$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/12348d24-6cd1-3231-8e37-d82d9aa738c9.roa File: 12348d24-6cd1-3231-8e37-d82d9aa738c9.roa (raw, json) Hash identifier: zXH7z+SeCd/GNIOiH64nRSCcCat5v8N2tmL13Ljy3bc= Subject key identifier: 7E:41:35:23:28:0E:E4:92:FF:D2:3E:F4:61:47:A2:03:F2:15:91:EB Certificate issuer: /CN=d3a00337-0fdf-42e1-9343-424fd474da93 Certificate serial: 010D0C9F4328584B0A115885E6758E919294DC80 Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/12348d24-6cd1-3231-8e37-d82d9aa738c9.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 27398 IP address blocks: 74.123.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:58:85:e6:75:8e:91:92:94:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=076540d8-c1be-402a-a2c4-1e93ed1cda2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:ba:f5:3d:11:b7:54:26:f1:f6:ac:f8:29: 79:a7:59:fa:41:21:9d:58:c2:a8:f4:d6:5a:93:af: ec:a7:4a:70:fe:9b:e6:d5:5a:fe:3f:18:8f:19:90: da:f3:50:86:8d:2a:f9:5a:55:06:a9:e2:00:31:51: 42:da:2b:8e:09:2c:80:e6:33:78:af:8b:67:fd:24: 85:c1:d9:4a:af:f6:38:ae:ec:5f:bf:ae:6f:0b:5f: ab:76:52:30:b3:85:f4:11:3c:0e:c1:53:7c:89:9d: 70:6e:ca:82:84:0b:0d:1e:38:9a:4b:7e:db:db:2f: 6c:7a:ad:5b:49:75:fc:46:6d:30:5a:74:a6:6b:03: 95:a0:fb:be:ee:6d:66:63:2c:b6:38:e4:6f:ad:be: 22:33:92:a4:36:8b:78:f7:c3:31:97:70:b9:ad:a0: ae:c2:a2:71:81:7b:4d:cd:46:b0:cf:1a:92:f5:e3: ee:99:00:11:5f:ec:34:da:29:e6:3e:55:51:c8:b2: 7d:17:73:fc:b8:a7:ab:13:39:fc:22:41:f4:e8:d8: f8:20:3f:af:93:32:62:af:97:84:a6:0b:a2:5c:e6: 8f:72:69:b9:70:98:e7:e9:14:b9:aa:14:8e:ff:53: c1:2b:01:42:e9:9e:19:9b:14:e8:60:f8:db:e0:75: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:41:35:23:28:0E:E4:92:FF:D2:3E:F4:61:47:A2:03:F2:15:91:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/12348d24-6cd1-3231-8e37-d82d9aa738c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl X509v3 Authority Key Identifier: keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer sbgp-ipAddrBlock: critical IPv4: 74.123.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ac:e5:93:c1:b0:b9:69:35:54:c4:b2:ab:21:54:65:5b:a7: e1:db:ec:21:bd:96:df:93:24:56:e6:28:1e:0f:46:9a:c9:cd: 5a:9e:d4:07:fa:6f:d3:d7:34:d0:64:c7:75:6c:be:59:f4:ad: 28:24:9d:7c:07:e9:bd:3a:cd:4e:2e:3f:eb:e9:03:43:09:64: f2:5d:dd:e1:bb:fe:ec:c7:59:3d:83:ba:b2:83:27:17:11:0a: 69:33:5c:72:2d:6b:db:42:27:23:96:20:b3:ea:73:b3:34:97: e0:5b:09:f2:d4:90:d2:cd:92:59:7a:dc:a9:37:3c:2c:7d:90: 9c:12:f4:99:b8:0e:2c:93:e2:0b:91:13:b4:42:c9:c1:75:db: f7:0b:59:f9:a5:9e:8e:da:3e:31:e1:b3:f1:19:a5:2a:2c:d0: 9d:e7:6d:05:ec:a3:b3:27:4a:44:e0:93:cd:87:ca:49:62:08: 4b:67:82:91:81:f0:29:64:b9:44:d3:2a:88:0b:59:e6:ca:f1: 41:e3:0f:88:23:f2:da:0e:20:91:49:89:0a:e2:05:03:3e:ed: f0:dd:c3:b8:44:5a:e4:1b:0a:c5:a0:a2:6e:b4:c3:24:76:71: 4f:08:e3:f2:f5:77:52:45:36:e5:b6:21:ed:b0:f5:a9:6f:09: e3:83:3e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEViF5nWOkZKU3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNhMDAzMzctMGZkZi00MmUxLTkzNDMtNDI0ZmQ0NzRk YTkzMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MDc2NTQwZDgtYzFiZS00MDJhLWEyYzQtMWU5M2VkMWNkYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhe69T0Rt1Qm8fas+Cl5p1n6QSGdWMKo9NZa k6/sp0pw/pvm1Vr+PxiPGZDa81CGjSr5WlUGqeIAMVFC2iuOCSyA5jN4r4tn/SSF wdlKr/Y4ruxfv65vC1+rdlIws4X0ETwOwVN8iZ1wbsqChAsNHjiaS37b2y9seq1b SXX8Rm0wWnSmawOVoPu+7m1mYyy2OORvrb4iM5KkNot498Mxl3C5raCuwqJxgXtN zUawzxqS9ePumQARX+w02inmPlVRyLJ9F3P8uKerEzn8IkH06Nj4ID+vkzJir5eE pguiXOaPcmm5cJjn6RS5qhSO/1PBKwFC6Z4ZmxToYPjb4HVDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5BNSMoDuSS/9I+9GFHogPyFZHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kM2Ew MDMzNy0wZmRmLTQyZTEtOTM0My00MjRmZDQ3NGRhOTMvMTIzNDhkMjQtNmNkMS0z MjMxLThlMzctZDgyZDlhYTczOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDNhMDAzMzctMGZkZi00MmUxLTkz NDMtNDI0ZmQ0NzRkYTkzL2QzYTAwMzM3LTBmZGYtNDJlMS05MzQzLTQyNGZkNDc0 ZGE5My5jcmwwHwYDVR0jBBgwFoAUyzc6BtDWYTvBLucznooR2q7JVQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kM2EwMDMzNy0wZmRmLTQyZTEtOTM0My00MjRm ZDQ3NGRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+s5ZPBsLlpNVTEsqshVGVbp+Hb7CG9lt+TJFbmKB4PRprJzVqe1Af6 b9PXNNBkx3Vsvln0rSgknXwH6b06zU4uP+vpA0MJZPJd3eG7/uzHWT2DurKDJxcR CmkzXHIta9tCJyOWILPqc7M0l+BbCfLUkNLNkll63Kk3PCx9kJwS9Jm4DiyT4guR E7RCycF12/cLWfmlno7aPjHhs/EZpSos0J3nbQXso7MnSkTgk82HykliCEtngpGB 8ClkuUTTKogLWebK8UHjD4gj8toOIJFJiQriBQM+7fDdw7hEWuQbCsWgom60wyR2 cU8I4/L1d1JFNuW2Ie2w9alvCeODPqg= -----END CERTIFICATE-----Generated at Mon Oct 20 16:53:43 2025 by rpki-client