDctNThmMC00NThjLWIyYWEtN2Y4MGU5ODU0NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWr6hD6BSwQLrbuiiRol1boh5USQtqnxLsAO HrVkmyorkelNaeoJ0hwM/uOPLRlsLtOArvYVuKElPbcRpm8sHfMnUTCuLF80V7dq uK3XojXsvbtPlMZXiPr8OGzSsCsN73oJNP3UGLrKZaMGZ66xutHvZPzM98SrpRV/ DNo8BkY+Hv3kPTW//gzOjYVJDn3W+dBnJe9RPVVyW1eFH2W6/YhI4W4Mn0cfSj/9 Z1t1WE9yq6Xr1fgoig0nrLJqxC393QOYuUlaI9ADXNtcls5orjDQhAiVMT64Mm5h XiNloKUr4ML59YCKNavmjAyVSH5TXalZ0WGNvnkOQmL3xzWxOQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAmS9LNpiRlNIMg3dQ83m7d1jzVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvYThhMDE0YTUtMmJlNi0z OTE4LTllMGEtMGY3MjhjMjMwNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASnGWMA8E AgACMAkDBwAmIAB9AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWgPSHIcrmMgxqjrxRm0h2av4OxwV62aX dvZZ+/zQ3caSub7cT7RSLKO2FJz8h7GNFhC7xyCLjr5zFfml7Q1uHdIqrBxkUOwp eRqpwtUXhfzKVMJupmMcnhnlu3H/uY24kySJh7ufN3KMY1oTKgUiDthGFJDaYp5K pSIOL8DviQNcRKJhidzaF7LZMBvDWnjGcT8LOf3sgAJBFNVN0KeabqzbzZtwjNkV KPizBY4DYOeg7ZL/0TdjepiHF7P+YcvuRqv/KDX1qWfBz43zGBwMzJXFQjVWprrU XUxDsHJOTcuCwnsdvdRzcMgj2xZLMpn6xsB2NeTffvaouoKa30hhQA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:16:41 2025 by rpki-client