$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa File: 01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa (raw, json) Hash identifier: sUcdYnyOU+UvH+VljvSM7l1Dwjn9DCSudfPribo+s5g= Subject key identifier: 1E:E3:94:56:88:2E:02:90:23:79:F2:B6:21:FE:58:01:D7:D5:21:36 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584ADA9BC0A00A66204141419480 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 23158 IP address blocks: 74.221.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c0:a0:0a:66:20:41:41:41:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=09c24ac6-fb77-46ae-a3f0-7892262ba678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:01:27:5b:b3:54:b4:ff:c5:ee:24:27:9f: 6b:ea:e1:0e:c5:8d:a6:05:94:c8:d2:0c:0b:6f:bc: 6d:3e:4c:6a:69:ec:67:d9:72:03:e9:ac:5f:0d:3a: f8:1f:cc:23:28:67:20:00:cb:cb:62:a2:de:30:c0: 6c:fe:a2:fa:0d:d2:72:4e:d6:13:2b:81:98:7d:61: 5e:c2:2a:f6:8d:45:03:f5:ab:2e:80:1b:8e:27:9c: df:f2:c0:63:db:f8:64:47:99:39:b8:5d:9c:db:c4: fe:b4:3f:3b:e6:ec:33:46:12:0e:0d:e5:f6:ed:aa: 6f:3a:7b:80:a6:1b:b0:e2:0a:a4:ca:70:12:f5:3a: 79:0a:58:fb:05:ea:e6:9b:71:14:ad:b7:01:50:56: e1:ce:b5:87:7d:12:cd:9a:a4:99:7d:42:39:ac:89: 8a:20:36:d5:5e:f0:e1:5d:3c:99:1e:2d:76:f0:5c: 77:58:5c:a5:85:65:c5:05:ff:94:33:d7:d9:e7:19: a1:89:ca:fc:88:70:42:30:82:ba:04:4b:31:9f:db: 39:18:72:eb:c5:d7:f1:48:84:0d:be:b1:72:26:dd: ff:3c:44:27:ef:bf:42:c3:16:16:c5:34:82:1c:08: 75:ff:f7:34:2e:5e:f7:9c:04:e0:b0:bf:a1:8d:83: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:94:56:88:2E:02:90:23:79:F2:B6:21:FE:58:01:D7:D5:21:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/01c2253e-5d3d-38ef-ba31-e15b538c5abf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 74.221.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:43:79:6b:0a:83:fe:1f:68:99:a5:20:a5:53:7b:25:bc:f4: 1f:e1:be:5d:ed:38:26:f0:62:72:26:d3:49:d6:c2:fa:04:ae: 26:2f:fb:9a:98:43:30:98:49:61:34:26:9e:3c:72:9f:88:e2: 50:fa:fa:01:f0:53:e1:79:83:f1:99:64:ed:ec:3a:22:ad:5a: 9f:e3:25:10:15:f3:5c:b5:ef:40:29:2f:ff:58:93:f4:03:b5: 24:2f:08:ec:40:98:2a:94:44:ab:19:2b:75:14:7f:f2:e5:75: 11:e3:68:45:9d:a3:84:58:90:81:df:51:c4:26:14:1a:fb:35: 8c:74:ab:7e:96:d4:a1:04:bf:7f:16:1e:f9:ec:b3:c5:c0:c2: b0:4b:5e:84:8d:1f:bd:3c:87:7a:a4:b9:43:a5:a1:1c:33:8f: 05:7c:09:32:f3:21:18:96:b6:cd:4d:5b:2b:61:6c:18:bb:c7: 03:ee:5c:0f:28:0b:9d:30:de:aa:1f:3d:bf:7e:64:a1:aa:eb: 30:dd:88:f1:59:09:5a:db:83:82:79:8e:e8:6b:11:ea:c5:5f: ce:ba:11:3b:20:ac:74:d1:10:89:26:91:ea:a7:29:08:a1:cb: fd:c6:3d:c6:bb:8b:f9:a7:69:5e:02:fd:c5:5f:47:67:c0:37: ee:2f:fc:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8CgCmYgQUFBlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MDljMjRhYzYtZmI3Ny00NmFlLWEzZjAtNzg5MjI2MmJhNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUBJ1uzVLT/xe4kJ59r6uEOxY2mBZTI0gwL b7xtPkxqaexn2XID6axfDTr4H8wjKGcgAMvLYqLeMMBs/qL6DdJyTtYTK4GYfWFe wir2jUUD9asugBuOJ5zf8sBj2/hkR5k5uF2c28T+tD875uwzRhIODeX27apvOnuA phuw4gqkynAS9Tp5Clj7Bermm3EUrbcBUFbhzrWHfRLNmqSZfUI5rImKIDbVXvDh XTyZHi128Fx3WFylhWXFBf+UM9fZ5xmhicr8iHBCMIK6BEsxn9s5GHLrxdfxSIQN vrFyJt3/PEQn779CwxYWxTSCHAh1//c0Ll73nATgsL+hjYN41QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7jlFaILgKQI3nytiH+WAHX1SE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvMDFjMjI1M2UtNWQzZC0z OGVmLWJhMzEtZTE1YjUzOGM1YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESt2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdDeWsKg/4faJmlIKVTeyW89B/hvl3tOCbwYnIm00nWwvoEriYv+5qY QzCYSWE0Jp48cp+I4lD6+gHwU+F5g/GZZO3sOiKtWp/jJRAV81y170ApL/9Yk/QD tSQvCOxAmCqURKsZK3UUf/LldRHjaEWdo4RYkIHfUcQmFBr7NYx0q36W1KEEv38W Hvnss8XAwrBLXoSNH708h3qkuUOloRwzjwV8CTLzIRiWts1NWythbBi7xwPuXA8o C50w3qofPb9+ZKGq6zDdiPFZCVrbg4J5juhrEerFX866ETsgrHTREIkmkeqnKQih y/3GPca7i/mnaV4C/cVfR2fAN+4v/NQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:20:08 2025 by rpki-client