$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa File: 6df0ab59-03d9-3306-8364-6288a57b01af.roa (raw, json) Hash identifier: KuYsJM0F3SJxWzd7rZ4PxLRC45gOERu7ak+w1QsWEns= Subject key identifier: 43:A6:A5:9B:9D:C8:C7:CC:1B:EA:DB:E4:BA:4E:57:3D:E0:FC:D3:D6 Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F4328584A549B19FC42E0A5864A27A8C0 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 6939 IP address blocks: 74.121.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:19:fc:42:e0:a5:86:4a:27:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=5de9102b-ac99-4e9d-a1c2-af73f3e8d1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:fe:93:11:ce:9c:bc:f2:ec:21:f9:c3:54: 74:74:08:bb:47:28:29:f9:eb:e7:82:a5:4b:21:32: e2:65:6d:7f:62:c4:28:fa:7d:dd:e7:cd:52:ef:e5: 6f:98:67:03:9a:72:dc:38:05:84:01:4b:76:24:86: 7c:42:01:a0:ae:78:ee:9c:e1:17:67:bc:d8:5a:5b: db:51:fe:37:01:ce:d6:1b:a4:2c:e2:9b:24:8d:78: f3:b6:83:bc:5d:9b:fd:36:44:f4:42:6d:fc:e1:99: 93:fd:20:0a:6e:c2:cc:bc:cf:f4:4d:07:79:48:db: 61:27:e1:8c:06:99:88:98:07:c5:98:26:53:70:90: a3:3a:f7:7d:cc:ae:d0:2c:97:6e:de:20:24:4b:73: 9f:71:4c:53:03:18:7e:a0:02:a7:a5:e6:59:57:db: c9:fa:0e:ec:b5:52:c8:59:08:96:8a:3d:c2:08:18: 88:f6:e7:1b:4e:4e:e8:bd:6f:fd:1a:87:c3:f7:b4: da:32:04:a1:08:eb:d1:59:8c:3a:96:c9:6c:04:64: 0d:96:37:1a:d8:67:1e:22:62:4a:97:da:21:23:c5: 57:1e:51:b4:18:1e:ea:c4:46:6c:21:eb:fc:d5:a9: ec:ec:8c:6d:4f:1f:66:ee:e6:7c:a6:39:7f:d8:87: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A6:A5:9B:9D:C8:C7:CC:1B:EA:DB:E4:BA:4E:57:3D:E0:FC:D3:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: 74.121.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e7:eb:fe:21:34:d5:1b:e7:d2:34:dd:04:8f:7f:73:b3:22: b0:2d:63:28:51:b4:fc:2a:ca:b4:ea:ad:7e:c6:9b:9a:ba:6c: 76:c1:63:2d:6a:49:12:3f:9f:0b:b4:46:ca:ab:e6:ad:25:ae: 85:97:4c:c4:b1:29:79:ac:fd:63:02:0c:76:60:7d:9a:7b:4f: 43:70:77:11:ca:6e:56:95:30:7d:b1:ec:31:9e:b2:52:15:a6: 31:08:a0:cd:3f:44:60:d9:98:04:5e:35:b8:65:1d:72:f0:eb: f5:de:82:e3:a3:a4:8e:8a:67:ba:9a:cf:bb:69:ba:53:66:7f: 22:29:0c:5b:78:95:8d:3d:23:18:2f:c5:63:43:5f:64:13:b6: d6:93:28:b8:ba:f2:e3:da:bb:71:c0:80:38:c8:c1:06:02:fc: 0b:92:f3:41:12:0d:ba:b2:2f:f0:c9:4d:ef:b3:72:64:6a:7b: 29:d0:93:3f:ce:1d:99:18:ec:c9:b9:55:99:83:bc:9b:ac:7d: 36:e2:83:3b:ec:af:81:66:4b:d9:0f:31:8c:23:c9:43:2c:de: 61:1f:91:8b:b0:a6:36:72:4d:8e:82:11:6c:68:f3:e0:65:0e: dc:3c:7e:5a:3a:0b:cf:c5:7d:72:58:4d:ac:cb:04:07:83:14: c9:82:ba:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxn8QuClhkonqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NWRlOTEwMmItYWM5OS00ZTlkLWExYzItYWY3M2YzZThkMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29D+kxHOnLzy7CH5w1R0dAi7Rygp+evngqVL ITLiZW1/YsQo+n3d581S7+VvmGcDmnLcOAWEAUt2JIZ8QgGgrnjunOEXZ7zYWlvb Uf43Ac7WG6Qs4pskjXjztoO8XZv9NkT0Qm384ZmT/SAKbsLMvM/0TQd5SNthJ+GM BpmImAfFmCZTcJCjOvd9zK7QLJdu3iAkS3OfcUxTAxh+oAKnpeZZV9vJ+g7stVLI WQiWij3CCBiI9ucbTk7ovW/9GofD97TaMgShCOvRWYw6lslsBGQNljca2GceImJK l9ohI8VXHlG0GB7qxEZsIev81ans7IxtTx9m7uZ8pjl/2IcMaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOmpZudyMfMG+rb5LpOVz3g/NPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvNmRmMGFiNTktMDNkOS0z MzA2LTgzNjQtNjI4OGE1N2IwMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3n6/4hNNUb59I03QSPf3OzIrAtYyhRtPwqyrTqrX7Gm5q6bHbBYy1q SRI/nwu0Rsqr5q0lroWXTMSxKXms/WMCDHZgfZp7T0NwdxHKblaVMH2x7DGeslIV pjEIoM0/RGDZmAReNbhlHXLw6/XeguOjpI6KZ7qaz7tpulNmfyIpDFt4lY09Ixgv xWNDX2QTttaTKLi68uPau3HAgDjIwQYC/AuS80ESDbqyL/DJTe+zcmRqeynQkz/O HZkY7Mm5VZmDvJusfTbigzvsr4FmS9kPMYwjyUMs3mEfkYuwpjZyTY6CEWxo8+Bl Dtw8flo6C8/FfXJYTazLBAeDFMmCunc= -----END CERTIFICATE-----Generated at Tue Jul 1 21:03:07 2025 by rpki-client