$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa File: a8a014a5-2be6-3918-9e0a-0f728c23059e.roa (raw, json) Hash identifier: hzEjAEh1cGY+McRKzc4yg1irwAdv8KIxz7Bnc7w5/fw= Subject key identifier: 82:7F:18:28:BB:EC:C8:FA:50:B1:F9:95:37:8F:64:E1:AA:D5:E7:5D Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F4328584A4C3B0DD02308FAD35E145580 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 23352 IP address blocks: 74.113.150.0/24 maxlen: 24 2620:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0d:d0:23:08:fa:d3:5e:14:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=e29dc1ec-4cc3-42aa-83e9-8f4798a8286a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:38:65:db:66:64:2a:60:34:f0:d4:94:70: c1:e6:cb:ac:00:42:78:6d:4b:d4:a0:06:8c:89:4a: 7f:6b:29:3b:da:a4:63:2f:a2:fb:fe:ed:5b:98:f0: 15:83:e8:c6:88:ac:e3:6a:b4:b2:c7:4f:42:29:b8: 4b:e3:f7:50:15:d0:0c:a6:1b:c1:3e:42:f9:b3:fe: d0:a9:c6:fd:12:8e:1c:99:26:23:9a:b1:d0:a2:66: 93:70:c2:7b:fa:f7:c8:49:44:29:f4:02:78:b4:2e: ea:58:0d:74:d8:78:54:ac:3c:f8:47:b1:ac:48:b7: 99:11:03:8b:8f:6d:5c:72:fc:af:73:12:eb:35:12: 70:6a:77:62:73:3b:a2:14:d2:83:61:68:d1:50:43: ca:1f:1b:31:26:82:5b:14:4f:f8:4d:7f:64:8d:98: 73:8d:79:51:94:f7:61:7e:46:0c:21:61:6e:01:fc: 41:7b:c4:55:19:6e:25:40:e7:e1:2c:bf:b4:d1:ae: 3a:54:64:df:5d:b4:aa:d8:e9:3d:cc:f8:3a:bd:b0: 61:20:0b:ce:28:96:bd:0e:9c:9f:af:53:95:f3:e2: 22:23:87:7b:ac:95:46:82:1f:42:74:4a:97:00:5a: 18:93:71:96:8e:90:ba:cd:bf:f7:a1:9a:7e:06:58: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7F:18:28:BB:EC:C8:FA:50:B1:F9:95:37:8F:64:E1:AA:D5:E7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 74.113.150.0/24 IPv6: 2620:7d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d5:95:ef:08:7f:65:ca:d1:d4:74:00:cd:67:7f:2a:4d:0e: 56:23:f5:1e:9a:b3:65:3e:3f:fa:3b:a9:31:ff:e4:21:3f:6e: 00:3f:8e:6b:da:e8:cf:a1:3b:f1:c0:b7:50:e3:bc:dd:5f:b1: 8f:8f:9e:f4:1e:dd:0f:81:59:17:13:a9:d9:5d:c8:89:a7:40: 63:47:46:99:8b:43:4f:11:b7:18:46:e3:7e:43:18:07:32:12: 03:a6:48:b3:c9:39:2f:fd:de:06:f9:b6:c8:6f:0a:89:d0:04: 73:f1:3c:1f:1f:4f:bf:9e:36:d2:e6:4f:9a:77:78:c6:4c:b4: 4e:70:2d:20:21:70:96:21:54:51:50:43:87:c2:d7:98:1b:68: 5a:0d:90:2b:f7:e7:31:e0:77:26:92:a3:a8:97:ea:5f:83:2f: 0c:6d:61:7e:15:ea:d6:f9:89:ed:b8:06:ec:ec:e1:44:8d:ed: 78:23:2a:2e:ba:2f:28:da:88:d1:74:d4:68:53:ac:ac:8d:04: ab:7b:e5:64:03:b1:99:90:b2:69:23:b0:83:39:92:3d:69:8c: 36:d3:df:d1:61:d1:b1:1a:02:06:74:a2:73:b5:ec:19:9a:85: 23:de:8d:84:30:75:70:04:36:a7:14:f7:3e:06:25:82:1d:4d: 44:8c:02:67 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEpMOw3QIwj6014UVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZTI5ZGMxZWMtNGNjMy00MmFhLTgzZTktOGY0Nzk4YTgyODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu44ZdtmZCpgNPDUlHDB5susAEJ4bUvUoAaM iUp/ayk72qRjL6L7/u1bmPAVg+jGiKzjarSyx09CKbhL4/dQFdAMphvBPkL5s/7Q qcb9Eo4cmSYjmrHQomaTcMJ7+vfISUQp9AJ4tC7qWA102HhUrDz4R7GsSLeZEQOL j21ccvyvcxLrNRJwandiczuiFNKDYWjRUEPKHxsxJoJbFE/4TX9kjZhzjXlRlPdh fkYMIWFuAfxBe8RVGW4lQOfhLL+00a46VGTfXbSq2Ok9zPg6vbBhIAvOKJa9Dpyf r1OV8+IiI4d7rJVGgh9CdEqXAFoYk3GWjpC6zb/3oZp+BlhD1wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIJ/GCi77Mj6ULH5lTePZOGq1eddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvYThhMDE0YTUtMmJlNi0z OTE4LTllMGEtMGY3MjhjMjMwNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASnGWMA8E AgACMAkDBwAmIAB9AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVNWV7wh/ZcrR1HQAzWd/Kk0OViP1Hpqz ZT4/+jupMf/kIT9uAD+Oa9roz6E78cC3UOO83V+xj4+e9B7dD4FZFxOp2V3IiadA Y0dGmYtDTxG3GEbjfkMYBzISA6ZIs8k5L/3eBvm2yG8KidAEc/E8Hx9Pv5420uZP mnd4xky0TnAtICFwliFUUVBDh8LXmBtoWg2QK/fnMeB3JpKjqJfqX4MvDG1hfhXq 1vmJ7bgG7OzhRI3teCMqLrovKNqI0XTUaFOsrI0Eq3vlZAOxmZCyaSOwgzmSPWmM NtPf0WHRsRoCBnSic7XsGZqFI96NhDB1cAQ2pxT3PgYlgh1NRIwCZw== -----END CERTIFICATE-----Generated at Tue Jul 1 15:18:19 2025 by rpki-client