$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa File: 1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa (raw, json) Hash identifier: AUvRmXnNgZJ4wFyDyW+qdwdG4poE5FF1q/dhF3MADB0= Subject key identifier: 4A:82:25:52:B0:5C:85:C1:A9:61:0F:A3:42:F1:AA:C1:E2:A3:00:53 Certificate issuer: /CN=77fda34c-14d4-40e5-b350-895a343d3b87 Certificate serial: 010D0C9F4328584A35E587441F72F1B3A9139BC0 Authority key identifier: 61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 397563 IP address blocks: 74.122.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:87:44:1f:72:f1:b3:a9:13:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77fda34c-14d4-40e5-b350-895a343d3b87 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=ccccd687-bc25-4515-8d90-baa69e18989d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:43:ae:70:dc:e0:80:80:11:68:f0:1c:24: e7:34:cd:3f:e6:9e:f6:87:83:55:23:d1:18:d9:06: a3:0c:42:98:79:99:65:23:5b:6c:ba:8c:9c:87:dc: de:46:f2:01:64:cd:31:44:9f:d1:61:39:f7:72:da: c4:8a:d1:17:12:f2:d3:2c:86:d9:d0:51:06:ec:73: 37:a5:87:fa:62:0c:4d:53:7e:42:14:46:aa:59:74: de:33:83:e6:ed:7c:6f:09:89:6a:69:3e:56:ef:c4: 9e:c1:57:17:4d:e5:56:c8:85:08:0d:5d:e0:ae:50: c6:d1:73:ae:de:15:08:89:ce:96:68:8d:c1:eb:71: c2:38:53:d2:c5:96:f6:d2:c9:8f:99:21:37:1c:01: 98:92:a2:6e:e0:08:c8:68:5f:0b:b7:1d:9d:32:ea: 6f:40:f3:53:02:a8:a3:ce:0d:55:02:53:53:55:8d: a0:d9:a8:c4:0a:54:06:62:33:5e:32:0a:9d:b5:32: bb:f7:83:c7:d2:c7:13:b6:b8:8e:67:28:9c:47:12: eb:6e:60:f5:4f:90:10:cd:00:ee:98:be:b3:0e:9d: 86:88:50:a0:28:cc:5e:ce:ed:d5:bc:eb:e4:87:35: bd:e9:20:d2:0a:2b:03:36:ba:ae:e8:95:9c:36:50: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:25:52:B0:5C:85:C1:A9:61:0F:A3:42:F1:AA:C1:E2:A3:00:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/1c3b8207-c56f-33ea-8f55-b6d378f06a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl X509v3 Authority Key Identifier: keyid:61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer sbgp-ipAddrBlock: critical IPv4: 74.122.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:68:c9:d9:ac:91:f8:56:f7:27:7f:2e:9e:3a:4e:d8:32:a8: 54:6c:78:93:d9:b7:f6:24:da:14:df:19:c8:c3:fb:53:b4:41: 1e:70:2a:71:33:91:be:46:46:2a:6d:b2:ef:4d:2d:b5:7a:27: 87:ca:c4:53:f6:38:df:93:80:4f:52:16:0c:0c:b9:be:ac:7a: e3:36:98:46:3d:01:ee:fe:6f:03:8b:0b:ae:45:f6:c2:f9:09: 5e:d6:aa:f6:15:a0:64:47:3a:fe:9d:1b:6b:6e:58:1a:4c:f6: 43:82:ad:09:ed:a4:fd:60:84:57:b5:3c:4a:09:4c:a1:94:6c: cd:10:b9:8c:f1:fa:0b:3b:a6:3d:f8:f3:a7:77:0a:7d:7a:3c: 61:a7:af:ef:9e:21:ee:cf:60:bb:dd:e9:5e:f4:66:22:05:23: 2b:aa:52:8e:24:62:4a:28:22:f4:c6:48:ca:5f:ae:b7:69:0f: 3a:b3:8d:b2:2e:a9:a9:07:7f:ce:17:70:0b:95:8c:0f:c9:a8: 4f:d8:d1:03:51:cc:70:c3:5f:e0:88:d1:a3:e0:97:37:90:7b: 1d:9b:37:40:c0:39:3b:96:65:8a:18:e1:27:98:3c:e0:73:62: 08:e2:2a:d9:47:e2:c3:c8:9f:85:76:44:64:78:48:1c:4c:da: ab:27:76:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YdEH3Lxs6kTm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdmZGEzNGMtMTRkNC00MGU1LWIzNTAtODk1YTM0M2Qz Yjg3MB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk Y2NjY2Q2ODctYmMyNS00NTE1LThkOTAtYmFhNjllMTg5ODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihDrnDc4ICAEWjwHCTnNM0/5p72h4NVI9EY 2QajDEKYeZllI1tsuoych9zeRvIBZM0xRJ/RYTn3ctrEitEXEvLTLIbZ0FEG7HM3 pYf6YgxNU35CFEaqWXTeM4Pm7XxvCYlqaT5W78SewVcXTeVWyIUIDV3grlDG0XOu 3hUIic6WaI3B63HCOFPSxZb20smPmSE3HAGYkqJu4AjIaF8Ltx2dMupvQPNTAqij zg1VAlNTVY2g2ajEClQGYjNeMgqdtTK794PH0scTtriOZyicRxLrbmD1T5AQzQDu mL6zDp2GiFCgKMxezu3VvOvkhzW96SDSCisDNrqu6JWcNlDVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqCJVKwXIXBqWEPo0LxqsHiowBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83N2Zk YTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVhMzQzZDNiODcvMWMzYjgyMDctYzU2Zi0z M2VhLThmNTUtYjZkMzc4ZjA2YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzdmZGEzNGMtMTRkNC00MGU1LWIz NTAtODk1YTM0M2QzYjg3Lzc3ZmRhMzRjLTE0ZDQtNDBlNS1iMzUwLTg5NWEzNDNk M2I4Ny5jcmwwHwYDVR0jBBgwFoAUYTGluJrQczpudaqbqAuVsgxLE8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83N2ZkYTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVh MzQzZDNiODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdoydmskfhW9yd/Lp46TtgyqFRseJPZt/Yk2hTfGcjD+1O0QR5wKnEz kb5GRiptsu9NLbV6J4fKxFP2ON+TgE9SFgwMub6seuM2mEY9Ae7+bwOLC65F9sL5 CV7WqvYVoGRHOv6dG2tuWBpM9kOCrQntpP1ghFe1PEoJTKGUbM0QuYzx+gs7pj34 86d3Cn16PGGnr++eIe7PYLvd6V70ZiIFIyuqUo4kYkooIvTGSMpfrrdpDzqzjbIu qakHf84XcAuVjA/JqE/Y0QNRzHDDX+CI0aPglzeQex2bN0DAOTuWZYoY4SeYPOBz YgjiKtlH4sPIn4V2RGR4SBxM2qsndlg= -----END CERTIFICATE-----Generated at Mon Jun 30 01:29:45 2025 by rpki-client