$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa File: 4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json) Hash identifier: qqfFrKH6lslGN/3pTgIbKnxfAn/EBWglA30iiNQ8veY= Subject key identifier: 95:45:99:BF:83:3F:DE:23:12:39:CE:D8:F9:BF:15:1D:B2:36:23:89 Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F4328584B8EACE46339DB03457AE47F00 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 399989 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e4:63:39:db:03:45:7a:e4:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=0263c2aa-28f9-4e65-b00a-fc8dc6dc91ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:ee:9a:42:5f:8a:a7:0c:8f:93:8d:ee:7d: 41:c1:60:2d:ae:88:1e:14:11:cf:f1:7c:18:f1:b0: 3d:09:61:18:b7:2a:4b:78:25:9f:64:87:e7:44:ab: e0:cc:ac:e2:5e:2c:66:17:50:ca:86:8f:bf:71:94: 8a:d8:6f:cb:ed:44:d7:1e:e5:c4:60:48:4e:f9:d1: 23:53:fb:9d:ce:2d:12:34:f7:28:98:fb:ec:ac:c3: 33:37:c5:9d:c3:ef:42:e1:52:fb:d8:72:90:91:fb: 7f:54:60:9a:b9:de:7e:6c:b3:24:e9:59:b8:55:5d: 2b:05:1d:29:9b:43:b4:e1:90:68:30:fb:a9:ff:35: db:ea:96:d8:ff:07:4b:47:c5:0a:c8:3e:05:b5:e2: 9a:54:58:bc:35:f0:8d:ac:62:17:1a:65:1c:36:f0: be:86:a5:dc:c5:66:93:34:bd:9a:cb:ac:6f:a0:12: 70:50:eb:d0:7c:23:0d:0b:76:27:ae:ae:08:37:fc: b5:59:4c:2e:95:50:17:a8:48:a9:b5:cf:20:75:7e: 11:dc:6c:e9:7f:86:8d:14:08:f6:2a:eb:a2:08:d0: 65:93:62:0f:1a:8c:9d:d9:5b:f4:9c:55:89:38:6f: 97:d2:38:e7:f5:fc:1d:ca:5a:3b:1a:ff:49:cb:95: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:99:BF:83:3F:DE:23:12:39:CE:D8:F9:BF:15:1D:B2:36:23:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a3:a1:0d:19:60:a6:86:aa:f3:f4:d5:d3:66:6d:94:2b:04: 2b:5e:3a:a2:c1:9a:70:36:b5:fc:9a:ac:5f:f8:52:32:2b:ad: 7e:60:96:84:0a:f6:1e:35:da:fd:b7:b7:fe:fc:c1:1f:49:bb: bf:c5:a5:f0:fd:c8:23:ca:8e:b2:d9:e3:b9:64:13:69:56:9d: 65:7f:53:d9:cb:5d:f8:98:85:4e:44:4c:6c:56:4b:34:06:c1: 75:41:06:d9:20:44:b8:e1:49:d2:9e:1e:0f:4c:fc:93:d6:fb: 7f:5d:98:57:f3:b3:f9:79:b9:2f:91:a7:e2:e7:86:0c:73:59: 04:1b:6c:c5:9b:98:06:5b:33:bd:b9:a4:21:7b:fa:e6:57:b3: 3f:69:b2:91:b3:11:cd:01:be:3f:74:b3:c6:97:5b:d8:b3:02: 82:af:db:aa:aa:23:b9:98:07:37:62:98:50:00:96:fa:3a:4c: 3c:72:73:68:74:32:c8:e0:de:1e:c6:78:7e:a2:e4:86:f0:2e: 99:cd:3f:d1:d7:31:d4:c1:0e:1b:4d:30:71:4f:be:af:82:0c: 24:52:e7:32:90:8a:a0:fb:4f:68:09:fe:73:fa:bb:1f:82:f4: c9:2b:a5:96:ce:1d:64:de:6d:21:bd:50:b1:10:34:6c:94:ce: 1e:5c:49:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrORjOdsDRXrkfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDI2M2MyYWEtMjhmOS00ZTY1LWIwMGEtZmM4ZGM2ZGM5MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE/umkJfiqcMj5ON7n1BwWAtrogeFBHP8XwY 8bA9CWEYtypLeCWfZIfnRKvgzKziXixmF1DKho+/cZSK2G/L7UTXHuXEYEhO+dEj U/udzi0SNPcomPvsrMMzN8Wdw+9C4VL72HKQkft/VGCaud5+bLMk6Vm4VV0rBR0p m0O04ZBoMPup/zXb6pbY/wdLR8UKyD4FteKaVFi8NfCNrGIXGmUcNvC+hqXcxWaT NL2ay6xvoBJwUOvQfCMNC3Ynrq4IN/y1WUwulVAXqEiptc8gdX4R3Gzpf4aNFAj2 KuuiCNBlk2IPGoyd2Vv0nFWJOG+X0jjn9fwdylo7Gv9Jy5XGNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVFmb+DP94jEjnO2Pm/FR2yNiOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvNGE0OGUyMGEtMGUyOS0z ZTFmLWE4MWUtNGE3MmI3NDJlNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHujoQ0ZYKaGqvP01dNmbZQrBCteOqLBmnA2tfyarF/4UjIrrX5gloQK 9h412v23t/78wR9Ju7/FpfD9yCPKjrLZ47lkE2lWnWV/U9nLXfiYhU5ETGxWSzQG wXVBBtkgRLjhSdKeHg9M/JPW+39dmFfzs/l5uS+Rp+LnhgxzWQQbbMWbmAZbM725 pCF7+uZXsz9pspGzEc0Bvj90s8aXW9izAoKv26qqI7mYBzdimFAAlvo6TDxyc2h0 Msjg3h7GeH6i5IbwLpnNP9HXMdTBDhtNMHFPvq+CDCRS5zKQiqD7T2gJ/nP6ux+C 9MkrpZbOHWTebSG9ULEQNGyUzh5cSbs= -----END CERTIFICATE-----Generated at Sun Nov 2 21:47:48 2025 by rpki-client