$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa File: 1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa (raw, json) Hash identifier: 2WuTmKI/Lysvve9bA1Xv/3D6x+wQ4W4Jj5x3NzZiqTY= Subject key identifier: A7:CF:C3:13:4B:44:FF:75:38:A9:54:7A:56:00:F1:A5:3E:B6:52:B2 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BBF2DC4208995D0C6EDE0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 74.126.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:bf:2d:c4:20:89:95:d0:c6:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=dd8894ab-e638-4716-9030-b83e8d429baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:f6:dc:58:19:75:13:63:2f:be:8a:8b:04: 4d:3a:32:24:7c:64:9e:3e:61:f0:be:df:00:ef:84: cd:98:40:b8:ec:90:c4:98:f9:13:c9:97:d0:75:0d: d6:2a:72:6a:ad:b2:81:84:22:0e:2b:a7:b7:4a:73: 4c:dc:8a:52:fc:ae:ff:91:10:b8:b4:d0:90:9a:c2: 62:51:d3:99:c9:f7:c4:03:ad:e0:ff:a5:38:6d:c6: 5c:77:c3:17:f9:65:2b:8e:80:06:6b:34:01:f5:70: a3:57:0d:25:71:c4:05:40:b8:33:93:3f:bf:0a:cb: 8c:c0:8e:3d:de:c1:1f:1d:da:5f:71:91:38:3d:88: 6b:9f:38:fb:43:52:af:98:60:40:d4:c8:d5:ba:06: 4f:8a:91:e2:ff:63:54:dc:28:f1:72:8d:b5:e3:87: d9:9c:70:dc:a7:b3:18:0f:96:83:f2:cb:f0:95:54: da:07:fd:93:ec:1d:95:fa:c2:0b:39:5f:97:58:08: 1d:6f:27:a9:8e:62:c2:80:50:a4:18:4f:85:47:60: f9:11:3a:c8:e6:df:a4:70:30:e3:be:9c:c8:c5:a8: d6:a7:c1:69:ad:cb:6d:cc:2e:05:1a:31:ef:8d:aa: 5e:54:bd:79:3c:70:04:84:4a:54:fa:a1:26:ed:8b: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CF:C3:13:4B:44:FF:75:38:A9:54:7A:56:00:F1:A5:3E:B6:52:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1f464f0a-ee05-3d80-926a-ab7d9b411e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 74.126.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:93:e5:4e:0b:ac:49:2d:68:97:3e:09:35:8c:c5:fe:4f:7d: 54:ce:79:60:78:55:96:10:c6:18:d4:93:06:c0:23:3e:ce:6d: 92:db:da:c6:02:72:0e:cf:c5:61:d0:c6:86:4e:e7:b6:18:88: 8e:80:37:8b:8d:75:c1:d1:cf:7f:21:f8:a1:55:83:c0:38:61: 6e:5d:4b:68:e7:82:c0:77:4a:d1:94:22:c4:cd:0e:f1:c4:2d: 69:1c:82:1d:9d:5a:66:66:2d:08:e3:40:92:9e:47:51:8e:69: f0:ad:95:83:66:0c:a4:bb:91:af:28:6f:73:d5:9c:9b:5a:cd: 63:cf:1a:62:97:6f:b9:01:b7:ea:08:97:f6:92:07:82:02:6f: 09:ed:f5:78:61:9b:f9:37:03:a1:ef:a9:3e:ed:bb:e0:2e:02: c3:da:46:63:3b:48:f9:07:68:8e:d6:13:a6:68:97:c6:63:22: ed:07:f0:69:ad:bc:bb:a6:0c:4c:4b:53:40:e1:8e:15:ec:87: 7b:a5:24:d7:8d:38:b0:01:e3:5d:07:22:3b:60:d4:be:54:e0: c9:5f:69:cf:ad:d0:37:77:0f:bb:61:19:54:8f:ad:02:27:1a: e4:70:23:92:8e:8e:74:e1:4e:3e:cd:f5:f3:cd:b3:d3:c4:d9: 3e:c7:5a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram78txCCJldDG7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZGQ4ODk0YWItZTYzOC00NzE2LTkwMzAtYjgzZThkNDI5YmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJL23FgZdRNjL76KiwRNOjIkfGSePmHwvt8A 74TNmEC47JDEmPkTyZfQdQ3WKnJqrbKBhCIOK6e3SnNM3IpS/K7/kRC4tNCQmsJi UdOZyffEA63g/6U4bcZcd8MX+WUrjoAGazQB9XCjVw0lccQFQLgzkz+/CsuMwI49 3sEfHdpfcZE4PYhrnzj7Q1KvmGBA1MjVugZPipHi/2NU3Cjxco2144fZnHDcp7MY D5aD8svwlVTaB/2T7B2V+sILOV+XWAgdbyepjmLCgFCkGE+FR2D5ETrI5t+kcDDj vpzIxajWp8FprcttzC4FGjHvjapeVL15PHAEhEpU+qEm7YvJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfPwxNLRP91OKlUelYA8aU+tlKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMWY0NjRmMGEtZWUwNS0z ZDgwLTkyNmEtYWI3ZDliNDExZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqT5U4LrEktaJc+CTWMxf5PfVTOeWB4VZYQxhjUkwbAIz7ObZLb2sYC cg7PxWHQxoZO57YYiI6AN4uNdcHRz38h+KFVg8A4YW5dS2jngsB3StGUIsTNDvHE LWkcgh2dWmZmLQjjQJKeR1GOafCtlYNmDKS7ka8ob3PVnJtazWPPGmKXb7kBt+oI l/aSB4ICbwnt9Xhhm/k3A6HvqT7tu+AuAsPaRmM7SPkHaI7WE6Zol8ZjIu0H8Gmt vLumDExLU0DhjhXsh3ulJNeNOLAB410HIjtg1L5U4Mlfac+t0Dd3D7thGVSPrQIn GuRwI5KOjnThTj7N9fPNs9PE2T7HWvU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:25 2025 by rpki-client