$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa File: 2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa (raw, json) Hash identifier: k8KQo6k80xafqaT4KPamMUKArhh10BioPGUtAuOsC2c= Subject key identifier: BF:3E:C7:93:7B:17:42:BD:2E:39:A4:54:E9:D1:D7:9D:C7:14:02:ED Certificate issuer: /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Certificate serial: 010D0C9F4328584AD7D12627B1BC4078A34CA380 Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 36666 IP address blocks: 74.120.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:26:27:b1:bc:40:78:a3:4c:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=d3ebfb26-b894-43bb-a138-2dfdcfb7328b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:ab:91:af:ee:97:9a:db:56:2b:6f:3c:bd: 01:d0:d0:26:24:d9:c3:c4:e4:3d:b1:6c:47:35:e3: b9:4f:98:1a:92:f2:58:65:d2:f3:94:66:84:58:13: 14:49:b3:ec:8c:91:4c:ab:45:65:3d:e0:ee:2e:68: d5:74:53:c0:3a:28:de:34:ef:95:23:56:4a:9b:b5: 99:25:95:1d:eb:da:a0:14:74:90:47:87:9c:d7:3f: 2f:f3:ec:81:38:28:f6:1b:17:a2:88:a3:8a:a0:d9: 9f:d9:13:8c:af:ca:1b:84:51:53:37:fa:54:11:6f: 0f:6c:0f:fa:3a:f5:a6:9e:75:9c:47:93:99:43:26: f3:07:f6:34:f4:51:75:67:bb:ae:91:d7:b1:5a:1e: 24:18:67:d2:84:a8:bb:02:5e:5c:e2:5e:05:87:0b: a8:19:ad:2e:68:99:74:49:7d:a5:61:84:74:f7:96: 4f:44:4c:39:3f:d6:d5:24:12:0f:50:35:42:4e:50: 9d:4d:6f:4f:d7:be:9a:30:62:79:48:d5:1c:e8:f4: 18:33:92:4d:f2:3f:0e:48:60:09:b2:21:7d:e7:0d: c5:71:2c:c3:b1:87:42:78:40:1e:80:6d:45:85:b2: 10:a9:b2:83:dd:e8:b8:a7:5d:96:71:b0:b5:5a:2f: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3E:C7:93:7B:17:42:BD:2E:39:A4:54:E9:D1:D7:9D:C7:14:02:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl X509v3 Authority Key Identifier: keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer sbgp-ipAddrBlock: critical IPv4: 74.120.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:62:3d:45:7a:90:00:56:76:09:e3:f2:5e:6a:e3:1b:f5:77: 24:43:2f:df:c0:92:d9:a3:2e:8f:1c:11:4e:8d:10:1b:6e:fa: a3:4c:3f:d0:b0:92:b4:7d:55:7c:ce:ba:f1:fb:af:2a:1c:cb: 8c:ba:5b:68:f7:14:d2:c7:fa:d4:cc:c2:43:18:cd:ce:08:a7: c5:5e:b3:44:56:fa:45:99:17:76:24:99:2a:4d:6c:5e:8a:24: 46:42:29:f3:30:b6:60:72:06:e7:7e:80:19:5e:1f:e4:2d:4e: a4:e1:bc:0c:a5:e9:c3:63:06:b4:0d:62:33:1e:a2:4c:49:d1: 2f:72:23:a2:6d:6c:41:15:be:95:cf:18:cb:95:c1:1b:89:01: eb:18:3b:dc:59:5a:7a:37:8a:79:36:43:a7:d4:f9:86:7f:d9: cf:5c:9e:a9:b8:bd:a3:ab:83:27:e3:d7:de:7e:0d:ab:84:6a: ba:26:d1:c2:a5:9f:a7:5e:79:de:10:13:52:35:85:43:ea:59: e9:55:3c:fa:7c:44:c8:1f:83:e7:74:48:13:c6:1b:d8:1e:58: 36:ec:64:0b:5e:a2:86:9b:4d:38:fd:e1:98:92:49:2c:93:96: 5c:d5:20:4e:95:c1:28:61:88:0b:d7:50:99:2f:b4:0c:31:85: 1b:2b:41:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SYnsbxAeKNMo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw ZWViMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDNlYmZiMjYtYjg5NC00M2JiLWExMzgtMmRmZGNmYjczMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZirka/ul5rbVitvPL0B0NAmJNnDxOQ9sWxH NeO5T5gakvJYZdLzlGaEWBMUSbPsjJFMq0VlPeDuLmjVdFPAOijeNO+VI1ZKm7WZ JZUd69qgFHSQR4ec1z8v8+yBOCj2GxeiiKOKoNmf2ROMr8obhFFTN/pUEW8PbA/6 OvWmnnWcR5OZQybzB/Y09FF1Z7uukdexWh4kGGfShKi7Al5c4l4FhwuoGa0uaJl0 SX2lYYR095ZPREw5P9bVJBIPUDVCTlCdTW9P176aMGJ5SNUc6PQYM5JN8j8OSGAJ siF95w3FcSzDsYdCeEAegG1FhbIQqbKD3ei4p12WcbC1Wi9ygQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8+x5N7F0K9LjmkVOnR153HFALtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMmY3MDU2N2QtMGNmMC0z YzE0LTllNzktM2FlMjk3MzViYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1 MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4 ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRiPUV6kABWdgnj8l5q4xv1dyRDL9/AktmjLo8cEU6NEBtu+qNMP9Cw krR9VXzOuvH7ryocy4y6W2j3FNLH+tTMwkMYzc4Ip8Ves0RW+kWZF3YkmSpNbF6K JEZCKfMwtmByBud+gBleH+QtTqThvAyl6cNjBrQNYjMeokxJ0S9yI6JtbEEVvpXP GMuVwRuJAesYO9xZWno3ink2Q6fU+YZ/2c9cnqm4vaOrgyfj195+DauEarom0cKl n6deed4QE1I1hUPqWelVPPp8RMgfg+d0SBPGG9geWDbsZAteooabTTj94ZiSSSyT llzVIE6VwShhiAvXUJkvtAwxhRsrQRc= -----END CERTIFICATE-----Generated at Sun Aug 24 02:55:56 2025 by rpki-client