$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a7e92e35-a467-304c-826f-9010f5383aef.roa File: a7e92e35-a467-304c-826f-9010f5383aef.roa (raw, json) Hash identifier: z/00Ucuq4Pxr2LOmiVrJqrNjEQ0VOHBA1nM3qhNDXl8= Subject key identifier: AA:5D:57:85:18:85:D7:08:D2:63:2B:F9:83:05:1A:B3:01:83:C7:8F Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21 Certificate serial: 010D0C9F4328584B4616FD4EAB9B5395351B8A00 Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a7e92e35-a467-304c-826f-9010f5383aef.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 17056 IP address blocks: 74.115.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fd:4e:ab:9b:53:95:35:1b:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=b8088cb7-1e2a-4fc5-8722-f1e4ac375d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f3:61:6b:21:cc:a8:94:e6:a1:6b:de:1f:8f: fd:1b:05:95:3e:4d:8f:5f:1d:99:7a:e6:35:09:7d: 14:3d:62:f6:d0:26:73:b3:49:49:64:f1:e5:34:48: 5a:46:e4:8c:3f:3b:7a:be:fb:68:e7:ba:13:19:8d: 22:17:b1:dc:1f:c9:ba:21:a2:d7:9e:0d:89:54:ff: 64:b1:47:ad:3a:b0:1c:b3:77:34:51:98:ea:c4:bb: 7d:d0:79:a5:04:67:5d:40:c6:a7:9d:cd:49:9d:0e: ea:5a:b4:77:c1:3c:64:1a:a9:a3:ba:93:0f:71:19: dd:6a:64:8a:19:96:f0:e8:43:96:20:cf:ab:52:ea: 2a:9b:91:56:97:dc:01:25:04:65:11:22:b9:ca:b4: 27:af:74:8c:77:82:aa:94:b9:a8:df:a1:8e:31:4b: d4:01:59:dc:39:34:99:3a:32:6a:bf:2a:28:d3:19: 42:a9:da:0c:d0:0c:ab:c4:f3:4a:b7:25:12:05:8c: cd:c5:18:9e:94:b3:35:2e:d6:c0:38:f2:c0:bf:0f: 00:88:90:0d:53:0b:4d:06:9b:ce:6c:62:12:b0:83: 88:37:11:b8:d5:7a:f0:c3:9e:e1:50:04:94:96:0c: 25:2a:01:10:80:09:bc:a0:6b:15:e4:92:d4:32:c5: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:57:85:18:85:D7:08:D2:63:2B:F9:83:05:1A:B3:01:83:C7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a7e92e35-a467-304c-826f-9010f5383aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl X509v3 Authority Key Identifier: keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer sbgp-ipAddrBlock: critical IPv4: 74.115.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4a:98:2e:d1:d0:b4:16:e4:ef:e4:9f:24:a3:d6:99:75:cb: f2:d6:4c:48:b2:33:0d:5f:66:d0:cc:70:7f:89:2d:c4:51:87: 08:3c:68:f6:b0:d4:dc:80:c3:be:db:1b:d8:1b:ed:af:2d:27: 0b:dc:54:a7:2b:f4:a1:fd:4f:f3:97:c0:c9:4a:c2:9e:b2:61: cf:5d:a6:8c:82:dd:7e:c7:e4:31:db:9c:7b:2f:ed:b0:dd:33: 9d:d6:4e:d2:c6:2e:ff:81:b0:58:9e:bb:ba:45:ec:c1:70:11: df:ce:ab:80:58:f1:ef:34:d9:25:79:79:95:9a:16:8d:df:1b: 2d:d3:f3:ec:ad:44:da:f0:ab:52:67:1c:14:58:50:cd:24:3c: a8:ce:c6:c4:fb:47:c0:da:16:1b:07:e1:88:13:d3:35:65:a5: c2:66:a8:ec:a7:4e:6b:2d:4e:fc:89:09:33:c0:89:40:9d:b1: 2a:26:b1:de:84:c6:0f:a4:57:01:48:72:d7:c5:1b:ad:ec:6d: 42:fa:ca:64:13:19:7b:a8:c0:b2:0f:93:32:2f:12:3a:1d:02: c7:7e:d9:ae:8e:77:a5:00:c3:c6:3d:c9:32:d4:80:f7:4e:bb: 42:c4:26:1a:9f:9f:03:63:ad:eb:69:93:23:24:57:c0:f3:4a: a3:a3:8f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFv1Oq5tTlTUbigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm YTIxMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk YjgwODhjYjctMWUyYS00ZmM1LTg3MjItZjFlNGFjMzc1ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/NhayHMqJTmoWveH4/9GwWVPk2PXx2ZeuY1 CX0UPWL20CZzs0lJZPHlNEhaRuSMPzt6vvto57oTGY0iF7HcH8m6IaLXng2JVP9k sUetOrAcs3c0UZjqxLt90HmlBGddQMannc1JnQ7qWrR3wTxkGqmjupMPcRndamSK GZbw6EOWIM+rUuoqm5FWl9wBJQRlESK5yrQnr3SMd4KqlLmo36GOMUvUAVncOTSZ OjJqvyoo0xlCqdoM0AyrxPNKtyUSBYzNxRielLM1LtbAOPLAvw8AiJANUwtNBpvO bGISsIOINxG41Xrww57hUASUlgwlKgEQgAm8oGsV5JLUMsUiGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpdV4UYhdcI0mMr+YMFGrMBg8ePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvYTdlOTJlMzUtYTQ2Ny0z MDRjLTgyNmYtOTAxMGY1MzgzYWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0 OGEwMWZhMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnN3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxKmC7R0LQW5O/knySj1pl1y/LWTEiyMw1fZtDMcH+JLcRRhwg8aPaw 1NyAw77bG9gb7a8tJwvcVKcr9KH9T/OXwMlKwp6yYc9dpoyC3X7H5DHbnHsv7bDd M53WTtLGLv+BsFieu7pF7MFwEd/Oq4BY8e802SV5eZWaFo3fGy3T8+ytRNrwq1Jn HBRYUM0kPKjOxsT7R8DaFhsH4YgT0zVlpcJmqOynTmstTvyJCTPAiUCdsSomsd6E xg+kVwFIctfFG63sbUL6ymQTGXuowLIPkzIvEjodAsd+2a6Od6UAw8Y9yTLUgPdO u0LEJhqfnwNjretpkyMkV8DzSqOjjwo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:07:25 2025 by rpki-client