$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa File: 6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (raw, json) Hash identifier: zASl0NeLlIsDuDMJ54WR6a6AzikU7pVRQXTCu6eqSVQ= Subject key identifier: D2:F9:57:B7:F7:37:9D:8C:66:E8:D4:8E:18:46:3E:C7:5F:DE:EC:DA Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584AF2567B963F20F1D523E17100 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 19528 IP address blocks: 74.209.184.0/22 maxlen: 24 74.209.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7b:96:3f:20:f1:d5:23:e1:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=5465a562-35e9-47b5-8160-2a64376fbfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:ae:e8:8f:92:30:7b:4e:d6:61:66:25:d2: 2b:23:a9:53:32:a6:8c:38:5e:a2:b4:84:f5:99:ec: 5e:47:d8:ed:cf:ec:42:0c:36:b7:29:3c:cf:2a:1d: c9:57:92:5d:9c:ba:be:58:0e:88:c8:9c:bb:77:6c: ad:02:5d:00:86:50:32:b8:1b:f6:ee:c6:51:62:4e: ec:51:ac:1b:02:c1:71:f0:42:61:d9:fb:3f:7b:e3: e2:a6:c2:db:ac:e3:cf:7e:04:e7:df:33:9c:ed:aa: f4:7e:0d:fb:24:8e:df:f3:a2:39:2e:e8:25:46:c4: af:c3:19:95:79:db:57:d0:39:62:9b:23:96:60:b2: 90:43:bb:5e:77:f0:2f:70:0b:fa:71:95:3b:90:93: a3:d4:e1:01:bd:15:04:8b:f6:9a:c0:18:c2:5c:a1: 7a:fe:b6:9d:0f:18:40:5c:c2:9c:c6:09:b0:1a:f3: a0:6f:c3:20:97:77:20:fa:40:46:28:09:28:55:93: bf:c8:d3:17:28:72:23:b3:f4:c4:10:05:88:40:d6: 69:7e:ca:6f:2b:36:d6:41:59:ab:2a:33:72:e7:6e: 46:de:2f:ae:63:6a:11:3c:fd:f4:34:73:6a:e5:06: 16:82:7f:9f:34:8a:ca:bf:10:40:42:f1:81:00:fa: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:57:B7:F7:37:9D:8C:66:E8:D4:8E:18:46:3E:C7:5F:DE:EC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f7:b9:8a:a9:cd:7c:f2:d7:a8:df:c0:1e:d2:a1:e4:06:20: 95:91:83:a5:bf:66:96:02:9f:d3:3c:fc:79:5c:70:f0:34:e3: d5:fb:71:45:87:af:9b:3b:20:5c:57:b9:39:12:70:f7:66:13: 1c:09:26:49:52:0e:16:15:7a:db:16:cf:96:55:09:a8:42:ea: 5d:92:ae:56:8b:27:53:ba:42:14:f8:d5:53:ab:27:4f:5f:6d: d2:13:ca:76:f9:fe:aa:13:1c:bb:ae:87:fc:a8:0b:cd:8f:94: 4d:e4:ed:d7:68:f9:cf:0c:07:04:77:3d:cf:38:ca:20:73:51: 46:60:e8:70:4c:a9:51:67:cd:c1:80:b8:fc:7a:bf:02:0c:d1: 6a:c0:87:be:a1:55:ec:88:8e:0e:53:6e:02:36:15:4c:ec:43: ad:59:7c:4b:c7:66:83:9a:06:9c:8c:bb:b6:44:02:6a:69:a8: 90:64:7e:be:be:e5:ee:ce:bc:c7:b7:cd:85:0d:91:03:69:18: e2:79:03:98:dc:59:54:0e:6d:b4:f2:15:03:a9:4c:3d:e6:e0: d7:30:75:a5:72:9e:71:ab:62:1b:59:35:eb:26:77:12:f1:44: 56:77:d3:92:4d:c5:d2:ed:74:75:db:8e:7c:ad:4b:bf:e9:2f: 65:2b:a3:55 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEryVnuWPyDx1SPhcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTQ2NWE1NjItMzVlOS00N2I1LTgxNjAtMmE2NDM3NmZiZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveau6I+SMHtO1mFmJdIrI6lTMqaMOF6itIT1 mexeR9jtz+xCDDa3KTzPKh3JV5JdnLq+WA6IyJy7d2ytAl0AhlAyuBv27sZRYk7s UawbAsFx8EJh2fs/e+PipsLbrOPPfgTn3zOc7ar0fg37JI7f86I5LuglRsSvwxmV edtX0DlimyOWYLKQQ7ted/AvcAv6cZU7kJOj1OEBvRUEi/aawBjCXKF6/radDxhA XMKcxgmwGvOgb8Mgl3cg+kBGKAkoVZO/yNMXKHIjs/TEEAWIQNZpfspvKzbWQVmr KjNy525G3i+uY2oRPP30NHNq5QYWgn+fNIrKvxBAQvGBAPrhdQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNL5V7f3N52MZujUjhhGPsdf3uzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvNmQ0NWIzYjctMjNhMC0z YzU1LWE2NzYtNGIyNmJkYTkzOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANK0bgD BABK0bwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAave5iqnNfPLXqN/AHtKh5AYglZGDpb9mlgKf0zz8eVxw 8DTj1ftxRYevmzsgXFe5ORJw92YTHAkmSVIOFhV62xbPllUJqELqXZKuVosnU7pC FPjVU6snT19t0hPKdvn+qhMcu66H/KgLzY+UTeTt12j5zwwHBHc9zzjKIHNRRmDo cEypUWfNwYC4/Hq/AgzRasCHvqFV7IiODlNuAjYVTOxDrVl8S8dmg5oGnIy7tkQC ammokGR+vr7l7s68x7fNhQ2RA2kY4nkDmNxZVA5ttPIVA6lMPebg1zB1pXKecati G1k16yZ3EvFEVnfTkk3F0u10dduOfK1Lv+kvZSujVQ== -----END CERTIFICATE-----Generated at Sun Aug 24 04:02:05 2025 by rpki-client