$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa File: 255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa (raw, json) Hash identifier: TR3z4QILj8gyWelY2ds7JypZc4viq6tegjIQz0BM4e8= Subject key identifier: 12:B9:B8:6E:AA:FA:6D:89:42:A6:18:54:F0:12:E4:37:31:02:45:C7 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B4E7742219CB3332D467DD7B0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396185 IP address blocks: 74.127.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:42:21:9c:b3:33:2d:46:7d:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=aede9899-03f6-4bdd-a2eb-7681a0bcaed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:25:9f:1e:00:b0:3e:9b:09:c0:0c:4d:03: 53:91:85:85:1c:e8:b2:0e:ad:71:ca:05:0e:3e:bc: c2:be:b6:6e:13:63:fb:9b:f8:e8:66:d0:ae:d4:e0: 0d:e0:50:b5:fa:25:f4:91:94:62:a4:01:55:69:ce: 87:18:6f:bd:86:b2:e1:e3:bb:b4:e4:33:db:44:86: 4a:fa:c1:93:9c:4a:fa:a9:b4:95:72:be:d1:85:78: e3:ef:98:06:81:18:2c:04:77:87:c6:f5:28:59:21: c4:fc:31:4b:f4:0d:5e:83:09:99:96:83:f0:d9:ac: 52:99:b5:bf:cf:b2:2a:cb:e8:51:16:f7:6b:6d:f4: 53:16:ab:fd:4d:80:2b:fd:1b:4c:20:c6:a1:11:b2: f3:c9:f6:ac:d6:25:0a:96:73:60:56:50:02:12:15: ae:af:7f:34:57:40:0c:dd:2e:0e:59:39:29:e4:8d: b0:ba:62:18:41:13:c9:cf:b6:8d:dc:38:8c:bb:48: 68:39:17:70:4f:f3:05:7c:0d:55:22:01:1a:f1:2b: 63:16:77:75:02:c3:43:1c:7b:b4:64:14:92:57:b9: 6c:d7:9d:7c:04:d4:02:b0:73:b5:61:f8:c5:58:06: 3c:62:94:b5:04:41:b9:42:97:e8:6e:46:aa:f6:93: 6e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:B8:6E:AA:FA:6D:89:42:A6:18:54:F0:12:E4:37:31:02:45:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8c:3f:2e:ae:22:16:bc:b5:f4:95:a4:88:8c:2c:ca:28:88: 28:2f:cb:f1:b6:71:2b:77:9f:41:c2:3d:5e:7d:b8:39:b9:ba: ca:b3:03:3a:de:17:15:66:1c:05:3f:74:27:0d:3d:43:f4:ea: 1b:a6:8f:e3:d2:cc:a2:da:da:83:f9:11:77:fb:f3:f3:e4:2d: 64:66:af:e0:47:a3:3a:ed:1a:aa:e2:73:00:bf:78:f9:5a:5c: 17:df:fe:e4:f0:1e:2e:f1:6f:cb:61:5f:3b:09:23:a1:75:f5: a5:93:ad:e1:70:4b:ef:55:76:43:af:6d:db:f7:b8:20:88:aa: 68:d0:cb:fa:90:f6:61:f4:98:07:1b:c7:c1:14:b4:95:1c:da: cd:01:59:6b:ee:86:2b:c6:96:fc:ef:99:37:21:fb:da:b8:a6: 62:f2:11:48:0d:c7:eb:48:f6:dc:a6:a8:63:a4:8f:87:dc:6f: f3:44:2c:52:2c:67:9f:6b:64:0d:1f:8b:7e:d9:21:cb:ed:99: 4c:27:e0:ca:28:7a:6b:7f:65:f8:3b:85:de:c1:4b:87:40:1b: 91:a7:a7:85:4a:6c:93:69:53:76:4b:13:13:0b:97:83:a4:b2: e2:d9:ca:88:23:69:1e:4a:de:fd:70:41:14:05:0c:6b:71:d0: 30:d3:bc:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0IhnLMzLUZ917AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YWVkZTk4OTktMDNmNi00YmRkLWEyZWItNzY4MWEwYmNhZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy44lnx4AsD6bCcAMTQNTkYWFHOiyDq1xygUO PrzCvrZuE2P7m/joZtCu1OAN4FC1+iX0kZRipAFVac6HGG+9hrLh47u05DPbRIZK +sGTnEr6qbSVcr7RhXjj75gGgRgsBHeHxvUoWSHE/DFL9A1egwmZloPw2axSmbW/ z7Iqy+hRFvdrbfRTFqv9TYAr/RtMIMahEbLzyfas1iUKlnNgVlACEhWur380V0AM 3S4OWTkp5I2wumIYQRPJz7aN3DiMu0hoORdwT/MFfA1VIgEa8StjFnd1AsNDHHu0 ZBSSV7ls1518BNQCsHO1YfjFWAY8YpS1BEG5Qpfobkaq9pNu6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK5uG6q+m2JQqYYVPAS5DcxAkXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMjU1ZmIzZTItNjZiMS0z YzJhLTgwZDgtZjg4MDYzNDhjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+MPy6uIha8tfSVpIiMLMooiCgvy/G2cSt3n0HCPV59uDm5usqzAzre FxVmHAU/dCcNPUP06humj+PSzKLa2oP5EXf78/PkLWRmr+BHozrtGqricwC/ePla XBff/uTwHi7xb8thXzsJI6F19aWTreFwS+9VdkOvbdv3uCCIqmjQy/qQ9mH0mAcb x8EUtJUc2s0BWWvuhivGlvzvmTch+9q4pmLyEUgNx+tI9tymqGOkj4fcb/NELFIs Z59rZA0fi37ZIcvtmUwn4Mooemt/Zfg7hd7BS4dAG5Gnp4VKbJNpU3ZLExMLl4Ok suLZyogjaR5K3v1wQRQFDGtx0DDTvDk= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:04 2025 by rpki-client