$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa File: 0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa (raw, json) Hash identifier: 1WmreZcGA3LPFrgDXm8HiQdT1ngi/RvWHkam2Q4tuWY= Subject key identifier: 32:D1:6C:89:E8:78:12:4A:B6:F3:A3:88:81:36:57:1B:D8:5A:47:F8 Certificate issuer: /CN=77fda34c-14d4-40e5-b350-895a343d3b87 Certificate serial: 010D0C9F4328584A374AC169D5F084CAFFC04B00 Authority key identifier: 61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 60707 IP address blocks: 74.122.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c1:69:d5:f0:84:ca:ff:c0:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77fda34c-14d4-40e5-b350-895a343d3b87 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=193c13a8-09a8-406c-8fb0-6c7a769cbe4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:aa:7e:b4:03:19:f8:03:ff:aa:80:4f:b5: 15:ab:1d:9c:5e:bb:e7:65:a4:49:92:b9:65:30:8b: 60:c4:5a:91:70:9a:ee:65:56:78:0f:60:f8:02:41: 46:b9:15:31:89:19:24:e3:65:72:fc:03:ac:56:a3: cf:43:10:0b:aa:3c:2f:21:c2:f0:2b:fd:70:cb:7e: 08:f0:25:d9:86:e4:64:ca:38:97:37:7e:4c:9d:cf: 18:36:ad:fa:86:ed:19:10:df:7b:d0:9e:2f:e8:cb: 28:58:21:5d:a8:f7:30:bb:f7:d7:81:f7:1d:b9:3f: 73:99:36:d2:2f:61:fa:41:15:67:94:11:50:95:8e: c5:0b:74:8b:d0:84:c7:b5:57:db:ea:53:36:0c:eb: 35:40:e1:36:28:2e:44:dd:ed:a9:20:5e:a6:73:b9: 1c:a8:e2:bc:6c:4c:2a:62:60:a8:25:09:7d:90:ba: 6e:45:d4:87:53:3b:26:42:e3:c7:5a:82:dc:02:21: 16:12:79:88:a3:01:4c:23:dc:cd:1e:3c:40:26:bb: 1f:f1:a4:8f:2b:e6:28:20:e1:09:14:a6:89:cd:c1: 78:9f:63:fc:8b:5b:fd:56:9d:82:d6:79:3d:d9:12: f9:55:d7:51:04:8c:40:03:f5:c8:00:5f:7f:f8:a1: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D1:6C:89:E8:78:12:4A:B6:F3:A3:88:81:36:57:1B:D8:5A:47:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl X509v3 Authority Key Identifier: keyid:61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer sbgp-ipAddrBlock: critical IPv4: 74.122.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:66:5a:d1:e4:9f:06:a5:71:db:87:3a:70:cc:a0:a3:21:bf: 7b:27:15:a3:88:d5:3d:55:28:7e:64:ca:49:ea:3d:96:6f:0c: 41:64:27:df:95:d1:16:62:b1:40:cc:4d:60:2f:6b:93:af:ca: c4:ad:0e:5f:b0:0a:5b:b7:e8:c4:f2:ca:a0:29:22:e1:30:a9: af:95:ba:9e:1b:76:fa:b0:e4:74:33:73:41:49:bc:72:ca:bd: fa:b3:44:fb:2a:9e:71:26:0a:a7:5b:cb:16:8b:a8:c9:a8:47: f2:86:db:58:4f:11:58:70:31:24:2a:42:16:f6:0b:2c:5f:f0: 58:6f:62:84:34:cf:61:b6:df:49:a9:f5:15:fc:38:ba:66:6f: d7:bb:5a:b1:58:ee:33:43:7f:fa:ac:1b:f9:54:73:34:eb:f8: 08:8e:f5:8a:c6:ec:4e:b1:1b:8f:e8:6c:12:ef:ce:29:cd:14: 12:c2:9b:e8:4a:f6:0d:f0:00:e1:4d:b9:cc:4f:74:13:38:50: f3:12:ec:5f:4d:4a:3a:7c:a4:27:15:fc:dd:9e:25:0f:5b:0a: 28:07:8f:c0:90:6f:59:7e:96:da:5f:53:80:f9:71:e1:a3:d1: 49:05:f0:0b:4d:be:97:55:b1:c6:c7:d2:a1:25:1d:5c:13:97: ef:02:29:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsFp1fCEyv/ASwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdmZGEzNGMtMTRkNC00MGU1LWIzNTAtODk1YTM0M2Qz Yjg3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MTkzYzEzYTgtMDlhOC00MDZjLThmYjAtNmM3YTc2OWNiZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/CqfrQDGfgD/6qAT7UVqx2cXrvnZaRJkrll MItgxFqRcJruZVZ4D2D4AkFGuRUxiRkk42Vy/AOsVqPPQxALqjwvIcLwK/1wy34I 8CXZhuRkyjiXN35Mnc8YNq36hu0ZEN970J4v6MsoWCFdqPcwu/fXgfcduT9zmTbS L2H6QRVnlBFQlY7FC3SL0ITHtVfb6lM2DOs1QOE2KC5E3e2pIF6mc7kcqOK8bEwq YmCoJQl9kLpuRdSHUzsmQuPHWoLcAiEWEnmIowFMI9zNHjxAJrsf8aSPK+YoIOEJ FKaJzcF4n2P8i1v9Vp2C1nk92RL5VddRBIxAA/XIAF9/+KHUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLRbInoeBJKtvOjiIE2VxvYWkf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83N2Zk YTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVhMzQzZDNiODcvMDI1NmU0ZGQtODQ4MS0z YmIwLTlhOWMtMjU1YWU0YWIzMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzdmZGEzNGMtMTRkNC00MGU1LWIz NTAtODk1YTM0M2QzYjg3Lzc3ZmRhMzRjLTE0ZDQtNDBlNS1iMzUwLTg5NWEzNDNk M2I4Ny5jcmwwHwYDVR0jBBgwFoAUYTGluJrQczpudaqbqAuVsgxLE8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83N2ZkYTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVh MzQzZDNiODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBmWtHknwalcduHOnDMoKMhv3snFaOI1T1VKH5kyknqPZZvDEFkJ9+V 0RZisUDMTWAva5OvysStDl+wClu36MTyyqApIuEwqa+Vup4bdvqw5HQzc0FJvHLK vfqzRPsqnnEmCqdbyxaLqMmoR/KG21hPEVhwMSQqQhb2Cyxf8FhvYoQ0z2G230mp 9RX8OLpmb9e7WrFY7jNDf/qsG/lUczTr+AiO9YrG7E6xG4/obBLvzinNFBLCm+hK 9g3wAOFNucxPdBM4UPMS7F9NSjp8pCcV/N2eJQ9bCigHj8CQb1l+ltpfU4D5ceGj 0UkF8AtNvpdVscbH0qElHVwTl+8CKeA= -----END CERTIFICATE-----Generated at Sun Jun 29 13:21:19 2025 by rpki-client