$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa File: de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa (raw, json) Hash identifier: cEwBW3uyZJb8lDLJRlEdSt1iE63xcWZRjOdWDg6c9KM= Subject key identifier: FD:F9:27:44:71:40:FB:D3:C9:95:B9:25:7C:E3:78:BB:09:7E:EE:A3 Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F4328584A5335A2FF7DB675773D947300 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 6939 IP address blocks: 74.121.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a2:ff:7d:b6:75:77:3d:94:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=302b4b9a-3bdf-4da6-9851-6b1f2ddb3010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bd:8f:cc:84:6a:0a:d7:72:99:b4:98:5d:45: b3:11:8f:c4:71:a1:50:43:d7:5d:9b:23:c2:d0:a5: 81:c6:eb:1e:2a:37:71:2d:42:01:43:cf:e2:f0:7b: d6:6b:a7:05:b1:31:e6:a7:64:7c:7c:be:ab:82:a8: 27:08:13:60:cf:3d:c8:66:90:08:bc:18:64:99:be: 3b:17:20:7a:e2:82:86:f8:61:cc:63:f1:4f:d9:e9: 59:79:0e:2b:2c:1a:a4:08:e3:53:78:55:4c:9e:28: 3e:10:35:c2:74:97:e9:f0:98:dc:59:ba:ce:55:8f: 61:bf:a1:20:bd:f4:8d:a0:26:5a:3c:f5:81:2e:af: 7a:8b:92:c7:7a:90:76:53:21:d9:31:97:8c:68:67: 32:5f:cb:62:3e:bf:ec:e7:28:6f:a3:fc:a1:14:db: 2c:69:8f:4e:50:34:80:d2:28:34:5b:61:9c:00:d5: 6d:a0:06:2d:9e:75:2d:41:16:9e:16:60:78:60:90: d7:18:d1:27:09:c9:77:2f:70:83:27:c2:ab:de:e2: 32:0d:d3:3d:5f:79:6f:80:c9:09:4d:5c:62:f5:84: 17:6e:1d:6d:aa:08:b5:95:26:83:9c:07:e5:02:10: 86:f2:56:e9:76:e9:a3:81:95:8f:53:f6:da:6b:a0: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F9:27:44:71:40:FB:D3:C9:95:B9:25:7C:E3:78:BB:09:7E:EE:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: 74.121.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fe:9e:10:d1:f9:99:72:81:08:8a:62:4a:75:2b:e5:1d:40: 04:54:55:1c:f3:2a:94:43:24:b9:02:8b:0d:b3:86:40:b1:e0: 62:43:b9:d9:7a:8f:9f:98:4c:85:90:81:0b:5a:ff:84:f9:ad: d8:cf:c1:f3:e9:15:e2:25:51:9e:e8:a2:b2:50:26:f0:37:93: cd:ce:ae:27:aa:d0:31:7c:2c:9e:1c:be:38:9a:a1:07:03:3a: fb:03:f2:2c:e7:2c:32:b5:f5:e2:19:e1:35:4c:83:6c:63:a5: 0f:64:b5:a8:85:ff:df:f6:11:16:9f:ee:49:36:31:4e:e9:67: 49:1f:42:de:da:7b:eb:fd:3a:34:c5:af:e9:7c:11:a3:21:3c: d8:92:af:56:75:c8:88:50:12:7e:ae:0d:b7:ec:db:1a:c1:29: 3e:f9:1a:32:c6:75:dd:9c:62:15:82:91:8f:d2:b8:28:6e:a6: d8:a8:f2:41:f6:a9:c0:4a:8d:81:7f:62:f2:db:4d:5c:ff:c9: fb:91:24:ae:59:5f:2a:16:09:6e:ca:e4:19:22:ba:4e:a1:7c: 3d:ee:4f:b4:bf:0e:0d:39:ed:36:22:97:ec:f9:4a:d1:3a:88: 49:ee:46:26:0c:44:08:f4:44:18:7f:28:b5:81:bd:19:30:ee: c2:03:0f:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaL/fbZ1dz2UcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MzAyYjRiOWEtM2JkZi00ZGE2LTk4NTEtNmIxZjJkZGIzMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr2PzIRqCtdymbSYXUWzEY/EcaFQQ9ddmyPC 0KWBxuseKjdxLUIBQ8/i8HvWa6cFsTHmp2R8fL6rgqgnCBNgzz3IZpAIvBhkmb47 FyB64oKG+GHMY/FP2elZeQ4rLBqkCONTeFVMnig+EDXCdJfp8JjcWbrOVY9hv6Eg vfSNoCZaPPWBLq96i5LHepB2UyHZMZeMaGcyX8tiPr/s5yhvo/yhFNssaY9OUDSA 0ig0W2GcANVtoAYtnnUtQRaeFmB4YJDXGNEnCcl3L3CDJ8Kr3uIyDdM9X3lvgMkJ TVxi9YQXbh1tqgi1lSaDnAflAhCG8lbpdumjgZWPU/baa6CzKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP35J0RxQPvTyZW5JXzjeLsJfu6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvZGU3MTU0YjEtNzY4YS0z YzJhLWIzY2QtZTc0NzkzYTBkOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT+nhDR+ZlygQiKYkp1K+UdQARUVRzzKpRDJLkCiw2zhkCx4GJDudl6 j5+YTIWQgQta/4T5rdjPwfPpFeIlUZ7oorJQJvA3k83Orieq0DF8LJ4cvjiaoQcD OvsD8iznLDK19eIZ4TVMg2xjpQ9ktaiF/9/2ERaf7kk2MU7pZ0kfQt7ae+v9OjTF r+l8EaMhPNiSr1Z1yIhQEn6uDbfs2xrBKT75GjLGdd2cYhWCkY/SuChuptio8kH2 qcBKjYF/YvLbTVz/yfuRJK5ZXyoWCW7K5Bkiuk6hfD3uT7S/Dg057TYil+z5StE6 iEnuRiYMRAj0RBh/KLWBvRkw7sIDD54= -----END CERTIFICATE-----Generated at Wed Jul 2 06:14:35 2025 by rpki-client