$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa File: 0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa (raw, json) Hash identifier: 7R91mKOwhojGBAAp+KFP1HJSvZlSZwxpfQYZ9u697Ng= Subject key identifier: CC:64:3C:F2:41:7D:A5:36:8C:A1:A9:2C:CB:EC:98:4D:15:14:4F:ED Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584B821E2093565DB3411D85C620 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 400702 IP address blocks: 74.118.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:20:93:56:5d:b3:41:1d:85:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=a8cd705a-d3d1-47f2-9cb9-dcbef434d7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:40:09:c8:f5:69:66:35:65:7f:9e:e5:fe: 99:74:96:c1:e0:48:3f:44:26:45:6f:1a:a0:f4:da: 9a:2c:60:75:82:0f:bc:ed:69:7e:fc:39:56:b2:13: 48:2e:cf:50:95:34:3c:01:1e:21:a3:c1:41:c9:5a: 98:33:fc:82:da:b1:d7:75:42:00:c9:3d:75:39:a8: 36:cb:2d:7d:b1:91:65:66:5a:82:11:a1:67:0e:01: 08:02:79:65:02:1f:3e:28:7e:73:00:46:6c:38:af: 59:3d:7b:46:6f:fe:44:29:d9:2d:ac:a3:ad:e0:a9: 5a:cc:80:2a:55:0d:eb:6a:02:16:a3:4c:13:dd:f3: 5f:aa:9c:ae:c6:79:45:c9:5f:57:c9:1b:96:cf:cd: 83:dd:5e:2d:0f:4b:bb:aa:3a:85:61:b8:71:cf:2f: 38:c1:36:a3:8b:62:bc:30:19:95:dd:e4:56:cf:d4: 1b:94:b2:23:87:bb:2d:9f:08:48:95:bc:c0:b6:64: 22:d0:6a:08:b0:39:e5:2b:ea:60:3d:63:34:66:58: b6:43:68:53:0c:f1:d2:64:b7:5a:2a:c9:ec:55:21: 1b:d3:12:1b:42:51:79:c1:75:b2:1b:c3:7b:a0:90: f0:96:25:ee:b7:d9:7c:89:e6:c6:85:1b:15:5e:15: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:64:3C:F2:41:7D:A5:36:8C:A1:A9:2C:CB:EC:98:4D:15:14:4F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 74.118.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f9:ea:25:60:6d:5d:7d:9c:99:ad:aa:49:7e:c8:3c:82:d0: 66:66:3e:05:30:2e:b3:51:ae:4c:dc:c9:ee:96:c7:62:ff:9a: 8f:a9:df:6e:ed:57:6c:09:e1:fa:27:ae:74:ad:01:87:65:a9: dd:0e:4f:73:0d:0e:be:cc:5a:7f:53:ff:39:22:40:90:40:e5: d6:a3:30:0e:fa:72:e2:87:68:c7:16:f5:b6:e6:97:6a:cf:f2: 9c:1a:cb:92:fe:f3:57:cd:1c:e0:c1:d5:2c:43:66:bd:e7:5f: 1d:79:3e:31:1a:f1:df:81:29:4f:82:dc:78:a5:8f:14:c3:39: be:22:b6:20:02:45:60:a5:25:f0:d7:41:84:40:6c:01:79:ae: a8:9d:2a:09:f2:fc:92:d2:7b:18:30:8a:02:a0:40:b3:d5:e6: 31:fc:9d:cd:be:1c:a9:99:63:73:99:ce:a3:66:62:a1:1f:d1: 82:d1:2b:5f:35:e4:f2:59:28:51:f7:95:1e:30:bb:83:67:0d: da:87:4a:26:f3:25:cf:04:d5:0e:ca:39:32:23:70:06:64:3f: 6b:80:46:18:ad:1c:c6:da:4d:d0:d0:1d:9f:4b:57:1b:20:53: 3a:f9:9b:70:cb:a2:df:03:83:db:78:06:2c:bf:e9:7d:16:e7: 35:0f:6e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHiCTVl2zQR2FxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YThjZDcwNWEtZDNkMS00N2YyLTljYjktZGNiZWY0MzRkN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C9ACcj1aWY1ZX+e5f6ZdJbB4Eg/RCZFbxqg 9NqaLGB1gg+87Wl+/DlWshNILs9QlTQ8AR4ho8FByVqYM/yC2rHXdUIAyT11Oag2 yy19sZFlZlqCEaFnDgEIAnllAh8+KH5zAEZsOK9ZPXtGb/5EKdktrKOt4KlazIAq VQ3ragIWo0wT3fNfqpyuxnlFyV9XyRuWz82D3V4tD0u7qjqFYbhxzy84wTaji2K8 MBmV3eRWz9QblLIjh7stnwhIlbzAtmQi0GoIsDnlK+pgPWM0Zli2Q2hTDPHSZLda KsnsVSEb0xIbQlF5wXWyG8N7oJDwliXut9l8iebGhRsVXhW8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxkPPJBfaU2jKGpLMvsmE0VFE/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvMDU3MGQ3YTItNGQ5ZS0z ODVlLTk5NTUtM2ZjN2Q4Y2E3N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn56iVgbV19nJmtqkl+yDyC0GZmPgUwLrNRrkzcye6Wx2L/mo+p327t V2wJ4fonrnStAYdlqd0OT3MNDr7MWn9T/zkiQJBA5dajMA76cuKHaMcW9bbml2rP 8pway5L+81fNHODB1SxDZr3nXx15PjEa8d+BKU+C3HiljxTDOb4itiACRWClJfDX QYRAbAF5rqidKgny/JLSexgwigKgQLPV5jH8nc2+HKmZY3OZzqNmYqEf0YLRK181 5PJZKFH3lR4wu4NnDdqHSibzJc8E1Q7KOTIjcAZkP2uARhitHMbaTdDQHZ9LVxsg Uzr5m3DLot8Dg9t4Biy/6X0W5zUPbmA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:25 2025 by rpki-client