$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa File: 84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa (raw, json) Hash identifier: cHIbrTxMeJHG7ylzz9fe6Ql9BFtX6vHYGO8bT34kaLc= Subject key identifier: 67:A8:C4:8C:2F:EE:CD:98:54:B3:CB:F6:1A:39:BD:2E:F3:BE:E7:EB Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB057CCB8B9EAA3CAF7E40 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 74.126.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:05:7c:cb:8b:9e:aa:3c:af:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=ab5315e3-ecd8-4c6a-bef8-c26993f28f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:ba:15:f5:66:1c:ef:16:eb:34:7d:14:ce: 32:de:a7:b4:72:a6:6a:7b:79:41:b4:86:1a:da:ab: 18:86:d3:c4:d5:9a:ba:49:4d:d5:73:67:c3:6e:91: 14:91:0f:df:2a:f1:7e:50:1d:21:a6:b5:42:33:58: c9:f5:a7:21:f4:19:88:43:6b:7c:39:ab:b8:36:0e: c9:17:e9:11:0f:6e:29:73:30:1c:f8:a8:04:6d:af: f2:96:04:a5:1a:ac:67:f5:c5:f9:91:d7:43:35:c5: 5a:1f:71:d8:e3:84:b4:72:c3:5a:d0:7d:21:7a:0e: a7:01:61:6b:0a:05:cb:1d:95:13:f3:9b:a1:85:8b: 54:73:53:59:6d:8a:ed:24:44:04:61:6b:c1:cf:b1: 50:a8:14:15:d5:4d:3a:aa:47:d5:bb:0b:c0:40:d5: e7:f6:fc:ba:4e:b6:32:06:9c:99:89:33:81:bc:ae: 48:c1:89:b3:0a:8b:87:0a:e4:77:bb:c1:65:e9:8d: 78:0c:38:88:4a:f5:88:3f:97:c2:dd:5f:04:ff:81: 6f:2d:c5:0c:d4:53:31:61:8b:b8:28:bf:bd:a2:bc: b9:79:5e:5e:26:0b:77:eb:7c:a9:95:2b:67:6f:29: 6a:76:0a:b0:c4:8d:57:35:34:69:1b:71:cb:7a:66: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A8:C4:8C:2F:EE:CD:98:54:B3:CB:F6:1A:39:BD:2E:F3:BE:E7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:ac:60:e5:ad:c9:06:bf:c5:ee:a9:3c:b2:cb:8f:d4:a8: 15:be:c9:6e:83:0c:68:1e:e6:30:d3:dd:57:9f:43:08:f4:76: cb:98:7a:31:38:43:e0:02:d5:4b:0a:8b:0a:30:70:51:b4:fb: f5:71:69:b6:a0:44:ce:69:3e:f2:e5:33:10:56:2f:13:b5:ff: 6a:23:f2:8b:be:be:55:cc:d9:bd:1d:85:a4:23:64:29:d9:26: 65:18:a0:49:d9:06:0c:34:be:6d:53:08:80:55:6f:66:08:fe: a1:97:45:e5:2b:e7:3c:54:2d:b4:46:d1:e0:a6:05:5c:66:f3: 85:c8:6c:55:5e:20:54:f1:b1:2d:12:13:22:48:32:09:40:03: 8e:0d:61:e3:75:31:c0:82:f7:66:ea:02:c1:01:79:56:eb:bf: 9a:af:40:63:f2:d5:05:7a:41:13:5a:1e:65:c1:aa:4f:ab:09: 74:b6:16:49:27:62:9f:28:43:41:2a:36:ca:6b:ee:1c:96:1b: f7:2d:b2:3d:8a:f2:d6:1e:1c:86:76:46:25:ab:52:14:2b:f5: ab:53:3e:f9:f2:b9:ca:7b:07:be:8a:8f:6f:3e:2c:5c:9e:42: 67:a6:6e:79:94:7f:3d:48:a2:ac:49:c7:1e:db:ca:43:16:83: 86:a8:80:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywV8y4ueqjyvfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YWI1MzE1ZTMtZWNkOC00YzZhLWJlZjgtYzI2OTkzZjI4ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg66FfVmHO8W6zR9FM4y3qe0cqZqe3lBtIYa 2qsYhtPE1Zq6SU3Vc2fDbpEUkQ/fKvF+UB0hprVCM1jJ9ach9BmIQ2t8Oau4Ng7J F+kRD24pczAc+KgEba/ylgSlGqxn9cX5kddDNcVaH3HY44S0csNa0H0heg6nAWFr CgXLHZUT85uhhYtUc1NZbYrtJEQEYWvBz7FQqBQV1U06qkfVuwvAQNXn9vy6TrYy BpyZiTOBvK5IwYmzCouHCuR3u8Fl6Y14DDiISvWIP5fC3V8E/4FvLcUM1FMxYYu4 KL+9ory5eV5eJgt363yplStnbylqdgqwxI1XNTRpG3HLembsZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeoxIwv7s2YVLPL9ho5vS7zvufrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvODRlNWU3ZmUtYmYxZi0z MWQ1LTkzODYtNGJjYWNmNWMyMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqrGDlrckGv8XuqTyyy4/UqBW+yW6DDGge5jDT3VefQwj0dsuYejE4 Q+AC1UsKiwowcFG0+/VxabagRM5pPvLlMxBWLxO1/2oj8ou+vlXM2b0dhaQjZCnZ JmUYoEnZBgw0vm1TCIBVb2YI/qGXReUr5zxULbRG0eCmBVxm84XIbFVeIFTxsS0S EyJIMglAA44NYeN1McCC92bqAsEBeVbrv5qvQGPy1QV6QRNaHmXBqk+rCXS2Fkkn Yp8oQ0EqNspr7hyWG/ctsj2K8tYeHIZ2RiWrUhQr9atTPvnyucp7B76Kj28+LFye QmembnmUfz1IoqxJxx7bykMWg4aogJw= -----END CERTIFICATE-----Generated at Fri Jul 4 08:08:58 2025 by rpki-client