$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa File: 7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa (raw, json) Hash identifier: p7+nFEd23+bDxpKcf2ZVE5Q7T36NcUQ2nyPYWfgdPbY= Subject key identifier: 18:14:50:6D:AA:3D:87:30:60:07:9D:9E:80:20:4B:3B:79:52:9F:68 Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F4328584A4C3B0E042939CB904C266480 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 14766 IP address blocks: 74.113.148.0/24 maxlen: 24 2620:7d:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0e:04:29:39:cb:90:4c:26:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=35c5b554-545d-4645-8e83-6f4808784b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:c8:ba:18:79:5f:02:a6:50:13:65:b2:1a: 89:a6:e0:37:92:01:07:21:7d:73:43:f6:03:e0:60: 22:bf:61:e5:f4:57:e7:6a:4b:d0:90:7c:4e:55:57: c9:2f:2c:20:1c:c7:6c:9a:b7:84:47:d0:54:75:9f: 78:56:45:40:69:df:9d:1c:9c:f2:a2:5b:d3:c4:d6: 7e:fb:6f:7e:6f:35:f2:a8:6a:bf:a8:c3:c9:8d:d9: f4:8b:19:79:e2:49:93:90:f1:47:66:b1:2b:87:bf: d7:dc:58:35:61:b3:e6:b5:22:1e:ed:39:25:d1:fa: ff:bf:74:eb:d0:86:ba:29:4a:67:0f:7c:4a:79:39: 84:fe:8f:50:c9:f0:f9:48:72:f1:d6:0e:c3:61:b0: 0f:07:44:38:52:24:e8:5e:10:e9:9f:31:3c:1b:65: 7e:d6:e7:a0:75:31:f1:40:22:34:23:5d:d3:fa:f0: 2f:84:67:a0:38:94:73:33:36:a0:03:44:55:90:48: b7:ca:3e:66:24:3e:2b:19:f2:f5:a6:97:b8:b3:83: 04:07:26:bc:01:9b:22:18:da:3c:27:b0:32:9b:00: a1:7d:b1:70:4b:ca:4d:9b:05:13:db:a7:89:d4:7a: 84:08:66:3a:43:d5:9a:31:c8:ef:b3:6e:3b:c9:69: 42:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:14:50:6D:AA:3D:87:30:60:07:9D:9E:80:20:4B:3B:79:52:9F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 74.113.148.0/24 IPv6: 2620:7d:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2d:80:13:ba:cf:e7:e8:52:9d:09:9d:71:cb:f8:da:f0:59: 90:a5:61:f5:a0:b8:0e:b3:17:86:8b:61:86:a7:48:17:1c:ae: 91:3d:1a:fe:e5:4b:07:39:02:b8:47:d5:f5:6d:1f:e7:a6:3d: 41:fa:86:e8:00:90:8b:c3:3c:06:c2:af:d2:7e:be:65:30:7c: d9:2e:6f:af:23:41:d2:e8:54:a7:75:2b:47:e0:40:d8:fc:5d: ef:5e:df:81:af:55:8e:fd:46:f7:cc:0e:61:64:09:89:38:60: 5a:f5:fe:c4:58:c3:8f:3f:a6:70:af:e6:6f:1f:95:a4:3c:2d: 85:1f:14:3c:5c:c5:cb:40:0c:46:5d:bf:90:ef:ed:fa:b5:f5: 9c:23:43:e1:a4:d5:0f:3d:00:41:de:10:35:da:38:87:f0:c2: 02:8c:2f:08:7d:03:56:63:6f:a8:da:ec:45:d6:d2:e6:92:b0: 56:05:c6:48:e9:29:fb:60:7a:3e:48:c5:af:e6:d6:37:32:b6: 6d:3a:76:15:bb:0b:c7:b6:36:49:f3:e0:4e:4e:41:d2:b9:ab: 1e:c2:f1:44:07:b6:1f:52:02:ba:bd:ff:dc:99:bc:2b:a2:05: 3e:c1:0e:5b:2e:8a:82:37:0b:64:73:d2:de:49:54:05:e5:cf: fb:10:d0:dd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEpMOw4EKTnLkEwmZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MzVjNWI1NTQtNTQ1ZC00NjQ1LThlODMtNmY0ODA4Nzg0YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpDIuhh5XwKmUBNlshqJpuA3kgEHIX1zQ/YD 4GAiv2Hl9FfnakvQkHxOVVfJLywgHMdsmreER9BUdZ94VkVAad+dHJzyolvTxNZ+ +29+bzXyqGq/qMPJjdn0ixl54kmTkPFHZrErh7/X3Fg1YbPmtSIe7Tkl0fr/v3Tr 0Ia6KUpnD3xKeTmE/o9QyfD5SHLx1g7DYbAPB0Q4UiToXhDpnzE8G2V+1uegdTHx QCI0I13T+vAvhGegOJRzMzagA0RVkEi3yj5mJD4rGfL1ppe4s4MEBya8AZsiGNo8 J7AymwChfbFwS8pNmwUT26eJ1HqECGY6Q9WaMcjvs247yWlC6QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBgUUG2qPYcwYAednoAgSzt5Up9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvN2RmMzdhMmQtYjlmMy0z YzQxLTg0YjMtNGEwNGI0NTY1ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASnGUMA8E AgACMAkDBwAmIAB9AAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIC2AE7rP5+hSnQmdccv42vBZkKVh9aC4 DrMXhothhqdIFxyukT0a/uVLBzkCuEfV9W0f56Y9QfqG6ACQi8M8BsKv0n6+ZTB8 2S5vryNB0uhUp3UrR+BA2Pxd717fga9Vjv1G98wOYWQJiThgWvX+xFjDjz+mcK/m bx+VpDwthR8UPFzFy0AMRl2/kO/t+rX1nCND4aTVDz0AQd4QNdo4h/DCAowvCH0D VmNvqNrsRdbS5pKwVgXGSOkp+2B6PkjFr+bWNzK2bTp2FbsLx7Y2SfPgTk5B0rmr HsLxRAe2H1ICur3/3Jm8K6IFPsEOWy6KgjcLZHPS3klUBeXP+xDQ3Q== -----END CERTIFICATE-----Generated at Wed Jul 2 14:48:06 2025 by rpki-client