$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa File: 4a94a50c-a556-39b0-83af-a1d6940051da.roa (raw, json) Hash identifier: cSnwAZMxYSPiBMh9pjjK+91yBK2szeqyDwOguqM5tes= Subject key identifier: D2:35:36:85:9D:34:8A:18:4C:7D:FC:3D:FE:15:D6:26:4A:B9:E3:DB Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Certificate serial: 010D0C9F4328584B7DECA4F3348C73E4DDF92A00 Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 18491 IP address blocks: 74.220.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a4:f3:34:8c:73:e4:dd:f9:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=dc22caa0-154a-4cc9-b807-6d90ddde0f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:98:a6:5a:4c:bf:ab:d4:9c:93:9c:34:8b: a1:ab:e7:2a:ce:09:79:10:f6:a8:10:69:25:e7:61: 17:9a:6d:88:54:fd:89:d5:17:78:a9:1e:f8:b0:19: fa:bd:0f:02:ed:99:38:2c:0f:21:5b:7f:04:41:08: 16:f0:33:27:46:b5:37:37:83:29:3b:63:b5:2e:24: 53:97:78:ad:21:a7:9b:74:23:d6:5a:30:51:eb:fc: 82:f3:ed:b4:41:4a:da:12:10:5e:aa:cb:af:e5:b5: f5:59:ac:f5:a0:31:41:0d:95:fd:b8:0b:08:75:89: ca:52:24:fd:a2:ef:e5:b8:48:f0:a0:30:62:6c:47: 51:77:20:8e:0a:c7:b8:98:15:8f:98:bf:dc:1b:fe: 15:46:96:03:c0:e7:ea:b5:cf:e7:22:83:2c:3c:ea: 52:5a:63:95:a4:16:d6:71:6e:11:d7:81:04:f7:e4: eb:5d:51:de:6d:e4:cc:72:75:54:3b:33:fc:7f:ee: a0:b9:53:28:f5:d7:aa:ea:65:01:ee:64:9b:de:2f: a6:97:7c:ec:2f:29:c2:85:d2:94:0e:a6:4c:a9:ab: 03:f1:e1:4f:1b:5a:d7:92:43:10:91:ce:44:d7:47: c5:e5:6f:60:62:b0:ce:8e:62:97:a2:be:cd:9c:a1: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:35:36:85:9D:34:8A:18:4C:7D:FC:3D:FE:15:D6:26:4A:B9:E3:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl X509v3 Authority Key Identifier: keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer sbgp-ipAddrBlock: critical IPv4: 74.220.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9d:74:7e:a1:40:d5:10:b3:94:8f:4b:7d:dd:0d:3c:3c:ca: a7:be:f6:97:55:77:da:43:62:36:48:f4:16:cf:2c:a4:a0:c8: c3:ff:7c:8e:64:59:e0:0d:09:ea:41:72:bb:3c:77:b8:c1:46: cd:77:a4:71:98:df:cc:d5:82:86:b0:30:b6:97:a2:6e:13:c1: 73:d1:23:f3:40:ba:2b:ea:98:c8:9e:48:49:48:a0:8d:76:1f: d0:6d:81:37:a4:2b:d6:71:df:e5:9a:c4:80:09:82:d8:86:dc: 17:e6:5a:6b:1d:a0:f4:7f:16:4e:a4:c6:71:46:6c:d5:2e:fd: 3c:14:8f:96:2d:c1:f4:78:5b:2b:2e:aa:fa:52:05:a3:4f:6c: 57:04:3c:a9:fe:51:41:f1:43:e4:23:6c:43:82:6d:ef:54:f6: 0b:12:aa:b0:f5:53:91:7a:4f:fd:11:ef:35:95:72:59:f0:2d: 9e:e7:d2:3f:6b:e1:d4:5b:67:61:63:ef:0f:78:5f:e4:8b:1f: 8f:10:66:76:fe:6f:f4:00:cb:9d:bf:58:94:85:15:56:71:60: 2c:5a:34:fa:29:02:b4:af:17:66:fb:54:af:ba:18:56:91:8a: 17:96:4a:55:7b:24:c3:7b:c5:e4:8e:f8:82:26:cf:04:d2:93: 13:19:7d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KTzNIxz5N35KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj MTZiMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGMyMmNhYTAtMTU0YS00Y2M5LWI4MDctNmQ5MGRkZGUwZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8qYplpMv6vUnJOcNIuhq+cqzgl5EPaoEGkl 52EXmm2IVP2J1Rd4qR74sBn6vQ8C7Zk4LA8hW38EQQgW8DMnRrU3N4MpO2O1LiRT l3itIaebdCPWWjBR6/yC8+20QUraEhBeqsuv5bX1Waz1oDFBDZX9uAsIdYnKUiT9 ou/luEjwoDBibEdRdyCOCse4mBWPmL/cG/4VRpYDwOfqtc/nIoMsPOpSWmOVpBbW cW4R14EE9+TrXVHebeTMcnVUOzP8f+6guVMo9deq6mUB7mSb3i+ml3zsLynChdKU DqZMqasD8eFPG1rXkkMQkc5E10fF5W9gYrDOjmKXor7NnKFy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI1NoWdNIoYTH38Pf4V1iZKuePbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvNGE5NGE1MGMtYTU1Ni0z OWIwLTgzYWYtYTFkNjk0MDA1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0 YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmddH6hQNUQs5SPS33dDTw8yqe+9pdVd9pDYjZI9BbPLKSgyMP/fI5k WeANCepBcrs8d7jBRs13pHGY38zVgoawMLaXom4TwXPRI/NAuivqmMieSElIoI12 H9BtgTekK9Zx3+WaxIAJgtiG3BfmWmsdoPR/Fk6kxnFGbNUu/TwUj5YtwfR4Wysu qvpSBaNPbFcEPKn+UUHxQ+QjbEOCbe9U9gsSqrD1U5F6T/0R7zWVclnwLZ7n0j9r 4dRbZ2Fj7w94X+SLH48QZnb+b/QAy52/WJSFFVZxYCxaNPopArSvF2b7VK+6GFaR iheWSlV7JMN7xeSO+IImzwTSkxMZfe4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:46 2025 by rpki-client