$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/bca3176c-2818-3c35-aef6-921040bc10af.roa File: bca3176c-2818-3c35-aef6-921040bc10af.roa (raw, json) Hash identifier: wkejT7tb/cbUitb7xaa9s1zye+beBBApDcdYX2Uxwys= Subject key identifier: 65:5F:28:5F:F9:4F:33:49:02:09:4F:93:37:4A:03:63:D8:44:A5:9F Certificate issuer: /CN=4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51 Certificate serial: 010D0C9F4328584B8E21D2A1182DDE0D763BE2C0 Authority key identifier: 13:69:5C:7A:B2:9F:43:61:0B:E7:CE:B5:62:26:6E:E3:7E:6C:62:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/bca3176c-2818-3c35-aef6-921040bc10af.roa Signing time: Fri 17 Oct 2025 20:20:38 +0000 ROA not before: Fri 17 Oct 2025 20:20:38 +0000 ROA not after: Thu 15 Jan 2026 21:20:38 +0000 asID: 398969 IP address blocks: 74.120.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:21:d2:a1:18:2d:de:0d:76:3b:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51 Validity Not Before: Oct 17 20:20:38 2025 GMT Not After : Jan 15 21:20:38 2026 GMT Subject: CN=e6026334-374d-4e7e-810b-48232fda5b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:a6:8d:c7:f3:2c:ca:ff:66:01:23:ac:bd: 25:b6:c6:50:64:f2:e9:88:55:e9:5d:7c:f9:52:ce: 7c:8b:3e:14:83:74:6a:4b:d1:dc:0d:8d:54:2b:ae: dd:0e:b3:38:83:21:36:ac:a3:50:95:85:6c:54:cf: 76:05:c5:6f:c8:fc:e3:49:7c:1b:4a:ed:cc:fe:18: e5:8b:2c:cf:23:c4:58:ff:c0:97:01:d8:84:08:c3: e1:fb:73:3c:61:e9:a3:a1:02:8e:b2:f0:c6:ce:98: a4:e8:d2:83:17:0b:8e:8d:81:63:b2:52:b1:62:2d: ac:54:2d:d5:ac:ca:bc:38:34:f3:bb:26:59:a8:a4: 24:84:b8:30:fe:3c:df:e6:0d:81:97:e7:0d:f9:ee: 36:d3:3b:40:bc:65:db:0c:83:8b:28:96:f2:02:03: 2e:7b:e7:7a:20:17:23:ff:58:82:f6:b5:29:e1:e5: 36:df:d2:cf:eb:d2:b1:f4:b8:38:6b:4a:60:cc:db: c0:be:60:4a:a1:12:e9:a1:ed:ee:a7:03:32:56:5f: bf:73:e0:4f:2c:6a:79:8b:3e:19:78:69:40:fe:32: d4:4f:20:74:a4:ed:a2:50:87:35:14:21:2b:cf:99: cb:2b:ea:c4:9d:6c:cf:28:c6:f2:67:5a:e7:dc:17: dd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:28:5F:F9:4F:33:49:02:09:4F:93:37:4A:03:63:D8:44:A5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/bca3176c-2818-3c35-aef6-921040bc10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.crl X509v3 Authority Key Identifier: keyid:13:69:5C:7A:B2:9F:43:61:0B:E7:CE:B5:62:26:6E:E3:7E:6C:62:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer sbgp-ipAddrBlock: critical IPv4: 74.120.