$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa File: 0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa (raw, json) Hash identifier: zkY0Zpt2g0VN+Z110y8iFrQyWHMnh2ZZ8QfStBwRBtI= Subject key identifier: BD:58:23:75:61:A7:36:21:C1:92:50:72:5D:C3:FF:5B:60:86:60:82 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB09E2C156B05DC8137A80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 74.115.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:09:e2:c1:56:b0:5d:c8:13:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=25179e6b-d92d-4260-b551-3a17d9965f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:49:33:e7:73:e6:ad:da:13:6d:f5:29:31: cb:6e:e2:80:58:2b:bb:45:52:61:bd:0b:e5:ac:92: 44:7f:0b:d2:d5:81:6e:13:32:f2:9b:15:1d:d5:38: 46:33:14:16:7c:17:0b:7a:a4:51:1c:79:88:3d:94: 79:d4:da:9b:f9:18:3d:6c:37:bc:20:4e:98:d9:76: 2a:db:d1:14:28:38:aa:76:84:fc:bf:3b:88:51:55: 88:0d:97:df:87:31:ba:c0:cd:87:cc:80:67:8f:a8: 23:ad:32:6c:8b:55:19:b0:a0:0c:13:3a:2d:35:36: 47:96:a9:eb:25:df:72:fa:43:9c:46:1f:5f:cf:9e: a8:4a:88:87:b0:e0:e3:f6:0b:62:58:ec:3d:d8:e8: 3e:af:a4:31:06:b9:5c:b9:0b:a5:51:4a:9b:a8:a8: ca:30:03:5f:fc:cc:fd:f9:d2:85:2f:16:0f:5b:c0: c1:4f:bc:30:af:c2:6d:d6:1f:60:2a:ba:4d:b5:c2: 13:a9:7e:d2:3b:0b:a4:c5:8f:e4:2a:bb:9f:40:df: 33:e1:a0:fe:6d:50:9a:79:d6:9d:63:ac:1d:c7:bb: 26:b0:50:63:e7:21:60:67:f8:db:b4:0c:39:5e:b2: ab:0f:37:0e:3a:9b:a1:04:f6:06:fb:55:74:d3:16: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:58:23:75:61:A7:36:21:C1:92:50:72:5D:C3:FF:5B:60:86:60:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b1:17:01:f4:f7:d2:db:5d:86:c9:37:0c:6e:40:15:d2:33: 79:ab:09:72:c0:1c:b4:f2:28:02:e9:ac:56:56:62:86:3d:41: 28:0c:df:e9:f9:bd:94:5c:59:d8:64:75:81:03:f0:55:3c:6b: ee:a1:2e:9f:0d:e7:81:6a:c1:9c:a7:a9:0b:88:d8:36:99:a9: 2b:b3:fc:d3:22:60:cb:17:47:9b:c7:c4:c5:1f:50:0a:f7:66: aa:f8:5c:e1:48:ff:3d:56:5f:60:ee:1f:54:84:f9:5e:9a:e5: eb:84:f5:49:50:b3:a9:d9:51:9d:fb:0d:2c:cf:73:81:c5:62: ee:d3:a2:0c:2d:53:38:28:7a:a4:5d:02:00:1d:5a:39:1b:b5: d1:e4:0c:18:95:3c:7e:55:e8:43:f8:2d:81:0e:0c:f5:4d:69: 18:5d:ce:d7:d7:7f:a9:b5:3d:f2:f9:19:f8:67:1c:86:2c:ce: b6:3b:30:fa:18:30:2c:c2:9f:d8:13:e0:5c:15:3c:0f:1a:04: 60:dd:b2:75:15:ba:05:4a:2b:cc:0c:70:49:09:0d:72:87:78: b0:c7:10:27:03:77:f0:7d:42:c0:92:98:2f:27:fa:d7:75:62: 9d:fa:ec:e0:90:9c:11:fd:24:48:23:d7:75:35:42:53:a1:d7: 46:ab:ae:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywniwVawXcgTeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MjUxNzllNmItZDkyZC00MjYwLWI1NTEtM2ExN2Q5OTY1ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI9JM+dz5q3aE231KTHLbuKAWCu7RVJhvQvl rJJEfwvS1YFuEzLymxUd1ThGMxQWfBcLeqRRHHmIPZR51Nqb+Rg9bDe8IE6Y2XYq 29EUKDiqdoT8vzuIUVWIDZffhzG6wM2HzIBnj6gjrTJsi1UZsKAMEzotNTZHlqnr Jd9y+kOcRh9fz56oSoiHsODj9gtiWOw92Og+r6QxBrlcuQulUUqbqKjKMANf/Mz9 +dKFLxYPW8DBT7wwr8Jt1h9gKrpNtcITqX7SOwukxY/kKrufQN8z4aD+bVCaedad Y6wdx7smsFBj5yFgZ/jbtAw5XrKrDzcOOpuhBPYG+1V00xatqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1YI3VhpzYhwZJQcl3D/1tghmCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMDg5OWJmZGYtZTRhZC0z YTI5LWJjOTEtMjIwNWRkMGNlNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGxFwH099LbXYbJNwxuQBXSM3mrCXLAHLTyKALprFZWYoY9QSgM3+n5 vZRcWdhkdYED8FU8a+6hLp8N54FqwZynqQuI2DaZqSuz/NMiYMsXR5vHxMUfUAr3 Zqr4XOFI/z1WX2DuH1SE+V6a5euE9UlQs6nZUZ37DSzPc4HFYu7TogwtUzgoeqRd AgAdWjkbtdHkDBiVPH5V6EP4LYEODPVNaRhdztfXf6m1PfL5GfhnHIYszrY7MPoY MCzCn9gT4FwVPA8aBGDdsnUVugVKK8wMcEkJDXKHeLDHECcDd/B9QsCSmC8n+td1 Yp367OCQnBH9JEgj13U1QlOh10arrvI= -----END CERTIFICATE-----Generated at Fri Jul 4 08:30:20 2025 by rpki-client