$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa File: 952be825-45a2-31b9-be3f-703b38227bd4.roa (raw, json) Hash identifier: jdk7vbNX+cB8HLfbr3o0hL9mM3zicf6P9lpgnhy8rQo= Subject key identifier: 19:CD:0F:17:D2:37:1B:8E:CC:48:97:CB:21:A4:C1:46:98:61:1D:0D Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B68FC99F20C6A690D4C5A0E20 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 398420 IP address blocks: 74.126.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:99:f2:0c:6a:69:0d:4c:5a:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=00453cef-ad31-46de-af3e-db158f871b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:f3:6f:29:ee:1c:6b:ef:8b:6f:7e:30:af: f4:8f:05:39:bb:b4:1b:e1:94:5b:91:40:a2:84:c6: 0c:5f:24:de:d3:11:c2:df:5d:4c:18:fe:1c:f3:5f: c0:d7:40:6c:42:a2:1f:1e:ea:cb:2a:95:d1:29:fa: 11:20:ae:2a:25:25:5a:e5:ec:bc:d4:7d:61:02:63: 13:50:4f:78:ca:db:be:bd:e2:ed:2c:7e:ac:9a:d9: c2:17:b1:5f:1a:43:bd:60:bb:0c:76:57:fa:be:b3: 72:67:e0:02:44:01:b6:d9:c6:7b:48:d4:88:fa:b2: f7:00:43:a3:59:d6:96:3d:21:be:40:5d:66:21:4d: 16:3b:5c:73:84:22:1f:fb:fe:25:dd:a1:db:5c:76: e0:b6:a7:e8:47:67:a4:ad:27:55:66:ca:4d:2b:8a: 77:97:f0:31:e4:49:c8:3c:59:c9:f3:fe:eb:45:9c: 4a:ac:d2:b1:4b:86:a5:17:60:49:3d:46:3f:bc:c2: ff:3c:3c:63:64:50:3f:ad:07:df:af:60:60:7a:65: e4:c8:b8:03:fa:3d:f2:63:b3:fc:54:7f:c4:12:93: 6e:61:96:b0:f4:e9:0f:ae:2b:56:39:b3:b3:85:8e: d1:b0:30:65:bd:87:bf:67:28:25:70:93:5e:d1:5d: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CD:0F:17:D2:37:1B:8E:CC:48:97:CB:21:A4:C1:46:98:61:1D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:34:b3:e7:d3:3f:2b:fb:60:9e:55:27:11:00:8b:4e:d6:83: 56:f1:3a:ec:01:80:dd:e3:0a:15:33:75:5f:bf:9f:1b:8e:a2: c2:34:74:06:34:66:0e:62:b1:b1:c4:e9:78:11:ee:89:6d:8a: 87:15:31:43:11:47:f4:9a:83:a0:de:a4:7d:c8:f8:8b:11:cb: 6a:a7:55:25:45:fc:e5:93:20:ea:34:2c:bb:c4:26:6b:c2:30: 1a:d1:a9:3c:df:cc:02:dc:62:7c:bb:c0:10:c6:78:c4:63:e2: e2:de:f8:75:7d:dd:11:60:b8:4f:82:e4:c6:3c:b0:cd:6a:0a: e1:12:d3:0b:dd:0c:6a:2a:35:24:aa:0a:71:6c:c1:c9:da:60: 0a:11:21:6b:93:cd:ce:5a:c8:3c:d2:02:82:9b:9e:19:21:33: ff:19:ba:ce:b5:ac:7e:c7:be:c7:c7:28:58:bc:ff:54:1f:35: 18:ee:50:cf:69:47:45:23:9e:50:ba:ea:ad:ea:c9:b4:42:c3: 00:a9:62:18:e5:e5:81:93:83:f8:37:9c:ed:d1:4a:67:d0:06: 6d:f7:2c:4e:5b:42:91:09:e1:e6:80:8b:8b:1f:cc:57:c6:d1: 68:ef:3c:25:f3:75:23:cf:f8:71:57:16:62:d7:02:7b:4c:aa: 13:78:eb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JnyDGppDUxaDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MDA0NTNjZWYtYWQzMS00NmRlLWFmM2UtZGIxNThmODcxYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCbzbynuHGvvi29+MK/0jwU5u7Qb4ZRbkUCi hMYMXyTe0xHC311MGP4c81/A10BsQqIfHurLKpXRKfoRIK4qJSVa5ey81H1hAmMT UE94ytu+veLtLH6smtnCF7FfGkO9YLsMdlf6vrNyZ+ACRAG22cZ7SNSI+rL3AEOj WdaWPSG+QF1mIU0WO1xzhCIf+/4l3aHbXHbgtqfoR2ekrSdVZspNK4p3l/Ax5EnI PFnJ8/7rRZxKrNKxS4alF2BJPUY/vML/PDxjZFA/rQffr2BgemXkyLgD+j3yY7P8 VH/EEpNuYZaw9OkPritWObOzhY7RsDBlvYe/ZyglcJNe0V1E4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnNDxfSNxuOzEiXyyGkwUaYYR0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvOTUyYmU4MjUtNDVhMi0z MWI5LWJlM2YtNzAzYjM4MjI3YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA80s+fTPyv7YJ5VJxEAi07Wg1bxOuwBgN3jChUzdV+/nxuOosI0dAY0 Zg5isbHE6XgR7oltiocVMUMRR/Sag6DepH3I+IsRy2qnVSVF/OWTIOo0LLvEJmvC MBrRqTzfzALcYny7wBDGeMRj4uLe+HV93RFguE+C5MY8sM1qCuES0wvdDGoqNSSq CnFswcnaYAoRIWuTzc5ayDzSAoKbnhkhM/8Zus61rH7HvsfHKFi8/1QfNRjuUM9p R0UjnlC66q3qybRCwwCpYhjl5YGTg/g3nO3RSmfQBm33LE5bQpEJ4eaAi4sfzFfG 0WjvPCXzdSPP+HFXFmLXAntMqhN466w= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:50 2025 by rpki-client