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:52:63:a8:0e:fa:18:56:ff:46:25:ee:b9:98:66:eb:91:5b: ed:2c:e9:7c:9c:39:7e:fa:a2:35:eb:63:c8:2c:fe:5c:e5:28: 8c:6b:2b:e1:c0:f8:13:59:92:e4:20:ea:fc:86:0a:7f:34:7d: 2d:36:10:d5:b8:bb:ca:70:2a:1b:0d:dd:02:9d:17:8f:59:70: d0:98:6e:0d:42:c4:99:c2:38:ab:ba:7a:f6:4c:71:e0:21:28: fa:e8:69:c0:1d:10:63:83:84:86:27:12:c8:4e:e7:ae:28:30: db:25:0b:37:e2:57:79:8d:f3:aa:3e:c8:13:db:7c:2d:34:b6: 02:f5:b3:3d:3d:73:ab:6e:bb:7a:1d:e4:52:79:f8:68:9b:b6: de:5f:ea:4d:3a:a2:f2:ff:b1:e2:6a:8c:8d:84:39:7f:70:90: 04:7e:65:a1:f1:b8:f5:44:19:85:0b:e8:9b:37:c9:26:ca:bc: 53:04:f0:f6:f1:61:4a:0c:81:cc:8b:01:b7:32:ef:4f:02:9f: bb:46:2f:a4:70:7a:d0:b5:ae:a0:75:02:e9:14:e6:8f:52:31: 9a:e2:3a:2a:29:07:6e:98:05:78:0f:4b:87:d4:b1:de:84:1c: 4b:ba:09:24:b4:29:a2:5a:09:b1:08:e5:75:4b:5d:1d:93:71: d8:b1:a7:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOIdKhGC3eDXY74sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjNzAzMzMtOTRmZS00YzE4LWI0ZjgtNmE4YjlhMWEx ZDUxMB4XDTI1MTAxNzIwMjAzOFoXDTI2MDExNTIxMjAzOFowLzEtMCsGA1UEAxMk ZTYwMjYzMzQtMzc0ZC00ZTdlLTgxMGItNDgyMzJmZGE1YjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz2mjcfzLMr/ZgEjrL0ltsZQZPLpiFXpXXz5 Us58iz4Ug3RqS9HcDY1UK67dDrM4gyE2rKNQlYVsVM92BcVvyPzjSXwbSu3M/hjl iyzPI8RY/8CXAdiECMPh+3M8YemjoQKOsvDGzpik6NKDFwuOjYFjslKxYi2sVC3V rMq8ODTzuyZZqKQkhLgw/jzf5g2Bl+cN+e420ztAvGXbDIOLKJbyAgMue+d6IBcj /1iC9rUp4eU239LP69Kx9Lg4a0pgzNvAvmBKoRLpoe3upwMyVl+/c+BPLGp5iz4Z eGlA/jLUTyB0pO2iUIc1FCErz5nLK+rEnWzPKMbyZ1rn3BfdcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVfKF/5TzNJAglPkzdKA2PYRKWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZmM3 MDMzMy05NGZlLTRjMTgtYjRmOC02YThiOWExYTFkNTEvYmNhMzE3NmMtMjgxOC0z YzM1LWFlZjYtOTIxMDQwYmMxMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGZjNzAzMzMtOTRmZS00YzE4LWI0 ZjgtNmE4YjlhMWExZDUxLzRmYzcwMzMzLTk0ZmUtNGMxOC1iNGY4LTZhOGI5YTFh MWQ1MS5jcmwwHwYDVR0jBBgwFoAUE2lcerKfQ2EL5861YiZu435sYhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZmM3MDMzMy05NGZlLTRjMTgtYjRmOC02YThi OWExYTFkNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZSY6gO+hhW/0Yl7rmYZuuRW+0s6XycOX76ojXrY8gs/lzlKIxrK+HA +BNZkuQg6vyGCn80fS02ENW4u8pwKhsN3QKdF49ZcNCYbg1CxJnCOKu6evZMceAh KProacAdEGODhIYnEshO564oMNslCzfiV3mN86o+yBPbfC00tgL1sz09c6tuu3od 5FJ5+Gibtt5f6k06ovL/seJqjI2EOX9wkAR+ZaHxuPVEGYUL6Js3ySbKvFME8Pbx YUoMgcyLAbcy708Cn7tGL6RwetC1rqB1AukU5o9SMZriOiopB26YBXgPS4fUsd6E HEu6CSS0KaJaCbEI5XVLXR2Tcdixp/k= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:49 2025 by rpki-client