$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa File: bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa (raw, json) Hash identifier: 7yEbPzYPg89eRTRwB9uAIMvOrzK28/nPZUoZC+Rk7ZA= Subject key identifier: 45:E0:DB:C7:43:C5:37:36:5F:A2:FD:E9:46:01:F3:96:58:AF:48:12 Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F4328584B84E77F15E02895EA43AC2F40 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 19528 IP address blocks: 74.209.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7f:15:e0:28:95:ea:43:ac:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b421f44b-941e-4469-8961-16786d4d5ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:ba:d7:7f:4c:16:b8:e9:de:69:96:d7:21: dc:6a:fc:78:18:18:47:2e:0b:e7:64:21:59:06:b1: 5f:0d:52:c8:a6:03:11:78:7a:8f:08:09:89:3f:7e: 11:f3:1e:ea:65:4b:7d:f4:af:62:72:68:64:aa:3b: 65:82:62:0e:a0:ac:eb:e5:da:b1:17:44:2e:c5:2a: 8d:eb:0f:71:59:11:48:3b:44:0c:c1:5d:5b:2d:5e: 53:73:4d:1f:57:ed:76:9a:4c:79:68:6f:53:7e:bd: fc:54:c3:64:5b:b0:19:22:51:1a:98:48:6a:89:33: 4a:ff:34:49:9c:19:fc:20:03:f6:d6:26:a7:82:a0: e7:90:50:f5:39:ba:ec:56:ee:eb:37:aa:d8:b2:3b: 75:38:bb:0a:eb:31:18:5a:50:c9:6d:3b:6d:e3:64: a4:17:d5:6c:64:3e:5a:f5:a5:6d:fd:43:59:e0:86: a2:54:d3:94:9f:e7:a7:ff:4a:27:9f:5d:d7:c0:25: 51:a9:c3:03:f2:6d:18:15:16:52:e7:85:7b:63:78: 19:71:21:79:3a:0b:fe:5b:8f:e1:1e:87:18:cc:28: 16:d4:5a:db:35:f6:0b:f2:ce:fa:d9:dc:1e:db:96: 96:b3:a7:4f:f9:00:d7:c0:1a:01:e3:54:6e:10:7a: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E0:DB:C7:43:C5:37:36:5F:A2:FD:E9:46:01:F3:96:58:AF:48:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1d:96:5c:1f:5f:5a:91:b4:39:91:a0:b3:11:b9:f1:05:61: 16:77:25:db:4d:7a:69:a6:88:17:ea:66:77:83:ec:ff:f4:83: ce:c1:a5:a1:39:38:e2:e2:6e:7e:4f:b6:05:36:d3:70:f5:ca: 89:dd:b6:9f:92:05:12:98:9d:c5:63:bb:5a:d4:bf:0f:dc:45: d1:3f:f2:58:0a:0f:a8:a8:7a:aa:13:07:ff:c3:d4:d0:9d:d8: d9:23:8e:fc:6f:3d:23:11:81:f2:20:fd:35:ce:b5:b0:9c:6f: 3d:98:8e:6b:a0:4d:91:77:6a:7e:ce:34:0a:32:5c:e6:d9:80: 98:84:cb:53:06:01:d3:a3:81:3b:06:24:4c:47:b9:01:e3:06: f1:1e:28:b7:e3:f6:5f:e7:96:bd:aa:0c:4e:66:a1:93:14:b5: a6:7f:29:2d:d6:85:c1:2e:86:0f:3a:ad:d1:9a:9b:89:ee:2f: 64:40:86:c8:f2:35:49:59:69:a8:5f:0e:fc:7a:f4:a1:5d:c9: 87:40:7d:c8:92:a8:3d:73:41:97:ed:b8:1c:0f:26:73:ec:c2: f1:42:64:8f:cd:6b:6f:7e:70:0a:61:d9:ab:2d:cb:cc:dd:fb: 33:a6:e4:93:68:17:08:04:86:5f:01:2e:b5:b0:eb:5b:0a:e9: 77:ad:04:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE538V4CiV6kOsL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YjQyMWY0NGItOTQxZS00NDY5LTg5NjEtMTY3ODZkNGQ1ZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+6139MFrjp3mmW1yHcavx4GBhHLgvnZCFZ BrFfDVLIpgMReHqPCAmJP34R8x7qZUt99K9icmhkqjtlgmIOoKzr5dqxF0QuxSqN 6w9xWRFIO0QMwV1bLV5Tc00fV+12mkx5aG9Tfr38VMNkW7AZIlEamEhqiTNK/zRJ nBn8IAP21iangqDnkFD1ObrsVu7rN6rYsjt1OLsK6zEYWlDJbTtt42SkF9VsZD5a 9aVt/UNZ4IaiVNOUn+en/0onn13XwCVRqcMD8m0YFRZS54V7Y3gZcSF5Ogv+W4/h HocYzCgW1FrbNfYL8s762dwe25aWs6dP+QDXwBoB41RuEHoxWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXg28dDxTc2X6L96UYB85ZYr0gSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvYmNhNmVlZGItZTI1Yy0z ZDMwLWE1NjItNGVlOTRjNTIwMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBStG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYdllwfX1qRtDmRoLMRufEFYRZ3JdtNemmmiBfqZneD7P/0g87BpaE5 OOLibn5PtgU203D1yondtp+SBRKYncVju1rUvw/cRdE/8lgKD6ioeqoTB//D1NCd 2NkjjvxvPSMRgfIg/TXOtbCcbz2YjmugTZF3an7ONAoyXObZgJiEy1MGAdOjgTsG JExHuQHjBvEeKLfj9l/nlr2qDE5moZMUtaZ/KS3WhcEuhg86rdGam4nuL2RAhsjy NUlZaahfDvx69KFdyYdAfciSqD1zQZftuBwPJnPswvFCZI/Na29+cAph2asty8zd +zOm5JNoFwgEhl8BLrWw61sK6XetBIg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:38 2025 by rpki-client