$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: msYIfevRtxUgcbWSxng3s3h4krBk24NBzAEXy/XnJVs= Subject key identifier: FC:47:43:A8:08:A0:CE:8B:4B:6D:1B:A8:2B:7B:BC:95:80:40:F5:D2 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB09D052ADE57ADB526600 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:09:d0:52:ad:e5:7a:db:52:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=354033e3-43d7-47d8-88f8-8f27f26a92ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:97:b3:31:c1:77:4d:87:df:64:53:19:64: 55:cc:92:40:6e:f9:94:7e:87:ef:94:68:fe:68:fb: 1d:c5:fb:75:92:59:9a:43:d6:57:eb:41:d0:0e:2b: d7:13:d0:7b:cd:92:74:6d:ce:9f:9d:97:25:e5:56: 71:a3:7f:4f:61:2c:99:eb:a1:a7:77:19:9c:32:83: 82:7f:19:d9:29:bc:2e:bd:f0:59:e1:93:bd:c8:2d: 1a:c6:c0:ce:16:cc:03:48:fd:82:99:cc:d5:8f:90: 02:fb:87:7d:5a:20:ed:9c:08:39:d9:d8:4e:ad:21: 8c:b3:64:04:3a:ab:5d:a1:bc:99:32:81:22:38:f1: c3:26:58:b8:e8:ff:0f:84:f5:7d:b5:40:c9:19:11: 92:5f:be:14:0d:5c:ec:d1:72:d1:0f:01:0c:53:b0: d4:a9:06:29:26:ab:e7:db:cb:55:00:c1:ba:f9:3c: d0:3f:ae:4d:7f:17:4a:3b:cc:d1:92:9f:93:05:0c: d7:8e:e4:9b:b4:eb:ba:6b:97:24:5d:83:25:dc:9b: 84:64:b7:4f:48:64:01:ba:34:12:61:f7:fd:9f:5d: d1:90:84:3a:7b:22:38:da:d9:59:4a:2c:87:f1:ca: 04:aa:75:80:16:d3:47:02:ac:dd:5c:28:17:93:cf: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:47:43:A8:08:A0:CE:8B:4B:6D:1B:A8:2B:7B:BC:95:80:40:F5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e8:f3:bf:72:6d:52:45:21:c7:67:84:72:27:fe:bc:1f:5f: 8a:68:4b:79:35:7e:68:a2:69:47:b7:ff:ef:8c:de:50:73:23: 91:a4:7f:5e:f1:9e:16:80:c0:a3:b6:7d:8a:9c:c5:b7:e2:48: e6:92:9c:20:e9:a4:3c:71:45:a9:f8:fa:b4:be:2e:a4:85:99: 53:93:ac:b7:ad:27:9c:4b:b3:ea:06:31:fa:10:51:ae:0b:c4: 3f:ef:b4:61:02:9d:81:19:85:81:e0:3d:21:91:fe:9f:79:68: c9:57:a8:f6:6b:ab:5b:80:e8:f6:11:81:d3:82:c0:d3:b9:01: 48:a8:e6:41:54:57:3e:9e:78:8d:a3:ed:78:a7:53:82:3a:53: 8b:c2:4f:f8:ad:77:c1:82:b6:17:16:69:61:5f:b6:98:a4:40: 71:48:28:c7:93:82:6b:0c:eb:fe:53:94:be:9b:1f:2b:0c:43: fe:4e:15:af:66:cb:94:16:f3:5f:35:41:b2:85:80:84:e0:91: 8a:5d:9a:62:22:c8:7d:07:0e:60:1b:da:fc:a5:81:55:b5:e3: 3c:8c:99:61:2e:91:67:ad:85:93:0a:a9:b1:23:46:50:0e:ca: cb:d9:7b:a4:d3:51:e0:0b:ed:f9:2a:20:43:10:b0:fb:2b:f3: 68:ad:85:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywnQUq3lettSZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MzU0MDMzZTMtNDNkNy00N2Q4LTg4ZjgtOGYyN2YyNmE5MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN2XszHBd02H32RTGWRVzJJAbvmUfofvlGj+ aPsdxft1klmaQ9ZX60HQDivXE9B7zZJ0bc6fnZcl5VZxo39PYSyZ66GndxmcMoOC fxnZKbwuvfBZ4ZO9yC0axsDOFswDSP2CmczVj5AC+4d9WiDtnAg52dhOrSGMs2QE OqtdobyZMoEiOPHDJli46P8PhPV9tUDJGRGSX74UDVzs0XLRDwEMU7DUqQYpJqvn 28tVAMG6+TzQP65NfxdKO8zRkp+TBQzXjuSbtOu6a5ckXYMl3JuEZLdPSGQBujQS Yff9n13RkIQ6eyI42tlZSiyH8coEqnWAFtNHAqzdXCgXk8/SJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxHQ6gIoM6LS20bqCt7vJWAQPXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjo879ybVJFIcdnhHIn/rwfX4poS3k1fmiiaUe3/++M3lBzI5Gkf17x nhaAwKO2fYqcxbfiSOaSnCDppDxxRan4+rS+LqSFmVOTrLetJ5xLs+oGMfoQUa4L xD/vtGECnYEZhYHgPSGR/p95aMlXqPZrq1uA6PYRgdOCwNO5AUio5kFUVz6eeI2j 7XinU4I6U4vCT/itd8GCthcWaWFftpikQHFIKMeTgmsM6/5TlL6bHysMQ/5OFa9m y5QW8181QbKFgITgkYpdmmIiyH0HDmAb2vylgVW14zyMmWEukWethZMKqbEjRlAO ysvZe6TTUeAL7fkqIEMQsPsr82ithSE= -----END CERTIFICATE-----Generated at Sat Jul 5 01:25:08 2025 by rpki-client