$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa File: b2961625-afdd-3c57-ae0c-90c9e114d526.roa (raw, json) Hash identifier: H0K0BEHouyt2jiMaCPVvrbh3t9216o+Ty/jEHMvI/vI= Subject key identifier: 65:27:8C:22:05:25:F6:B9:25:CA:5C:B8:33:6E:91:AD:C5:D1:86:30 Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F4328584B8EACE4514FE4DA9878FCE640 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e4:51:4f:e4:da:98:78:fc:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=dfe71cbf-7cc2-4dac-9bd1-735151ab4e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dc:18:40:bc:13:56:26:aa:f4:7d:ec:8b:95: e9:c9:a0:94:ad:99:3f:61:f9:9c:3b:75:cf:11:84: 32:8e:14:7e:3a:c5:ac:f0:76:1a:ad:47:d3:2e:45: 55:db:fa:6d:02:45:70:95:26:82:02:1d:bf:f5:5e: b0:89:16:79:cf:d3:16:0f:bf:11:f0:fd:9b:70:c9: 6c:54:b9:b4:8e:cf:b0:d5:ce:7e:19:8b:61:47:be: 5c:45:8b:38:58:63:42:5a:43:bd:d0:a8:1b:71:ea: c8:1c:28:85:4d:67:b0:8f:e7:42:c1:b9:e4:69:eb: 96:60:9c:f9:b7:a8:03:e5:5f:2a:dc:25:e7:41:48: f9:f0:2c:23:c0:90:f5:57:33:5f:a1:26:aa:92:d8: de:09:58:52:d5:a1:55:09:e5:85:7b:ba:7d:ae:3d: fa:e7:bc:d8:5f:6e:3f:47:ea:b5:a9:34:8f:cd:40: 24:2e:f1:a4:76:14:28:55:f0:61:bb:62:4a:28:96: 56:03:38:ba:94:85:63:89:e3:38:a3:de:f1:af:5a: 50:09:20:91:5e:8b:87:4e:64:fa:b8:20:df:40:09: 92:8d:da:70:0f:43:44:37:ec:11:88:73:7b:c8:40: b7:ff:ce:0d:94:2f:f7:4b:45:46:19:c9:de:22:a3: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:27:8C:22:05:25:F6:B9:25:CA:5C:B8:33:6E:91:AD:C5:D1:86:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f2:5d:1e:ad:ad:3d:25:3c:98:ce:51:04:01:33:2d:62:23: 5e:3c:d4:2b:e1:8d:a6:1a:b0:45:18:f1:b0:7e:46:4a:75:23: 2d:22:69:95:63:9b:8a:9a:45:d5:b4:f4:7c:18:99:ae:c9:56: 2c:c6:ac:fd:ed:d2:3a:6e:e6:ab:09:88:59:34:79:53:9a:e3: 44:0d:ca:87:29:62:7c:17:49:ba:0c:5d:67:0c:fe:5e:11:c3: d5:16:f9:d8:3b:8f:1e:96:6a:29:49:6a:37:f1:04:97:63:e4: b7:c7:d6:e2:1e:07:68:a7:43:80:35:53:3c:bb:91:7a:95:fb: 78:11:6b:53:ec:a8:10:e4:11:e2:03:c4:a1:49:20:4b:da:f0: d6:b8:7f:1a:c2:91:82:fe:45:d4:bc:dc:e5:49:1c:a1:61:c1: 36:21:df:be:a4:a3:eb:4e:a8:b1:38:11:76:12:0a:4c:01:71: 1e:a2:a0:f9:49:10:07:36:a3:b6:c3:e7:2f:45:3d:36:57:88: 7c:f2:bc:04:1b:3d:1e:78:27:b9:b4:1c:c3:2c:95:d2:8c:66: 38:9b:99:45:2f:70:c2:c7:42:19:7d:d6:f2:05:81:3f:dc:84: ae:0e:90:21:28:88:61:e5:b6:42:c0:3e:1c:33:34:d2:20:01: fa:ff:0d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrORRT+TamHj85kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGZlNzFjYmYtN2NjMi00ZGFjLTliZDEtNzM1MTUxYWI0ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdwYQLwTViaq9H3si5XpyaCUrZk/YfmcO3XP EYQyjhR+OsWs8HYarUfTLkVV2/ptAkVwlSaCAh2/9V6wiRZ5z9MWD78R8P2bcMls VLm0js+w1c5+GYthR75cRYs4WGNCWkO90KgbcerIHCiFTWewj+dCwbnkaeuWYJz5 t6gD5V8q3CXnQUj58CwjwJD1VzNfoSaqktjeCVhS1aFVCeWFe7p9rj3657zYX24/ R+q1qTSPzUAkLvGkdhQoVfBhu2JKKJZWAzi6lIVjieM4o97xr1pQCSCRXouHTmT6 uCDfQAmSjdpwD0NEN+wRiHN7yEC3/84NlC/3S0VGGcneIqPshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUnjCIFJfa5JcpcuDNuka3F0YYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvYjI5NjE2MjUtYWZkZC0z YzU3LWFlMGMtOTBjOWUxMTRkNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFryXR6trT0lPJjOUQQBMy1iI1481CvhjaYasEUY8bB+Rkp1Iy0iaZVj m4qaRdW09HwYma7JVizGrP3t0jpu5qsJiFk0eVOa40QNyocpYnwXSboMXWcM/l4R w9UW+dg7jx6WailJajfxBJdj5LfH1uIeB2inQ4A1Uzy7kXqV+3gRa1PsqBDkEeID xKFJIEva8Na4fxrCkYL+RdS83OVJHKFhwTYh376ko+tOqLE4EXYSCkwBcR6ioPlJ EAc2o7bD5y9FPTZXiHzyvAQbPR54J7m0HMMsldKMZjibmUUvcMLHQhl91vIFgT/c hK4OkCEoiGHltkLAPhwzNNIgAfr/DUE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:58 2025 by rpki-client