$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9c22a77f-5ebb-3174-a95a-fcd6b19eb99f.roa File: 9c22a77f-5ebb-3174-a95a-fcd6b19eb99f.roa (raw, json) Hash identifier: HISlTG3xK2tOZUjeaCsBT7DPaB1j0A3KkFAHwmxktu4= Subject key identifier: 83:B2:33:36:EA:40:92:B0:0F:28:9C:C8:D1:A2:C8:CE:61:4B:A1:D4 Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F4328584A4DA03DE86F72E88CB8FEC080 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9c22a77f-5ebb-3174-a95a-fcd6b19eb99f.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 31898 IP address blocks: 74.91.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3d:e8:6f:72:e8:8c:b8:fe:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=f5ba2598-4e53-44a1-85ef-d43a450cfd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:d9:0d:8e:e8:1c:3a:d8:ee:c3:02:d7:9f: c1:f4:30:f3:99:f1:26:b0:13:f3:20:25:e1:b4:3a: a2:0b:81:17:fd:b6:09:2b:30:5f:ba:f3:de:6f:4b: 5e:a3:25:cc:8f:5d:41:4f:d2:fa:1c:8d:83:9d:e1: c1:5b:ea:5f:5a:81:e9:e5:7f:20:79:09:18:f7:37: c4:d5:13:15:5d:4c:e6:9a:ce:a4:12:85:8f:6b:e3: dd:11:47:4d:58:20:8a:2e:23:6f:1b:80:04:44:cd: 01:e3:eb:f8:96:e8:ff:58:69:d3:1b:80:31:2f:a2: 8c:eb:d9:71:6a:17:ac:bf:a1:33:4d:65:99:21:49: 62:29:80:15:e9:9a:bf:2d:8c:4c:2b:8f:db:31:4a: 9d:ae:41:42:01:67:55:eb:31:be:a9:0f:db:71:a1: 15:da:3b:c6:e2:36:2a:54:97:0f:2a:3c:60:83:58: 1f:b9:44:e4:35:71:f4:4e:0d:06:30:c2:63:76:eb: c3:0a:5a:7f:8f:41:ae:63:0f:3e:04:3f:79:2e:7e: fb:1b:ca:60:8d:c5:1a:6f:60:18:68:25:15:00:ee: b7:41:f6:9e:c9:02:63:bc:fd:3a:87:25:64:ba:06: da:63:a0:9c:b6:48:55:92:b8:01:88:f9:d7:a4:34: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B2:33:36:EA:40:92:B0:0F:28:9C:C8:D1:A2:C8:CE:61:4B:A1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9c22a77f-5ebb-3174-a95a-fcd6b19eb99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 74.91.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b9:b9:bd:73:d3:d1:cc:2f:90:48:dd:27:e8:9d:7f:72:0f: 90:03:66:86:a9:36:9c:23:7b:b3:e9:24:39:17:23:3b:d0:ca: ff:ea:98:de:0b:d8:76:8e:6e:b7:3b:e1:a2:45:ad:0e:5f:54: ec:34:09:2b:24:1f:e1:4e:9e:9b:e7:d3:ec:29:9e:75:fd:38: e0:dd:d4:6f:f0:85:c0:c8:85:24:99:35:a9:ae:8c:8f:de:4d: e5:1b:91:9e:77:68:cd:48:d5:09:ec:1d:f3:61:6c:86:0d:0e: 11:29:72:b8:08:dd:55:41:44:f7:5f:7f:03:7e:c8:1e:7c:39: 3b:6f:cd:e0:a3:7a:30:4f:e4:87:5e:04:4c:4b:23:2f:c4:ba: 25:10:4c:ca:db:71:52:04:7e:e4:85:b0:42:e0:6c:86:11:3d: b9:bc:37:8d:d2:be:b7:d1:8b:e7:31:6c:76:41:94:d8:b9:2a: fa:54:fc:96:19:3e:54:7e:c4:01:08:1d:5b:b4:e5:33:35:a0: 45:af:8d:6d:e9:16:5c:43:c1:92:5e:3a:1f:2f:2f:d0:cb:99: 08:f2:8e:87:6b:10:e4:8a:49:b9:35:b1:8e:37:7d:b6:5f:93: bf:d1:bb:5e:90:5d:54:96:a2:d3:b1:f8:6c:1d:b5:97:7d:dc: 26:8f:0e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoD3ob3LojLj+wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjViYTI1OTgtNGU1My00NGExLTg1ZWYtZDQzYTQ1MGNmZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXjZDY7oHDrY7sMC15/B9DDzmfEmsBPzICXh tDqiC4EX/bYJKzBfuvPeb0teoyXMj11BT9L6HI2DneHBW+pfWoHp5X8geQkY9zfE 1RMVXUzmms6kEoWPa+PdEUdNWCCKLiNvG4AERM0B4+v4luj/WGnTG4AxL6KM69lx ahesv6EzTWWZIUliKYAV6Zq/LYxMK4/bMUqdrkFCAWdV6zG+qQ/bcaEV2jvG4jYq VJcPKjxgg1gfuUTkNXH0Tg0GMMJjduvDClp/j0GuYw8+BD95Ln77G8pgjcUab2AY aCUVAO63QfaeyQJjvP06hyVkugbaY6CctkhVkrgBiPnXpDQdVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOyMzbqQJKwDyicyNGiyM5hS6HUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvOWMyMmE3N2YtNWViYi0z MTc0LWE5NWEtZmNkNmIxOWViOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSluAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe5ub1z09HML5BI3SfonX9yD5ADZoapNpwje7PpJDkXIzvQyv/qmN4L 2HaObrc74aJFrQ5fVOw0CSskH+FOnpvn0+wpnnX9OODd1G/whcDIhSSZNamujI/e TeUbkZ53aM1I1QnsHfNhbIYNDhEpcrgI3VVBRPdffwN+yB58OTtvzeCjejBP5Ide BExLIy/EuiUQTMrbcVIEfuSFsELgbIYRPbm8N43SvrfRi+cxbHZBlNi5KvpU/JYZ PlR+xAEIHVu05TM1oEWvjW3pFlxDwZJeOh8vL9DLmQjyjodrEOSKSbk1sY43fbZf k7/Ru16QXVSWotOx+GwdtZd93CaPDiQ= -----END CERTIFICATE-----Generated at Sun Jun 29 14:28:58 2025 by rpki-client