$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa File: c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa (raw, json) Hash identifier: Xp91YQ8AVyKu9evNC0yWYaISkiuyMfXFeQswcdZFWZk= Subject key identifier: F4:3C:31:94:6B:75:AC:E7:65:E8:7D:63:99:34:18:74:1D:07:16:F7 Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584AF7EBDEB8E0D747595E03B5A0 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 54552 IP address blocks: 74.123.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:de:b8:e0:d7:47:59:5e:03:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=a804f91e-24c6-4b1e-89b9-1df2e82b51e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:86:31:b4:f9:44:fb:9c:7d:bd:62:a2:6c: e9:15:82:db:1f:53:9a:f6:cc:84:67:71:e0:ff:36: 33:b7:9c:9a:82:05:93:56:c4:40:65:21:9b:a6:22: 3e:19:06:19:9e:59:33:51:3c:02:6c:43:2a:f7:a0: 69:ff:b2:b6:c6:38:a1:15:65:54:5a:f7:98:c2:90: 42:ba:62:ee:2c:ec:df:cd:d0:95:03:c0:81:17:68: f1:96:b4:90:87:87:2e:37:49:09:9e:ab:59:3b:f7: be:c1:ec:21:8a:9d:41:75:96:a6:e1:6a:b9:54:d8: 2e:c2:92:aa:47:d2:82:eb:aa:45:7d:97:5e:a9:f0: ea:c8:6e:06:7b:c5:a9:50:77:a6:13:28:db:e1:f7: 6c:b5:9e:e3:04:04:e1:95:81:76:4b:03:6a:af:01: 7e:44:c7:06:27:9b:2c:40:be:2a:c5:b1:27:12:4b: 2e:6a:92:84:ec:be:ac:c5:a6:11:99:ea:97:d2:87: 46:9f:dd:bb:9e:7c:4e:36:f1:08:f7:06:2c:51:f2: 8e:8e:f2:44:66:04:01:08:db:78:93:24:84:f7:fc: 7e:53:47:1a:c4:bc:e8:78:16:f7:cb:bc:f4:c4:47: 52:e0:25:4b:0d:85:3c:79:55:6f:48:ec:60:60:cf: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3C:31:94:6B:75:AC:E7:65:E8:7D:63:99:34:18:74:1D:07:16:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 74.123.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:33:22:66:05:be:80:62:a5:5a:b7:b3:a1:af:9e:9f:64:bd: da:23:5f:0d:ae:a5:79:3a:ec:4c:52:10:10:8b:78:6f:c1:5d: ff:7e:c6:d4:88:57:f6:a1:8a:42:f5:89:a6:66:ff:1b:88:a1: 24:ed:b5:e9:af:4a:fa:99:af:ad:e5:de:c5:52:e2:45:4d:5d: aa:86:c9:73:49:31:d3:de:ee:c7:5c:f1:5d:f6:8b:a3:67:3d: 34:f6:b3:07:c8:42:69:92:05:1a:47:f3:e2:5c:f7:06:03:75: 72:25:b2:53:06:bf:9c:95:9d:21:76:81:9e:52:9e:4c:2a:85: ce:e3:4a:2e:85:bb:b3:ae:dd:1d:e0:d8:ca:75:a5:25:ba:67: 13:58:23:0c:f7:44:d0:b5:c6:08:f2:f9:8b:ef:6f:22:6b:3f: 3a:b5:b7:d2:c4:96:eb:54:ba:f8:b6:ee:84:ed:ed:f3:08:8b: dd:bd:0f:13:23:1a:ec:a3:7b:26:58:7a:74:fd:78:2a:a2:2f: d2:56:64:3f:b5:29:c2:49:e4:b8:54:b6:6b:ea:74:04:71:61: 4b:15:69:eb:4e:34:3d:fb:ea:09:ae:1d:14:3a:e3:2e:32:31: 50:6d:d4:d9:f8:6a:b8:35:96:ba:25:18:c9:52:12:e7:29:f4: 1a:a2:ad:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369644NdHWV4DtaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YTgwNGY5MWUtMjRjNi00YjFlLTg5YjktMWRmMmU4MmI1MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh2GMbT5RPucfb1iomzpFYLbH1Oa9syEZ3Hg /zYzt5yaggWTVsRAZSGbpiI+GQYZnlkzUTwCbEMq96Bp/7K2xjihFWVUWveYwpBC umLuLOzfzdCVA8CBF2jxlrSQh4cuN0kJnqtZO/e+wewhip1BdZam4Wq5VNguwpKq R9KC66pFfZdeqfDqyG4Ge8WpUHemEyjb4fdstZ7jBAThlYF2SwNqrwF+RMcGJ5ss QL4qxbEnEksuapKE7L6sxaYRmeqX0odGn927nnxONvEI9wYsUfKOjvJEZgQBCNt4 kySE9/x+U0caxLzoeBb3y7z0xEdS4CVLDYU8eVVvSOxgYM8XIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ8MZRrdaznZeh9Y5k0GHQdBxb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvYzQ0N2ZiNzYtNTJiYS0z M2JlLThhYjQtM2ZkOGYyZDZkYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0zImYFvoBipVq3s6Gvnp9kvdojXw2upXk67ExSEBCLeG/BXf9+xtSI V/ahikL1iaZm/xuIoSTttemvSvqZr63l3sVS4kVNXaqGyXNJMdPe7sdc8V32i6Nn PTT2swfIQmmSBRpH8+Jc9wYDdXIlslMGv5yVnSF2gZ5Snkwqhc7jSi6Fu7Ou3R3g 2Mp1pSW6ZxNYIwz3RNC1xgjy+YvvbyJrPzq1t9LElutUuvi27oTt7fMIi929DxMj GuyjeyZYenT9eCqiL9JWZD+1KcJJ5LhUtmvqdARxYUsVaetOND376gmuHRQ64y4y MVBt1Nn4arg1lrolGMlSEucp9Bqire4= -----END CERTIFICATE-----Generated at Wed Oct 22 04:35:03 2025 by rpki-client