$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86befc5e-9d2f-3fe1-9990-6394ab144e48.roa File: 86befc5e-9d2f-3fe1-9990-6394ab144e48.roa (raw, json) Hash identifier: EQLzxlFFl1mvUmetuUuZLvzXT0TsDZrJ2F9621+FpLQ= Subject key identifier: 64:11:0C:3D:BE:19:13:80:7C:99:D0:62:F4:B0:07:8A:5F:1E:18:F7 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B04ED114F8604720CA023C000 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86befc5e-9d2f-3fe1-9990-6394ab144e48.roa Signing time: Fri 29 Aug 2025 16:48:36 +0000 ROA not before: Fri 29 Aug 2025 16:48:36 +0000 ROA not after: Thu 27 Nov 2025 17:48:36 +0000 asID: 58212 IP address blocks: 74.81.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:ed:11:4f:86:04:72:0c:a0:23:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 29 16:48:36 2025 GMT Not After : Nov 27 17:48:36 2025 GMT Subject: CN=f2c2ff07-c324-4c51-9227-9ca2e99d4471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:88:d1:f0:89:d5:5e:a2:95:a4:fb:eb:1a: 08:d1:89:61:d3:76:d8:a3:bb:8c:6b:08:8d:09:39: cc:67:18:73:99:97:f5:75:cd:8f:c7:76:ad:7b:7f: 59:26:2e:81:d1:8c:97:ef:32:50:96:1b:07:c1:04: b4:0e:cd:9c:94:9e:05:79:3f:ba:6a:71:09:d5:35: 46:72:71:24:33:97:c2:67:86:c5:8c:23:a4:36:c9: c1:93:0e:ba:ea:8c:90:bb:58:d3:8c:fc:e6:ac:bd: b8:06:45:08:f0:f3:2a:61:2c:7b:7c:28:36:9c:9c: 4d:e1:42:81:b3:78:fc:1d:c7:5f:6d:71:42:24:08: c1:57:7c:31:99:4d:7b:62:f1:11:4a:90:58:c9:be: 25:13:d9:3e:f5:62:01:51:6b:11:49:54:5c:2c:ca: 58:27:24:ae:92:e5:59:95:ba:82:fb:2a:82:19:b9: ae:c9:08:f3:71:ca:e6:d1:4d:55:e0:25:43:4a:a1: 5e:84:d2:d1:52:20:29:4e:3f:64:87:16:4a:55:f1: c4:40:a5:51:3e:f7:5d:f8:98:55:99:25:7b:ea:14: 56:2f:47:45:91:57:a3:ba:57:f2:ae:f4:f6:7e:af: 34:f3:1b:f2:b5:91:21:c7:d9:7a:49:d8:8a:fe:7c: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:11:0C:3D:BE:19:13:80:7C:99:D0:62:F4:B0:07:8A:5F:1E:18:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86befc5e-9d2f-3fe1-9990-6394ab144e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 74.81.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:80:38:1c:4a:9a:d1:5f:7d:a0:3c:d2:a7:25:3d:ea:23:31: cc:00:77:51:2b:ad:3d:59:ef:25:0c:7b:66:6c:ae:29:71:8f: 63:ff:67:10:07:7d:53:2d:d4:c5:76:39:92:0a:66:1f:db:73: f2:a5:51:3e:82:3f:26:0f:c4:1f:38:04:2b:45:c1:f6:17:65: e6:f3:ff:f3:e6:bb:3e:3c:cf:cd:bb:70:79:9f:1a:d4:41:44: 54:0a:94:39:17:38:0a:b7:dc:48:d9:6f:f1:08:28:62:81:8b: f1:08:66:d2:be:55:2a:10:dd:52:63:68:3c:ce:2b:0b:ef:ee: fe:20:8c:b3:6b:56:86:8c:16:e9:44:96:70:d0:50:6a:03:a2: 09:10:b4:5a:e8:05:0c:4c:4f:33:b6:bb:14:87:f0:d6:a5:a9: 60:0d:2a:e8:da:c6:e4:21:8f:c6:ed:8d:29:aa:aa:d6:89:70: a1:24:e1:7c:53:97:0f:1d:33:b9:47:24:3e:78:98:28:13:3f: 12:90:d8:13:88:ed:54:fa:93:60:0d:16:72:e4:90:08:78:91: 76:a6:67:e1:06:32:e4:30:ad:a6:31:8d:c7:71:2d:eb:d0:92: 7b:75:73:88:09:e3:29:74:55:8c:72:8a:87:19:76:ee:6f:91: 73:d4:cd:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsE7RFPhgRyDKAjwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDgyOTE2NDgzNloXDTI1MTEyNzE3NDgzNlowLzEtMCsGA1UEAxMk ZjJjMmZmMDctYzMyNC00YzUxLTkyMjctOWNhMmU5OWQ0NDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT6I0fCJ1V6ilaT76xoI0Ylh03bYo7uMawiN CTnMZxhzmZf1dc2Px3ate39ZJi6B0YyX7zJQlhsHwQS0Ds2clJ4FeT+6anEJ1TVG cnEkM5fCZ4bFjCOkNsnBkw666oyQu1jTjPzmrL24BkUI8PMqYSx7fCg2nJxN4UKB s3j8HcdfbXFCJAjBV3wxmU17YvERSpBYyb4lE9k+9WIBUWsRSVRcLMpYJySukuVZ lbqC+yqCGbmuyQjzccrm0U1V4CVDSqFehNLRUiApTj9khxZKVfHEQKVRPvdd+JhV mSV76hRWL0dFkVejulfyrvT2fq808xvytZEhx9l6SdiK/nxO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQRDD2+GROAfJnQYvSwB4pfHhj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODZiZWZjNWUtOWQyZi0z ZmUxLTk5OTAtNjM5NGFiMTQ0ZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2AOBxKmtFffaA80qclPeojMcwAd1ErrT1Z7yUMe2Zsrilxj2P/ZxAH fVMt1MV2OZIKZh/bc/KlUT6CPyYPxB84BCtFwfYXZebz//Pmuz48z827cHmfGtRB RFQKlDkXOAq33EjZb/EIKGKBi/EIZtK+VSoQ3VJjaDzOKwvv7v4gjLNrVoaMFulE lnDQUGoDogkQtFroBQxMTzO2uxSH8NalqWANKujaxuQhj8btjSmqqtaJcKEk4XxT lw8dM7lHJD54mCgTPxKQ2BOI7VT6k2ANFnLkkAh4kXamZ+EGMuQwraYxjcdxLevQ knt1c4gJ4yl0VYxyiocZdu5vkXPUzQk= -----END CERTIFICATE-----Generated at Sun Sep 7 12:35:38 2025 by rpki-client