$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: lRcBvABotf0amx2oo3T9VFqLpDDaoHAMIecFZQEcBO4= Subject key identifier: 88:3E:48:75:84:FE:9C:33:25:2E:97:EF:CD:F8:9B:5F:DE:D6:6A:8C Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B39870A1C8192ED77675F3860 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0a:1c:81:92:ed:77:67:5f:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=1f6e13c4-feae-42a0-8938-0b5e7e1dd10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:10:2a:9a:3c:7b:6c:5f:6f:8a:8d:83:91: fc:14:41:90:14:02:72:17:1c:4b:97:b2:2f:9f:87: 45:3d:91:86:00:4d:80:3c:20:69:3a:df:3e:62:e9: 58:23:ff:03:be:84:16:be:e2:09:fe:86:1e:15:53: 25:af:31:83:2e:9a:48:19:9d:8e:cb:8b:a5:79:6c: 4e:0b:72:79:48:d2:1a:7d:f6:33:f2:99:6c:39:2e: b0:37:b6:c6:ec:6a:2f:74:6f:50:28:bf:88:36:cb: 69:4e:1a:46:95:ec:da:4c:6f:10:b8:58:fb:11:97: 6b:60:07:07:bc:1d:8d:a4:24:72:24:4e:9f:41:16: c4:41:83:27:3d:9c:15:d3:c8:b4:af:5a:77:14:65: 9c:03:06:c2:74:71:0b:6b:a3:3a:e6:c5:d7:f8:8d: 5f:6a:57:c1:47:cc:d7:c5:b9:98:23:49:bf:81:c5: 20:78:86:a1:1b:10:40:a0:33:b3:f2:5c:7a:b2:2e: a8:96:24:41:6b:3b:a1:c2:bb:ab:65:56:96:60:9f: c5:a6:ee:54:26:e8:84:57:8e:43:36:95:b8:94:c3: 73:e6:e5:1f:97:10:30:34:9b:c4:12:94:00:9a:b4: d2:c9:05:fe:fe:58:3b:bf:d4:43:e2:ca:b0:e7:b6: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:48:75:84:FE:9C:33:25:2E:97:EF:CD:F8:9B:5F:DE:D6:6A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:65:bf:2d:7f:d7:59:66:7f:14:f9:3a:7d:3c:23:08:4b:97: b8:4d:96:63:91:fc:94:7d:bd:00:4d:64:a0:30:ed:df:8f:0e: 80:0e:bb:e1:d8:f4:6b:6b:1a:0c:e9:1a:2d:96:7a:19:38:bb: f0:aa:87:1d:3b:4f:20:f6:bc:b5:a2:b4:72:96:c1:05:33:f9: 23:e8:21:03:01:bc:31:ff:4f:27:b0:69:09:94:e6:a2:fc:3d: 79:2a:cb:bd:3b:73:37:97:56:6f:4d:61:f9:1e:17:c1:59:24: 60:dc:4a:bd:44:2c:cc:b0:91:e8:fc:42:de:4c:66:0a:1e:9f: 0c:91:8a:4e:c6:69:1e:96:9e:a6:7d:bb:17:91:bb:88:cf:df: 1c:e4:d4:6d:a3:d1:f4:25:e9:65:90:69:71:4d:9d:8d:eb:eb: 84:60:e3:41:bf:7a:61:cf:a0:2b:57:bd:b5:31:ee:a0:c9:a4: f1:5b:46:d2:e4:39:82:5d:e1:e4:c0:a2:8f:0e:8e:03:7f:b3: 0a:7a:a3:4d:62:3a:00:8b:f9:ad:7f:e5:54:d6:f0:af:8c:83: a5:6d:8b:2f:1c:8d:3d:dd:03:03:9a:3c:d9:77:f5:e3:6b:5f: 1f:ff:88:a4:87:cd:61:da:2e:a5:23:ab:ed:a9:75:74:0b:93: 64:29:84:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwocgZLtd2dfOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MWY2ZTEzYzQtZmVhZS00MmEwLTg5MzgtMGI1ZTdlMWRkMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hAQKpo8e2xfb4qNg5H8FEGQFAJyFxxLl7Iv n4dFPZGGAE2APCBpOt8+YulYI/8DvoQWvuIJ/oYeFVMlrzGDLppIGZ2Oy4uleWxO C3J5SNIaffYz8plsOS6wN7bG7GovdG9QKL+INstpThpGlezaTG8QuFj7EZdrYAcH vB2NpCRyJE6fQRbEQYMnPZwV08i0r1p3FGWcAwbCdHELa6M65sXX+I1falfBR8zX xbmYI0m/gcUgeIahGxBAoDOz8lx6si6oliRBazuhwrurZVaWYJ/Fpu5UJuiEV45D NpW4lMNz5uUflxAwNJvEEpQAmrTSyQX+/lg7v9RD4sqw57Z4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg+SHWE/pwzJS6X7834m1/e1mqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtlvy1/11lmfxT5On08IwhLl7hNlmOR/JR9vQBNZKAw7d+PDoAOu+HY 9GtrGgzpGi2Wehk4u/Cqhx07TyD2vLWitHKWwQUz+SPoIQMBvDH/TyewaQmU5qL8 PXkqy707czeXVm9NYfkeF8FZJGDcSr1ELMywkej8Qt5MZgoenwyRik7GaR6WnqZ9 uxeRu4jP3xzk1G2j0fQl6WWQaXFNnY3r64Rg40G/emHPoCtXvbUx7qDJpPFbRtLk OYJd4eTAoo8OjgN/swp6o01iOgCL+a1/5VTW8K+Mg6Vtiy8cjT3dAwOaPNl39eNr Xx//iKSHzWHaLqUjq+2pdXQLk2QphLc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:59 2025 by rpki-client