$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa File: f411f7e3-a030-33c6-a8e2-d381a9731d20.roa (raw, json) Hash identifier: 9xpEqjjj/jeI2JEhoVwjX4tFlpGmp9elzmfwkwCI6+o= Subject key identifier: 69:97:05:75:BC:20:21:8B:D7:E2:CB:24:D9:CA:90:EB:EA:F0:47:79 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C0D51E28F5F821E386A00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 4213 IP address blocks: 74.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0d:51:e2:8f:5f:82:1e:38:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=5f0a60a3-75c0-4b47-a8fc-a9bc750fa3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e5:d5:f4:fd:eb:0b:ff:c8:ee:9a:17:41:33: f8:d6:9b:a5:ee:d1:cf:53:95:5e:9d:1b:8d:3f:e3: d6:c2:9c:09:eb:bd:2f:ab:ef:43:65:e1:7a:c6:b4: c2:c6:3f:ba:77:68:35:d8:61:b2:96:84:42:8a:aa: 1e:dc:6c:bb:ec:8e:dc:d4:2a:e0:02:e2:56:b5:09: 8a:d5:9d:e7:c4:1a:ef:8b:e1:64:64:93:ec:db:ca: bd:90:e7:64:82:e5:f9:f0:bc:32:88:c8:3e:d2:20: 62:88:b7:38:27:0e:60:f4:53:33:6c:95:80:ed:a4: 14:25:9c:35:d1:5e:b4:dc:0b:0d:03:01:b1:ff:1a: 45:11:a0:76:c2:c6:ee:7b:8a:97:bc:b1:aa:84:04: 1e:8b:7c:df:94:f5:77:22:27:22:28:21:fa:0d:06: 08:e0:47:bc:e7:5d:1b:0c:53:28:e6:27:cb:e6:2d: 2a:80:65:e8:eb:cb:40:3b:66:b9:f4:b7:c7:49:2c: 5e:d4:f3:ec:f4:7e:f2:a0:64:fc:fa:14:78:11:7e: df:91:2d:8a:76:db:b9:ae:7e:8f:10:82:9d:38:20: d6:60:4e:e0:90:14:6a:18:ab:01:0f:3f:68:a6:e9: 5a:d2:04:80:a7:94:c8:89:73:75:e9:c2:48:89:18: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:97:05:75:BC:20:21:8B:D7:E2:CB:24:D9:CA:90:EB:EA:F0:47:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7a:12:10:4b:10:ef:27:8c:69:ce:b7:85:46:b7:ee:5f:bb: e6:34:6e:c6:63:12:2b:ec:c6:a5:85:89:dc:05:70:f9:38:d8: e5:c0:ea:b8:c0:e0:80:d9:f6:30:30:7d:19:e3:42:98:37:4c: 89:a4:ab:5c:cb:d9:7c:7f:76:17:66:2d:ea:f5:7a:04:2d:1a: 2a:c1:83:d4:a0:76:6d:50:7f:bb:68:0d:37:da:f6:0f:6d:62: 92:14:d2:2a:04:81:05:79:aa:73:3e:5e:30:28:1a:47:ae:48: de:55:82:2a:8e:a6:5b:1e:bc:18:5b:6c:d5:9a:64:d9:67:cf: eb:08:b5:6a:7f:df:fe:1d:f2:29:9a:7c:d9:c2:c8:76:b3:eb: 13:67:b9:0f:84:f6:fe:97:63:eb:57:7e:d4:3d:f6:1d:a5:a0: 67:21:3f:b5:f6:e7:7e:13:94:7f:b7:3e:98:0b:ad:0c:c4:0c: 18:c1:52:10:76:52:10:b8:a0:3f:6d:a9:cd:5e:38:5a:72:5c: 33:43:dc:b5:89:1f:09:c3:de:e7:f7:e3:a2:66:29:85:ab:a4: 24:bc:d0:b8:a9:77:db:84:5a:9e:3c:3d:e1:a8:d7:74:38:7e: ee:43:7a:36:b9:97:12:4b:7f:3d:e6:19:bc:70:d6:2c:fa:d1: c3:b3:52:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA1R4o9fgh44agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NWYwYTYwYTMtNzVjMC00YjQ3LWE4ZmMtYTliYzc1MGZhM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+XV9P3rC//I7poXQTP41pul7tHPU5VenRuN P+PWwpwJ670vq+9DZeF6xrTCxj+6d2g12GGyloRCiqoe3Gy77I7c1CrgAuJWtQmK 1Z3nxBrvi+FkZJPs28q9kOdkguX58LwyiMg+0iBiiLc4Jw5g9FMzbJWA7aQUJZw1 0V603AsNAwGx/xpFEaB2wsbue4qXvLGqhAQei3zflPV3IiciKCH6DQYI4Ee8510b DFMo5ifL5i0qgGXo68tAO2a59LfHSSxe1PPs9H7yoGT8+hR4EX7fkS2Kdtu5rn6P EIKdOCDWYE7gkBRqGKsBDz9opula0gSAp5TIiXN16cJIiRhVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmXBXW8ICGL1+LLJNnKkOvq8Ed5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjQxMWY3ZTMtYTAzMC0z M2M2LWE4ZTItZDM4MWE5NzMxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB16EhBLEO8njGnOt4VGt+5fu+Y0bsZjEivsxqWFidwFcPk42OXA6rjA 4IDZ9jAwfRnjQpg3TImkq1zL2Xx/dhdmLer1egQtGirBg9Sgdm1Qf7toDTfa9g9t YpIU0ioEgQV5qnM+XjAoGkeuSN5VgiqOplsevBhbbNWaZNlnz+sItWp/3/4d8ima fNnCyHaz6xNnuQ+E9v6XY+tXftQ99h2loGchP7X2534TlH+3PpgLrQzEDBjBUhB2 UhC4oD9tqc1eOFpyXDND3LWJHwnD3uf346JmKYWrpCS80Lipd9uEWp48PeGo13Q4 fu5Deja5lxJLfz3mGbxw1iz60cOzUqY= -----END CERTIFICATE-----Generated at Tue Sep 9 20:43:16 2025 by rpki-client