$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/256a0b1e-1e4a-3056-b386-e3ea82ae5261.roa File: 256a0b1e-1e4a-3056-b386-e3ea82ae5261.roa (raw, json) Hash identifier: 0QjaKlqPHHwpl2fWnUA5oBV5HHHWLdWTqiObUf5Wk8c= Subject key identifier: 8E:9C:40:71:31:09:2B:87:61:4F:6E:67:C4:8F:45:34:E9:52:25:58 Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F4328584AF2567789B6621F85B94FFA00 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/256a0b1e-1e4a-3056-b386-e3ea82ae5261.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 14011 IP address blocks: 74.209.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:77:89:b6:62:1f:85:b9:4f:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=984ce845-8ce0-4149-b243-06d93a3c1a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:02:e0:56:89:64:77:41:e5:eb:32:69:ee: fd:f1:b7:2f:25:80:e7:a0:04:f2:f0:95:86:65:2a: 3c:fe:bf:4d:f0:8f:d4:37:39:80:ca:8f:14:d3:a5: 8d:ff:e5:5d:d6:e8:0e:f9:e9:22:99:40:61:da:7b: e5:8b:8c:d0:81:d4:d2:bd:9a:de:c2:d9:5a:2a:c2: 7d:ac:6e:c9:26:e1:ea:41:91:7e:b1:8e:0c:71:49: 36:63:bf:84:d9:07:36:c1:4f:24:70:e6:25:91:67: 20:1e:69:46:19:37:81:e5:c1:e0:78:2f:cd:18:4b: bc:76:31:f8:8a:2c:41:6e:69:c3:12:49:11:fc:ef: a1:59:f1:63:d6:5e:2c:7f:55:6f:39:87:7b:de:e8: f9:a7:b6:5b:b4:2c:d6:7e:55:3f:33:83:16:90:3b: 48:2e:51:de:78:53:b0:3d:3b:1d:35:e9:48:5f:8a: cd:21:b4:7d:b8:3a:df:8e:5d:1f:d7:eb:ab:f6:32: c4:99:bc:77:2a:65:99:fb:b1:e6:f4:73:0f:48:c4: af:fa:5f:a6:22:c7:b0:39:b7:cb:16:b1:24:67:5b: 8f:62:39:d2:c0:d6:91:d1:3f:fa:88:38:85:00:d5: cc:68:5f:4d:01:77:b8:c3:e1:ba:1c:1f:b9:e7:34: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:40:71:31:09:2B:87:61:4F:6E:67:C4:8F:45:34:E9:52:25:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/256a0b1e-1e4a-3056-b386-e3ea82ae5261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:01:92:9c:b5:3b:28:b5:25:05:73:fc:a1:e4:c7:b7:30:da: 58:d1:b2:f7:7b:8e:9d:98:94:a1:72:66:89:d7:f7:40:3d:9a: c2:ae:3c:53:e7:66:a3:3f:42:cc:eb:cb:80:6f:e8:d2:88:c0: d4:f3:77:74:35:40:64:11:5f:5c:8b:dd:1c:e0:a3:53:06:a9: 10:c1:49:5e:d1:4c:d8:af:33:4d:99:50:c4:d2:6a:cc:d3:05: 53:5b:9a:3c:46:6b:fe:0e:fa:d5:21:c6:c8:80:2d:50:d5:eb: 06:ce:41:26:06:7b:21:1d:d3:e5:ef:11:cd:b2:57:6c:00:f5: 2c:13:20:22:e2:4e:1e:d1:e0:56:91:ae:cd:e2:81:49:0d:a4: cc:14:6d:ba:ba:6f:6c:24:68:b5:a6:2c:74:d2:3a:cc:2e:ed: 71:92:65:67:bc:cf:c1:95:57:e5:05:5f:2a:bb:ea:3a:e5:1d: 47:87:f5:c0:aa:37:3f:4e:f6:7d:1a:08:b7:0f:f6:e9:cd:15: 12:0c:9e:82:47:a6:8d:33:57:e4:48:b0:b4:1c:2c:49:15:76: 73:0f:61:a3:8f:36:52:46:61:cd:30:d4:a9:bf:40:6a:3a:d3: 80:8e:ec:36:17:ec:a0:bd:85:3d:76:8d:b2:cc:2f:a4:bd:95: 14:56:01:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVneJtmIfhblP+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OTg0Y2U4NDUtOGNlMC00MTQ5LWIyNDMtMDZkOTNhM2MxYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA748C4FaJZHdB5esyae798bcvJYDnoATy8JWG ZSo8/r9N8I/UNzmAyo8U06WN/+Vd1ugO+ekimUBh2nvli4zQgdTSvZrewtlaKsJ9 rG7JJuHqQZF+sY4McUk2Y7+E2Qc2wU8kcOYlkWcgHmlGGTeB5cHgeC/NGEu8djH4 iixBbmnDEkkR/O+hWfFj1l4sf1VvOYd73uj5p7ZbtCzWflU/M4MWkDtILlHeeFOw PTsdNelIX4rNIbR9uDrfjl0f1+ur9jLEmbx3KmWZ+7Hm9HMPSMSv+l+mIsewObfL FrEkZ1uPYjnSwNaR0T/6iDiFANXMaF9NAXe4w+G6HB+55zQTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6cQHExCSuHYU9uZ8SPRTTpUiVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvMjU2YTBiMWUtMWU0YS0z MDU2LWIzODYtZTNlYTgyYWU1MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0Bkpy1Oyi1JQVz/KHkx7cw2ljRsvd7jp2YlKFyZonX90A9msKuPFPn ZqM/Qszry4Bv6NKIwNTzd3Q1QGQRX1yL3Rzgo1MGqRDBSV7RTNivM02ZUMTSaszT BVNbmjxGa/4O+tUhxsiALVDV6wbOQSYGeyEd0+XvEc2yV2wA9SwTICLiTh7R4FaR rs3igUkNpMwUbbq6b2wkaLWmLHTSOswu7XGSZWe8z8GVV+UFXyq76jrlHUeH9cCq Nz9O9n0aCLcP9unNFRIMnoJHpo0zV+RIsLQcLEkVdnMPYaOPNlJGYc0w1Km/QGo6 04CO7DYX7KC9hT12jbLML6S9lRRWAVA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:11:37 2025 by rpki-client