$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa File: cf70d300-25bd-30f4-a6fd-23a33417314e.roa (raw, json) Hash identifier: LlC148fxxNSZxPe1KpPvm80mMSfqX5riElcjHGwNcPk= Subject key identifier: A9:FC:9F:5C:5C:FD:8D:72:B2:25:78:90:4C:D7:B1:A2:29:88:FF:EB Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584AE9F66A899AEE8D18B107CC20 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 397003 IP address blocks: 76.74.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6a:89:9a:ee:8d:18:b1:07:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=2a5f5302-0e0b-40e7-84b5-8ce50105de54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:95:70:21:15:d9:2d:70:7f:59:5e:da:fe: 34:39:be:fd:72:8e:0d:6a:03:6f:9c:4f:16:36:5f: 97:cd:1f:60:b3:8d:34:fb:e9:a8:09:11:21:29:a8: 85:d1:ac:85:ab:2b:f3:79:0a:8c:2a:e6:77:d7:73: b8:2c:3a:ed:10:67:99:52:37:5d:53:54:fa:56:15: 23:37:54:ec:46:63:32:85:a5:a8:a9:d9:b3:2a:31: 19:de:43:4d:82:70:0d:41:b1:9a:92:63:e8:fc:75: 23:7e:15:ec:45:79:f6:f1:be:d7:59:25:ff:1f:cd: b5:ae:b2:14:98:4f:52:ff:46:62:f0:50:cb:ca:e6: 0a:09:02:9c:4a:c4:a7:38:22:7f:1d:8c:dd:be:84: 58:ea:5b:50:a1:d6:9c:bb:43:ca:b6:45:60:01:7e: ef:1f:71:8f:e8:e9:28:59:67:69:34:f4:7b:93:22: 98:f6:f9:00:4d:de:c9:ab:81:c5:5c:56:2d:5c:db: a9:cf:e5:21:91:9e:be:7d:fc:86:ee:71:70:36:04: 76:f1:93:30:ed:71:72:17:9e:69:92:af:2c:91:d6: 94:c0:e8:2b:4c:b9:cb:cd:f0:e8:02:6d:4e:aa:91: 95:8d:22:5a:5d:58:0c:22:41:c8:31:be:79:8c:eb: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:9F:5C:5C:FD:8D:72:B2:25:78:90:4C:D7:B1:A2:29:88:FF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 76.74.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a0:38:7e:d8:1d:a9:8b:ba:fa:52:b6:a8:77:46:da:0e:0f: 90:49:ef:ef:e9:5c:60:92:59:ec:4f:a6:ed:66:a8:4c:6e:8d: 2a:c4:71:2d:d5:27:33:4f:5c:2d:b8:a0:c9:7d:97:1f:de:28: d7:8a:7d:c4:ea:40:ae:23:13:94:02:de:bf:0e:6e:6a:31:cd: 44:4a:e4:ca:16:6d:ce:3d:ba:d4:e6:14:4d:c7:47:57:52:a0: 20:96:8a:00:69:3a:ee:68:f9:6e:1e:ae:04:f5:49:2c:d9:64: dc:cc:b7:f6:c2:0d:5a:69:1c:3a:a0:cf:8a:18:80:7f:60:d4: aa:2a:4b:cd:eb:c7:2c:6c:dc:99:6e:65:f1:48:46:55:9d:6d: f8:39:3b:d5:c9:bf:34:2c:77:00:dc:09:ff:00:6e:88:12:1e: 31:1f:54:7d:ad:7e:87:31:33:55:6a:c6:f8:e6:1e:92:8f:ed: f8:79:f4:5e:4f:48:9d:fc:3b:87:24:fb:30:ce:8b:a2:c7:02: 43:cb:c6:fa:c9:e1:1e:6b:8d:06:d3:dd:a5:7d:68:0c:b6:c8: 58:90:26:2c:5d:c1:c8:9b:83:c2:35:64:15:6d:3b:bc:ce:8f: 5a:0c:15:14:a4:0a:6f:07:75:ad:19:7b:e9:fc:54:85:0c:16: 83:ad:30:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mqJmu6NGLEHzCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MmE1ZjUzMDItMGUwYi00MGU3LTg0YjUtOGNlNTAxMDVkZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxeVcCEV2S1wf1le2v40Ob79co4NagNvnE8W Nl+XzR9gs400++moCREhKaiF0ayFqyvzeQqMKuZ313O4LDrtEGeZUjddU1T6VhUj N1TsRmMyhaWoqdmzKjEZ3kNNgnANQbGakmPo/HUjfhXsRXn28b7XWSX/H821rrIU mE9S/0Zi8FDLyuYKCQKcSsSnOCJ/HYzdvoRY6ltQodacu0PKtkVgAX7vH3GP6Oko WWdpNPR7kyKY9vkATd7Jq4HFXFYtXNupz+UhkZ6+ffyG7nFwNgR28ZMw7XFyF55p kq8skdaUwOgrTLnLzfDoAm1OqpGVjSJaXVgMIkHIMb55jOu1wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn8n1xc/Y1ysiV4kEzXsaIpiP/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvY2Y3MGQzMDAtMjViZC0z MGY0LWE2ZmQtMjNhMzM0MTczMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOgOH7YHamLuvpStqh3RtoOD5BJ7+/pXGCSWexPpu1mqExujSrEcS3V JzNPXC24oMl9lx/eKNeKfcTqQK4jE5QC3r8ObmoxzURK5MoWbc49utTmFE3HR1dS oCCWigBpOu5o+W4ergT1SSzZZNzMt/bCDVppHDqgz4oYgH9g1KoqS83rxyxs3Jlu ZfFIRlWdbfg5O9XJvzQsdwDcCf8AbogSHjEfVH2tfocxM1VqxvjmHpKP7fh59F5P SJ38O4ck+zDOi6LHAkPLxvrJ4R5rjQbT3aV9aAy2yFiQJixdwcibg8I1ZBVtO7zO j1oMFRSkCm8Hda0Ze+n8VIUMFoOtMG8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:19:10 2025 by rpki-client