$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/d670e9ab-0ed8-341e-b015-16e5c3cd2e35.roa File: d670e9ab-0ed8-341e-b015-16e5c3cd2e35.roa (raw, json) Hash identifier: ZNCyDs+VGIyI0hhIvp1kHZs2P+c5b8f+w+mYKAkkeU0= Subject key identifier: 71:2B:ED:8E:F3:BA:12:57:C9:8B:B7:FA:0D:C8:81:16:21:0A:C5:D9 Certificate issuer: /CN=c5188e20-1297-4b61-a494-1ca0036777f2 Certificate serial: 010D0C9F4328584B2CF6DE85B571A6469D8FCD00 Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/d670e9ab-0ed8-341e-b015-16e5c3cd2e35.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 1443 IP address blocks: 74.117.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:de:85:b5:71:a6:46:9d:8f:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=dd597d44-5102-49f2-bf5d-caab6312a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:77:a4:04:45:bb:1c:9d:87:59:e5:50:32: ed:26:04:7f:f4:7b:82:2e:8f:00:5c:36:ff:58:dc: 26:f8:7e:01:7e:2b:f1:84:7d:b6:0a:63:40:54:b4: 08:74:46:f7:6c:58:41:b9:04:52:83:68:15:77:f8: aa:e4:5e:ba:18:77:aa:42:d2:8b:0c:08:3a:5c:0b: 80:41:4e:4b:f4:ce:37:49:5a:6f:67:97:12:0e:56: de:5c:be:76:41:1d:6a:74:2d:b4:40:0e:4e:2f:22: 73:c5:b1:38:e1:0a:09:db:73:ba:a7:93:45:2a:be: 02:11:f5:86:4c:e7:82:1e:a1:20:e2:35:78:5c:a3: 4d:4b:d9:09:be:62:ca:57:f5:ae:2f:cf:a5:be:8c: 09:96:1e:46:74:4c:42:02:dc:7f:22:00:e2:e2:9c: 7d:2b:9c:60:33:f9:22:06:a4:31:ca:64:0a:48:1c: 4f:29:8d:36:ab:c6:60:4a:84:32:f7:53:24:eb:c0: 76:d5:8f:32:d1:b5:c9:ad:52:9c:5a:ad:f4:6d:b0: 15:78:fd:6e:15:28:66:f0:2a:7b:5b:fd:3b:fe:46: ee:9c:1c:87:e8:2e:28:52:08:f5:1d:cd:9e:d8:d8: d9:9a:76:25:e2:5d:5f:bb:d7:a6:11:dc:0c:da:aa: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:ED:8E:F3:BA:12:57:C9:8B:B7:FA:0D:C8:81:16:21:0A:C5:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/d670e9ab-0ed8-341e-b015-16e5c3cd2e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl X509v3 Authority Key Identifier: keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer sbgp-ipAddrBlock: critical IPv4: 74.117.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:88:32:31:61:8f:2f:d8:27:50:9c:f6:0e:f7:75:85:11:b4: ea:26:1f:01:a1:3f:fd:80:8b:eb:75:29:6a:e3:26:3a:8f:bc: 62:07:83:fd:40:e2:8a:d9:44:6b:4c:fd:9d:7b:cf:be:0d:d9: 10:02:f3:70:1e:c6:3a:e9:25:92:05:a5:5c:29:59:94:a0:0d: 8f:0b:6c:21:18:31:d4:ae:f7:a4:ce:e9:bf:fd:92:d0:d3:ca: eb:22:ba:c6:4e:b7:75:05:5f:81:a6:9b:15:ed:0b:61:5d:e9: b0:73:9a:7f:ff:46:24:3a:3f:0b:31:7d:6b:29:53:e0:88:f0: c8:cc:ac:17:4b:12:fe:80:a2:4e:ca:f2:03:89:64:7e:84:12: 60:1a:c7:b2:24:a1:f7:02:f7:74:8b:31:20:78:f8:74:d6:cb: d8:c8:1e:39:fa:a4:4b:31:6b:4c:1f:95:01:57:77:33:0e:b7: 17:98:aa:6f:28:4a:87:ea:62:ec:7e:ee:d5:50:41:b2:75:fa: 91:15:a0:33:2c:80:be:25:f7:ab:75:f7:aa:c4:ae:3b:9b:88: 9d:7f:90:d5:c4:31:80:ba:ed:cd:a7:bf:5a:34:e6:4d:73:e6: 79:a2:3d:e5:e7:df:7c:c8:16:05:96:3b:8e:09:e5:ca:bf:29: 8d:5b:ba:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9t6FtXGmRp2PzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUxODhlMjAtMTI5Ny00YjYxLWE0OTQtMWNhMDAzNjc3 N2YyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQ1OTdkNDQtNTEwMi00OWYyLWJmNWQtY2FhYjYzMTJhMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt853pARFuxydh1nlUDLtJgR/9HuCLo8AXDb/ WNwm+H4BfivxhH22CmNAVLQIdEb3bFhBuQRSg2gVd/iq5F66GHeqQtKLDAg6XAuA QU5L9M43SVpvZ5cSDlbeXL52QR1qdC20QA5OLyJzxbE44QoJ23O6p5NFKr4CEfWG TOeCHqEg4jV4XKNNS9kJvmLKV/WuL8+lvowJlh5GdExCAtx/IgDi4px9K5xgM/ki BqQxymQKSBxPKY02q8ZgSoQy91Mk68B21Y8y0bXJrVKcWq30bbAVeP1uFShm8Cp7 W/07/kbunByH6C4oUgj1Hc2e2NjZmnYl4l1fu9emEdwM2qrokQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEr7Y7zuhJXyYu3+g3IgRYhCsXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4 OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2EwMDM2Nzc3ZjIvZDY3MGU5YWItMGVkOC0z NDFlLWIwMTUtMTZlNWMzY2QyZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzUxODhlMjAtMTI5Ny00YjYxLWE0 OTQtMWNhMDAzNjc3N2YyL2M1MTg4ZTIwLTEyOTctNGI2MS1hNDk0LTFjYTAwMzY3 NzdmMi5jcmwwHwYDVR0jBBgwFoAUuYyjHfkVx9gVEusrJXXT5sRul7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTE4OGUyMC0xMjk3LTRiNjEtYTQ5NC0xY2Ew MDM2Nzc3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWIMjFhjy/YJ1Cc9g73dYURtOomHwGhP/2Ai+t1KWrjJjqPvGIHg/1A 4orZRGtM/Z17z74N2RAC83AexjrpJZIFpVwpWZSgDY8LbCEYMdSu96TO6b/9ktDT yusiusZOt3UFX4GmmxXtC2Fd6bBzmn//RiQ6PwsxfWspU+CI8MjMrBdLEv6Aok7K 8gOJZH6EEmAax7IkofcC93SLMSB4+HTWy9jIHjn6pEsxa0wflQFXdzMOtxeYqm8o SofqYux+7tVQQbJ1+pEVoDMsgL4l96t196rErjubiJ1/kNXEMYC67c2nv1o05k1z 5nmiPeXn33zIFgWWO44J5cq/KY1bupw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:46 2025 by rpki-client