$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa File: 119a8ee9-c67a-3c89-b56c-207a8120cc45.roa (raw, json) Hash identifier: HTYq+3KoiGvKqPekc3e3rNP80yzVenM9w53ooUywgJQ= Subject key identifier: AF:24:03:21:C2:BA:91:5F:1F:94:43:34:FD:5A:1F:CD:1E:A7:0A:68 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B4E7712AA7302E6F15E661F80 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396185 IP address blocks: 74.127.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:12:aa:73:02:e6:f1:5e:66:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c014d6fc-3381-4fdb-9ec7-3e50703cd740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:51:a3:f7:ed:d3:c5:7c:95:91:2e:9c:fe: a8:9e:b6:6a:06:6b:3a:bc:91:4d:af:0f:e9:12:00: 91:c7:72:69:41:62:3a:d4:c2:b6:3c:9d:01:c9:c9: d5:7d:b2:79:c5:6c:fc:ee:41:04:30:e5:dd:80:70: 38:1e:9e:ba:c1:24:c5:24:cc:f4:0e:2a:05:25:e8: 00:66:07:67:77:a1:84:ba:36:f2:77:2a:a8:21:c0: 74:77:52:d5:cf:5f:3e:58:5a:9d:e0:5e:27:3b:f3: 6c:1b:27:43:79:09:0c:36:9d:af:30:39:e0:bf:98: 7b:19:80:af:92:bc:0a:08:83:da:96:5d:2d:af:58: 4a:2b:bf:3f:ac:ed:cb:a7:77:28:c9:10:b3:01:dc: 84:90:ad:03:20:90:41:b9:b5:ed:13:00:bf:2c:52: 20:8a:53:69:b3:10:e2:b0:27:20:90:d1:7e:26:b5: f4:72:e0:41:b1:ef:14:3f:d3:bb:97:f8:ce:9a:22: 14:15:16:2b:62:5b:12:cf:f2:e2:2e:25:48:17:45: 9b:a9:51:6d:bf:a6:f2:3d:5c:31:9a:b0:1b:c4:9a: b4:61:29:1d:68:3c:dd:4e:fa:ae:0e:4e:ee:00:2f: 88:1a:1b:bb:3c:aa:92:5b:61:28:d0:2e:61:f2:7d: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:24:03:21:C2:BA:91:5F:1F:94:43:34:FD:5A:1F:CD:1E:A7:0A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8b:74:78:00:59:20:58:68:c7:7a:a7:0a:09:ef:e4:d7:f3: c4:99:7a:08:29:ac:7c:ee:13:cd:41:04:83:89:02:60:1a:86: de:6c:c1:48:ed:87:7f:6b:7e:0e:b9:2b:fe:6f:e4:55:ab:5f: af:83:e9:87:15:31:79:26:32:51:cc:ff:85:c9:3a:13:02:96: 01:fa:c2:ed:7e:47:6b:06:0d:ea:df:5b:97:22:26:61:41:9e: e8:95:06:3c:60:49:2e:36:b1:80:2b:c8:14:18:89:0a:a5:bb: cb:74:9e:65:f7:98:3f:e1:80:bd:97:66:65:40:8c:84:dc:08: 80:96:c8:7b:51:62:cd:d3:bd:8b:79:c5:dd:23:53:91:d6:1b: 29:65:a9:c7:27:d6:5e:07:11:73:71:a4:3a:be:b2:97:e6:ea: 2a:74:68:e8:fd:42:be:9f:38:60:35:3b:ec:a2:0a:fb:c8:63: 42:66:e5:40:7a:21:5a:44:f7:3b:fc:92:40:2b:3a:cc:75:e9: 81:be:8b:28:df:fb:3c:ab:d2:58:1f:93:e4:c2:d4:47:33:34: e0:f8:5c:b9:76:3c:ae:d7:11:f9:75:34:b0:1c:39:d3:e3:ba: de:2c:1e:89:00:17:85:f3:d2:13:1b:0f:15:f1:e8:ed:f5:48: 32:35:7c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxKqcwLm8V5mH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzAxNGQ2ZmMtMzM4MS00ZmRiLTllYzctM2U1MDcwM2NkNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX5Ro/ft08V8lZEunP6onrZqBms6vJFNrw/p EgCRx3JpQWI61MK2PJ0BycnVfbJ5xWz87kEEMOXdgHA4Hp66wSTFJMz0DioFJegA Zgdnd6GEujbydyqoIcB0d1LVz18+WFqd4F4nO/NsGydDeQkMNp2vMDngv5h7GYCv krwKCIPall0tr1hKK78/rO3Lp3coyRCzAdyEkK0DIJBBubXtEwC/LFIgilNpsxDi sCcgkNF+JrX0cuBBse8UP9O7l/jOmiIUFRYrYlsSz/LiLiVIF0WbqVFtv6byPVwx mrAbxJq0YSkdaDzdTvquDk7uAC+IGhu7PKqSW2Eo0C5h8n0zswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8kAyHCupFfH5RDNP1aH80epwpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTE5YThlZTktYzY3YS0z Yzg5LWI1NmMtMjA3YTgxMjBjYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+LdHgAWSBYaMd6pwoJ7+TX88SZeggprHzuE81BBIOJAmAaht5swUjt h39rfg65K/5v5FWrX6+D6YcVMXkmMlHM/4XJOhMClgH6wu1+R2sGDerfW5ciJmFB nuiVBjxgSS42sYAryBQYiQqlu8t0nmX3mD/hgL2XZmVAjITcCICWyHtRYs3TvYt5 xd0jU5HWGyllqccn1l4HEXNxpDq+spfm6ip0aOj9Qr6fOGA1O+yiCvvIY0Jm5UB6 IVpE9zv8kkArOsx16YG+iyjf+zyr0lgfk+TC1EczNOD4XLl2PK7XEfl1NLAcOdPj ut4sHokAF4Xz0hMbDxXx6O31SDI1fOc= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:09 2025 by rpki-client