$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa File: 90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa (raw, json) Hash identifier: X7WDvi0HvM6M7RfR8c2gE0T07NQ91VIS8hEfCCwi0Lc= Subject key identifier: BA:51:4F:09:56:E2:60:2E:8D:BF:E8:A1:91:3C:23:9A:38:A7:84:F1 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584AE8912C8D1AEAFF0ED1638B40 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 13984 IP address blocks: 74.117.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2c:8d:1a:ea:ff:0e:d1:63:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=db2ceeef-e716-44fb-8534-5daf56e8e359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:ce:13:8a:1e:9b:20:1a:d3:2c:e4:9c:9b: 78:47:7e:0a:07:18:16:83:c9:f6:b1:c5:0b:52:4f: d3:7d:e2:34:8b:52:69:7f:81:76:ac:98:c2:94:82: cf:f1:00:ed:f4:94:ab:72:a5:d2:a0:20:92:4c:1c: fa:42:05:3f:e7:d0:57:08:91:a7:90:e3:b7:99:c7: fa:bd:7d:08:f7:f7:6b:3e:22:a1:a5:31:25:dc:51: 28:dd:8f:b2:2b:22:4b:1c:e3:06:87:4a:5a:c5:bd: ad:f6:60:f3:d2:95:f5:65:32:d6:26:86:cf:5a:61: 73:4a:d7:63:7f:e7:eb:f5:0d:11:da:a9:a2:3e:8d: 11:ae:66:c4:ce:9d:79:dc:49:59:25:19:0c:91:65: 70:18:5d:e8:0e:50:be:79:bb:52:b4:e1:77:6d:3b: 75:d2:23:e5:b3:90:e7:ca:21:17:92:d9:31:fb:bf: 8b:c4:45:a2:48:85:19:4f:f0:a7:5a:9c:31:e4:42: 6f:31:13:3a:b3:b5:54:2b:41:8b:76:b0:c0:9a:fc: cd:d5:63:57:52:54:22:cc:c9:58:df:74:26:73:c2: 35:23:a2:52:4f:cb:6a:74:c6:bf:eb:9e:df:57:df: ea:30:aa:e9:23:2e:28:13:8e:05:c3:0a:73:90:34: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:4F:09:56:E2:60:2E:8D:BF:E8:A1:91:3C:23:9A:38:A7:84:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/90168b3e-7625-3dfb-ae5b-5e5a1170e7bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 74.117.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:07:e2:05:79:42:1b:f1:04:6c:36:28:73:71:1c:a8:d5:db: 10:97:00:bf:6a:5b:c2:12:83:b8:e9:e5:2e:37:0d:59:dd:13: 59:57:e6:c1:c7:40:58:5c:a8:a4:e1:2c:cf:7f:00:8d:2a:aa: 3d:2e:9c:08:4b:cf:23:f1:15:68:1f:b1:34:3c:e5:c7:bf:07: b5:ec:be:7d:cf:91:b1:5d:e2:90:61:73:67:d9:33:ed:13:13: 16:55:4e:00:a3:ff:cd:aa:c4:39:fd:fd:8d:f5:11:13:47:07: 7e:b6:76:27:67:cb:36:80:f3:84:92:b6:15:1a:90:be:ce:75: 0c:3a:1f:d4:08:10:f2:54:22:4b:f5:ba:d1:7a:24:b5:62:96: b6:0a:94:24:01:25:e3:f8:10:0f:f5:0b:13:38:89:3f:d2:dd: 9e:19:f6:e5:a9:d7:98:46:7b:5f:05:3c:ce:fe:cb:21:02:16: 86:49:05:db:2a:2b:ad:6f:3a:69:ce:e9:e6:47:26:58:cd:89: 2b:28:84:46:77:06:c5:c4:6e:7e:4c:8c:11:69:36:24:60:22: 00:a1:ce:7a:97:9c:ca:89:7c:58:81:88:4b:bb:4f:42:a1:45: 50:cf:ad:d4:2d:37:3d:66:b2:b9:33:a1:ed:28:cb:c1:24:6a: 86:ea:50:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSyNGur/DtFji0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZGIyY2VlZWYtZTcxNi00NGZiLTg1MzQtNWRhZjU2ZThlMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFDOE4oemyAa0yzknJt4R34KBxgWg8n2scUL Uk/TfeI0i1Jpf4F2rJjClILP8QDt9JSrcqXSoCCSTBz6QgU/59BXCJGnkOO3mcf6 vX0I9/drPiKhpTEl3FEo3Y+yKyJLHOMGh0paxb2t9mDz0pX1ZTLWJobPWmFzStdj f+fr9Q0R2qmiPo0RrmbEzp153ElZJRkMkWVwGF3oDlC+ebtStOF3bTt10iPls5Dn yiEXktkx+7+LxEWiSIUZT/CnWpwx5EJvMRM6s7VUK0GLdrDAmvzN1WNXUlQizMlY 33Qmc8I1I6JST8tqdMa/657fV9/qMKrpIy4oE44FwwpzkDS7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpRTwlW4mAujb/ooZE8I5o4p4TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvOTAxNjhiM2UtNzYyNS0z ZGZiLWFlNWItNWU1YTExNzBlN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIH4gV5QhvxBGw2KHNxHKjV2xCXAL9qW8ISg7jp5S43DVndE1lX5sHH QFhcqKThLM9/AI0qqj0unAhLzyPxFWgfsTQ85ce/B7Xsvn3PkbFd4pBhc2fZM+0T ExZVTgCj/82qxDn9/Y31ERNHB362didnyzaA84SSthUakL7OdQw6H9QIEPJUIkv1 utF6JLVilrYKlCQBJeP4EA/1CxM4iT/S3Z4Z9uWp15hGe18FPM7+yyECFoZJBdsq K61vOmnO6eZHJljNiSsohEZ3BsXEbn5MjBFpNiRgIgChznqXnMqJfFiBiEu7T0Kh RVDPrdQtNz1msrkzoe0oy8EkaobqUGk= -----END CERTIFICATE-----Generated at Sun Aug 24 06:06:24 2025 by rpki-client