$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa File: ce7c6a93-090d-3601-ac47-5724324b5304.roa (raw, json) Hash identifier: yHl7cISWVnXUonmYdUd87GeRA8i+6Ah9GAwJmTx2+D8= Subject key identifier: 88:42:D4:1B:B9:C4:66:4A:48:1D:34:F1:D2:CC:EF:9C:36:7E:2F:78 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AFEE69EDF7E612BA73A41D480 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 21949 IP address blocks: 74.213.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9e:df:7e:61:2b:a7:3a:41:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=9558645e-9f0a-4fa9-a9b1-91ca6b0d4c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:80:40:bb:6e:79:ea:c1:9d:20:a9:ff:7f: 6e:52:a4:01:73:ca:7e:28:a1:1f:21:d0:00:e4:e4: ad:2a:c1:4d:ff:9e:3b:9f:ae:bc:cc:a7:dc:03:96: 1e:a5:56:78:ed:3a:7b:34:a3:4d:28:33:64:e0:f4: 4a:f4:47:0d:4e:13:dc:1f:3d:94:95:d4:14:4a:e6: fc:6e:b9:28:fc:12:91:01:60:23:17:c5:2f:81:f9: ba:f7:ce:2b:75:a4:29:e1:6e:c6:ad:6b:46:46:21: aa:09:79:50:7e:cd:1e:16:31:fc:a5:5b:30:9d:5a: 1e:8d:c5:7f:45:2e:81:ab:bf:e9:95:fc:00:ff:4e: e5:0d:dd:43:b6:c1:38:38:7b:6b:12:01:c9:ff:62: 16:0d:60:ff:25:36:96:c4:b0:8c:36:94:7f:a3:0e: 83:93:42:e2:2f:91:55:d7:56:88:96:83:2c:2d:d2: d8:52:96:ed:1d:ac:b0:10:e3:55:26:fc:b0:e2:7f: 56:d9:2e:13:44:50:4c:df:2a:f6:8e:75:ab:36:59: 5c:15:5b:ad:51:d4:0b:04:44:bb:b6:66:b6:7d:21: 41:5a:eb:03:40:a5:5c:a4:32:cd:49:a8:a6:35:58: 80:ac:a2:56:02:97:a0:e5:67:39:c0:ff:d3:f0:65: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:D4:1B:B9:C4:66:4A:48:1D:34:F1:D2:CC:EF:9C:36:7E:2F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/ce7c6a93-090d-3601-ac47-5724324b5304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f7:2d:c7:32:92:74:35:90:b8:78:71:6f:f5:9e:28:47:35: 6a:0d:94:1e:55:04:9e:25:83:40:32:0a:42:2a:ab:6a:46:ee: 48:de:5c:13:c6:a0:81:2d:0e:7e:bb:ee:8d:ba:9b:fd:c7:c4: 58:86:57:ec:f1:16:4c:19:26:58:60:a7:42:fa:31:06:a8:28: bd:c0:d0:66:0f:61:07:e5:c3:5a:1f:48:63:f1:39:18:c5:e2: 1b:7c:69:2e:42:0e:b6:2d:d0:f8:26:db:e0:bf:02:31:52:09: 29:45:29:3b:60:7f:5d:58:d6:64:53:b0:ae:ee:e6:17:16:c8: 30:ef:59:e5:a4:bf:3f:69:5d:15:48:81:9d:c1:16:e6:f4:4b: 19:21:b7:30:4f:44:95:e4:cd:63:0b:cc:fd:99:96:94:bb:84: be:50:4a:37:fa:aa:e6:fb:e5:50:56:3c:6c:0b:e6:e0:28:ea: 55:86:0d:79:d0:7c:c6:ff:f6:9d:e8:01:4b:d9:48:64:5f:b2: 29:ea:23:74:0d:19:3e:e8:1c:ca:90:37:2a:a4:de:f0:bf:13: 03:0b:1f:ff:22:de:21:06:19:96:8c:f9:d5:21:cb:16:64:78: f1:39:a9:aa:27:a9:c9:0a:a8:4a:b5:04:55:3e:04:e1:76:87: cd:e3:9e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5p7ffmErpzpB1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OTU1ODY0NWUtOWYwYS00ZmE5LWE5YjEtOTFjYTZiMGQ0YzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbyAQLtueerBnSCp/39uUqQBc8p+KKEfIdAA 5OStKsFN/547n668zKfcA5YepVZ47Tp7NKNNKDNk4PRK9EcNThPcHz2UldQUSub8 brko/BKRAWAjF8Uvgfm6984rdaQp4W7GrWtGRiGqCXlQfs0eFjH8pVswnVoejcV/ RS6Bq7/plfwA/07lDd1DtsE4OHtrEgHJ/2IWDWD/JTaWxLCMNpR/ow6Dk0LiL5FV 11aIloMsLdLYUpbtHaywEONVJvyw4n9W2S4TRFBM3yr2jnWrNllcFVutUdQLBES7 tma2fSFBWusDQKVcpDLNSaimNViArKJWApeg5Wc5wP/T8GWsoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhC1Bu5xGZKSB008dLM75w2fi94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2U3YzZhOTMtMDkwZC0z NjAxLWFjNDctNTcyNDMyNGI1MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn3LccyknQ1kLh4cW/1nihHNWoNlB5VBJ4lg0AyCkIqq2pG7kjeXBPG oIEtDn677o26m/3HxFiGV+zxFkwZJlhgp0L6MQaoKL3A0GYPYQflw1ofSGPxORjF 4ht8aS5CDrYt0Pgm2+C/AjFSCSlFKTtgf11Y1mRTsK7u5hcWyDDvWeWkvz9pXRVI gZ3BFub0SxkhtzBPRJXkzWMLzP2ZlpS7hL5QSjf6qub75VBWPGwL5uAo6lWGDXnQ fMb/9p3oAUvZSGRfsinqI3QNGT7oHMqQNyqk3vC/EwMLH/8i3iEGGZaM+dUhyxZk ePE5qaonqckKqEq1BFU+BOF2h83jnqM= -----END CERTIFICATE-----Generated at Mon Sep 15 17:16:22 2025 by rpki-client