$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa File: 0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa (raw, json) Hash identifier: 2nhTFuyVZgMphcAIM6HZTb2w/6m63LRQ7OvbsCQRvGU= Subject key identifier: 03:01:AD:88:24:82:12:4C:71:C8:52:CF:FB:15:79:88:3A:59:81:DE Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B39870A2C3F6FE777C7430540 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 74.115.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0a:2c:3f:6f:e7:77:c7:43:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=7379cbca-f0d6-438b-8160-d9edc7b26572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:4b:22:89:6f:dd:be:f7:cc:6d:a2:22:93: fb:b4:bd:07:dc:10:65:65:73:50:83:82:16:ef:92: 61:6d:dc:28:88:60:e3:ed:e6:2c:5a:db:da:b3:17: 21:88:c8:04:d0:da:ae:43:f8:14:bb:d4:2a:b8:79: 94:91:7f:a1:41:b4:15:89:5b:e5:1d:69:b1:ec:0d: b1:d3:e5:5f:63:32:5d:f6:be:7d:8f:76:2d:2a:81: 4c:d4:23:6d:a9:67:5d:1f:17:18:cf:1a:94:d3:bb: d9:5e:55:04:da:8d:0d:bb:34:92:13:34:97:3d:d1: a4:51:0b:36:d0:6c:9e:10:1b:26:cc:d7:16:f1:fe: ee:bf:42:c8:9c:74:c5:66:58:77:e4:81:fc:86:6a: 41:9e:0a:15:a5:d1:96:2d:d8:91:dc:78:8e:a0:e5: 2a:53:f5:42:26:9e:d9:a9:33:bc:c3:01:40:2c:42: 6f:c8:50:06:76:01:9e:d4:7c:74:88:95:d6:07:c4: da:42:5e:aa:11:2e:36:e5:7d:39:23:3c:16:95:9b: 01:29:ce:28:f1:22:b8:1e:85:23:e7:4c:8f:46:38: f3:8c:a5:0d:fd:04:59:52:d0:6f:5e:bb:89:e0:84: cd:71:42:9a:ae:17:01:dc:db:d6:5b:56:1c:15:68: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:AD:88:24:82:12:4C:71:C8:52:CF:FB:15:79:88:3A:59:81:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0899bfdf-e4ad-3a29-bc91-2205dd0ce6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cf:5d:62:5f:aa:21:ce:bd:fe:de:8a:2a:e1:a2:1f:5f:68: 06:26:63:b7:ef:4d:90:58:2d:a4:6f:fb:63:62:5e:5d:e1:87: 8f:c8:70:32:ff:89:16:4e:82:11:17:85:62:a9:39:c3:c1:56: 09:05:68:be:57:5c:64:5d:e9:41:da:53:cb:61:4f:1e:8a:f0: c7:e3:33:53:d3:c9:13:1e:f6:df:32:c9:84:2c:5a:1a:dd:1f: d3:d1:0f:a9:29:93:0e:99:81:29:ec:90:05:81:22:50:45:4a: 08:e4:cc:40:a3:b8:83:f9:24:da:95:87:37:a8:fa:83:30:f8: 47:79:fe:1b:a1:51:94:e7:12:d5:1f:ba:91:52:f1:2e:5d:40: b8:91:03:7a:07:d3:98:24:56:7e:9d:e4:58:b0:59:e4:70:a7: 12:b3:35:e4:96:14:67:10:69:3c:ce:73:71:6c:85:97:b4:57: 3a:9b:1d:70:c5:e8:64:9d:f8:65:e6:7b:0f:63:81:3c:c0:af: d3:57:6c:b8:51:e4:75:3d:0c:91:b0:c7:88:d7:2c:7b:68:fa: 78:cf:d1:ab:97:14:0e:60:6a:3e:53:cb:2e:92:b9:f3:27:b5: c0:aa:18:53:f6:36:b1:d8:ba:8e:7e:4d:31:83:84:d0:b4:31: 37:ad:e7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwosP2/nd8dDBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NzM3OWNiY2EtZjBkNi00MzhiLTgxNjAtZDllZGM3YjI2NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6JLIolv3b73zG2iIpP7tL0H3BBlZXNQg4IW 75JhbdwoiGDj7eYsWtvasxchiMgE0NquQ/gUu9QquHmUkX+hQbQViVvlHWmx7A2x 0+VfYzJd9r59j3YtKoFM1CNtqWddHxcYzxqU07vZXlUE2o0NuzSSEzSXPdGkUQs2 0GyeEBsmzNcW8f7uv0LInHTFZlh35IH8hmpBngoVpdGWLdiR3HiOoOUqU/VCJp7Z qTO8wwFALEJvyFAGdgGe1Hx0iJXWB8TaQl6qES425X05IzwWlZsBKc4o8SK4HoUj 50yPRjjzjKUN/QRZUtBvXruJ4ITNcUKarhcB3NvWW1YcFWhpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMBrYgkghJMcchSz/sVeYg6WYHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMDg5OWJmZGYtZTRhZC0z YTI5LWJjOTEtMjIwNWRkMGNlNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3PXWJfqiHOvf7eiirhoh9faAYmY7fvTZBYLaRv+2NiXl3hh4/IcDL/ iRZOghEXhWKpOcPBVgkFaL5XXGRd6UHaU8thTx6K8MfjM1PTyRMe9t8yyYQsWhrd H9PRD6kpkw6ZgSnskAWBIlBFSgjkzECjuIP5JNqVhzeo+oMw+Ed5/huhUZTnEtUf upFS8S5dQLiRA3oH05gkVn6d5FiwWeRwpxKzNeSWFGcQaTzOc3FshZe0VzqbHXDF 6GSd+GXmew9jgTzAr9NXbLhR5HU9DJGwx4jXLHto+njP0auXFA5gaj5Tyy6SufMn tcCqGFP2NrHYuo5+TTGDhNC0MTet52g= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:00 2025 by rpki-client