$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa File: a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa (raw, json) Hash identifier: LbWdWGIIRDbUNXKCQmjhJZXKN8RMICQ2Vx7yyvqZrr0= Subject key identifier: EB:02:5C:FF:EE:02:BC:AA:19:78:55:BC:35:1C:5B:C0:CA:B9:09:D9 Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Certificate serial: 010D0C9F4328584AC01632299FB9413FC4E36180 Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 396982 IP address blocks: 74.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:32:29:9f:b9:41:3f:c4:e3:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=2b096896-4d65-431b-bfc3-8086f36e83da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:02:de:a8:a5:ef:30:36:54:2a:f3:9f:c4: 01:e9:77:eb:55:6b:6f:a4:c1:bd:75:a6:9c:e9:87: 91:03:41:b5:a1:39:fa:43:20:21:b4:4c:70:ed:f3: 3f:49:50:97:6a:bb:1e:27:9f:e0:0f:30:f0:da:99: 53:14:d2:17:3b:9a:43:ec:46:be:3f:55:2c:dd:dc: 6b:83:a1:10:8a:ac:70:dc:3d:d4:59:14:a9:f0:20: c5:3e:89:94:0e:3d:a1:54:4d:21:22:18:22:c1:5f: 9c:71:f3:af:f7:fa:69:b5:3a:e1:38:1f:0b:c1:ff: 11:d7:6a:af:b5:37:bf:9e:df:7b:d6:55:d6:9b:37: cb:f7:be:f1:a9:06:c6:bf:e8:52:61:25:ba:f6:96: fc:87:48:6e:08:39:f7:c0:0c:ca:03:f9:b9:8b:6e: 64:a5:16:a2:18:d8:61:4a:2f:fa:78:b9:f2:54:93: 78:03:59:ac:3f:70:2f:3e:02:c3:ee:1b:e2:ae:a9: 26:f7:f0:72:f7:b2:73:ed:e8:ce:d1:5b:90:57:6d: db:a3:4b:63:0b:14:46:a4:09:6c:8e:63:79:27:60: d9:24:61:30:49:4b:bc:a2:0e:dd:01:64:4c:98:ce: 47:e1:40:87:36:44:57:78:e8:9e:b8:13:52:ab:28: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:5C:FF:EE:02:BC:AA:19:78:55:BC:35:1C:5B:C0:CA:B9:09:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl X509v3 Authority Key Identifier: keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer sbgp-ipAddrBlock: critical IPv4: 74.51.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b8:39:22:87:5b:43:0d:25:f3:2e:eb:91:c5:2c:31:c7:18: 98:2b:12:6b:0e:de:5f:5a:e5:30:b8:59:39:75:6c:b7:2f:79: cf:11:a4:9d:25:5f:16:ea:9c:dc:90:c2:67:0c:27:86:70:fe: 5e:0d:3d:ef:16:9a:8e:08:85:06:f5:24:ed:b8:08:00:1d:2d: d2:60:ca:63:29:6a:6f:42:1f:c3:0d:35:cc:07:9e:bf:af:58: ab:44:15:fd:b6:9c:f1:7b:fd:de:ed:b3:ac:95:50:10:47:d6: 60:6c:93:9d:35:16:68:83:a8:e2:ec:c1:7f:47:df:73:13:27: 01:2d:08:d1:83:93:b2:f1:5c:3a:3d:f5:1a:94:d0:42:cd:f8: 95:f4:7a:9a:3d:9a:dc:d4:72:1c:e1:0a:8b:f5:45:43:71:64: 36:9f:9e:f5:a8:9f:54:be:e9:f9:5a:7e:37:83:63:a9:f6:cc: bb:6f:3e:03:d6:e6:b9:f6:ac:d6:78:46:88:9f:e7:d7:3d:8b: f2:8a:1d:35:fd:fe:ab:b1:89:93:19:58:f3:87:a3:cd:95:f5: ae:9c:94:64:89:49:19:91:e4:fd:64:a9:4c:ec:1a:40:6d:94: a9:e2:ba:06:96:40:dc:d3:16:b1:32:c9:08:10:30:2b:0c:2b: 53:7e:42:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjIpn7lBP8TjYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1N2E0ZTQtNDc3MS00Yjg3LWJlNmEtZTNiMjdmNWFj NWRkMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MmIwOTY4OTYtNGQ2NS00MzFiLWJmYzMtODA4NmYzNmU4M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEUC3qil7zA2VCrzn8QB6XfrVWtvpMG9daac 6YeRA0G1oTn6QyAhtExw7fM/SVCXarseJ5/gDzDw2plTFNIXO5pD7Ea+P1Us3dxr g6EQiqxw3D3UWRSp8CDFPomUDj2hVE0hIhgiwV+ccfOv9/pptTrhOB8Lwf8R12qv tTe/nt971lXWmzfL977xqQbGv+hSYSW69pb8h0huCDn3wAzKA/m5i25kpRaiGNhh Si/6eLnyVJN4A1msP3AvPgLD7hvirqkm9/By97Jz7ejO0VuQV23bo0tjCxRGpAls jmN5J2DZJGEwSUu8og7dAWRMmM5H4UCHNkRXeOieuBNSqyg/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsCXP/uAryqGXhVvDUcW8DKuQnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3 YTRlNC00NzcxLTRiODctYmU2YS1lM2IyN2Y1YWM1ZGQvYTI1NTJlODYtMDliMC0z ZGJhLThiZjEtMmU5ZjhlNGQxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM1N2E0ZTQtNDc3MS00Yjg3LWJl NmEtZTNiMjdmNWFjNWRkL2FjNTdhNGU0LTQ3NzEtNGI4Ny1iZTZhLWUzYjI3ZjVh YzVkZC5jcmwwHwYDVR0jBBgwFoAU1dmHxFHPdgJ2FWwY2sXGD83J/ckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3YTRlNC00NzcxLTRiODctYmU2YS1lM2Iy N2Y1YWM1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC4OSKHW0MNJfMu65HFLDHHGJgrEmsO3l9a5TC4WTl1bLcvec8RpJ0l XxbqnNyQwmcMJ4Zw/l4NPe8Wmo4IhQb1JO24CAAdLdJgymMpam9CH8MNNcwHnr+v WKtEFf22nPF7/d7ts6yVUBBH1mBsk501FmiDqOLswX9H33MTJwEtCNGDk7LxXDo9 9RqU0ELN+JX0epo9mtzUchzhCov1RUNxZDafnvWon1S+6flafjeDY6n2zLtvPgPW 5rn2rNZ4Roif59c9i/KKHTX9/quxiZMZWPOHo82V9a6clGSJSRmR5P1kqUzsGkBt lKniugaWQNzTFrEyyQgQMCsMK1N+QvM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:43:47 2025 by rpki-client