$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa File: 7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa (raw, json) Hash identifier: qWNUh4z4NZ/4g7fsBwKjMJuitYgoonw/x04cIQwvUiQ= Subject key identifier: 36:A2:54:AD:BD:81:C2:18:AC:C5:B0:F8:B0:D0:AA:C0:39:B0:F9:75 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B3987054F0AEFF53D93A61F00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 74.126.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:05:4f:0a:ef:f5:3d:93:a6:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=d6064b69-1300-42c3-8a5e-6b56e52b61d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:2c:d7:fb:a3:86:0c:d0:b5:08:1c:89:4d: 14:8c:79:05:9a:7d:22:57:94:b9:22:7c:6f:48:2a: ac:e9:89:8d:8a:62:e0:dd:05:f3:1d:1f:f5:f1:53: 91:0c:41:60:e8:09:0b:0b:b9:83:28:be:08:9b:81: 12:07:db:70:8f:a7:f4:0d:39:f6:d7:09:52:d3:96: 0e:14:43:3b:94:b4:62:c3:e7:5b:ff:11:3a:80:13: 61:d9:96:fb:ce:74:ed:da:1e:19:e4:96:12:9f:29: fc:aa:1e:14:a1:ab:62:91:36:a4:cb:4c:05:72:25: c5:6f:12:51:bd:22:54:fe:ed:1b:f2:93:cd:1a:77: 6e:da:6e:5b:9f:0b:62:aa:00:73:62:25:83:a6:59: 26:a8:1c:ed:c9:bd:49:dc:97:e4:b3:82:cd:fd:b2: 4a:ba:bd:6f:30:78:6e:46:a4:6f:0f:c9:bd:cc:7e: d1:c5:7e:e3:82:65:5d:47:d5:e4:b6:85:89:c4:b8: d5:84:e3:c5:08:32:b0:a4:0e:29:41:a3:9d:02:5d: c8:92:a5:4f:ff:f6:f5:02:e5:56:d0:ea:eb:6a:d9: 99:30:67:55:1e:10:7f:97:c1:07:1b:66:63:26:d5: d1:66:4c:de:05:94:84:91:aa:df:64:5b:46:99:3d: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A2:54:AD:BD:81:C2:18:AC:C5:B0:F8:B0:D0:AA:C0:39:B0:F9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9d:60:89:a7:6e:f8:69:e0:b9:ea:90:fe:37:dd:ec:a3:be: dd:5a:d8:66:70:50:d2:31:0b:07:ae:b7:9a:7d:2e:99:1c:c8: fc:7f:69:8e:b4:c4:1b:39:a0:9c:e1:53:50:b7:f6:bc:af:c4: b6:fa:d3:98:db:5a:99:eb:da:4d:d4:b2:79:82:40:a0:80:d4: 5a:ce:52:a8:26:e1:39:58:29:81:3f:8a:89:eb:ab:63:c2:fa: a8:d2:87:30:53:50:fe:a0:55:7b:92:ce:0e:2c:05:31:08:8b: df:61:97:6f:d0:e9:c1:2c:d1:e5:41:fc:d3:b3:0c:76:5e:3f: fd:fd:46:1d:cb:00:72:aa:f9:6e:27:7e:02:aa:3f:46:0f:33: 47:b1:5e:80:6f:a9:53:ee:68:58:73:1d:7d:6d:bc:4c:12:e5: da:65:a2:99:5c:f5:51:42:4a:6a:46:66:2a:d3:59:4d:27:c2: bf:75:53:3d:91:a2:95:49:f8:32:3e:cd:09:c5:fb:2e:e8:28: 4c:60:5b:76:f0:1d:72:0b:ce:49:bc:67:65:df:8b:ca:71:b7: e2:24:39:a9:f2:85:ec:5c:d1:a9:46:3d:0f:35:34:78:ac:46: bf:19:f4:d5:78:a1:3f:4a:af:24:69:d9:13:c7:3c:4f:69:a6: 9d:2b:93:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwVPCu/1PZOmHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDYwNjRiNjktMTMwMC00MmMzLThhNWUtNmI1NmU1MmI2MWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBks1/ujhgzQtQgciU0UjHkFmn0iV5S5Inxv SCqs6YmNimLg3QXzHR/18VORDEFg6AkLC7mDKL4Im4ESB9twj6f0DTn21wlS05YO FEM7lLRiw+db/xE6gBNh2Zb7znTt2h4Z5JYSnyn8qh4UoatikTaky0wFciXFbxJR vSJU/u0b8pPNGndu2m5bnwtiqgBzYiWDplkmqBztyb1J3Jfks4LN/bJKur1vMHhu RqRvD8m9zH7RxX7jgmVdR9XktoWJxLjVhOPFCDKwpA4pQaOdAl3IkqVP//b1AuVW 0OrratmZMGdVHhB/l8EHG2ZjJtXRZkzeBZSEkarfZFtGmT3yGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaiVK29gcIYrMWw+LDQqsA5sPl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvN2U1YmVhNjgtMDNmMS0z NjNiLWIxN2EtYWVmZWJkYzI5ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6dYImnbvhp4LnqkP433eyjvt1a2GZwUNIxCweut5p9LpkcyPx/aY60 xBs5oJzhU1C39ryvxLb605jbWpnr2k3UsnmCQKCA1FrOUqgm4TlYKYE/ionrq2PC +qjShzBTUP6gVXuSzg4sBTEIi99hl2/Q6cEs0eVB/NOzDHZeP/39Rh3LAHKq+W4n fgKqP0YPM0exXoBvqVPuaFhzHX1tvEwS5dploplc9VFCSmpGZirTWU0nwr91Uz2R opVJ+DI+zQnF+y7oKExgW3bwHXILzkm8Z2Xfi8pxt+IkOanyhexc0alGPQ81NHis Rr8Z9NV4oT9KryRp2RPHPE9ppp0rk5s= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:36 2025 by rpki-client