$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/34e49ef5-cd98-32d3-b7da-7f4da275f803.roa File: 34e49ef5-cd98-32d3-b7da-7f4da275f803.roa (raw, json) Hash identifier: diyKOTOLL6X7gvPB0wPWQRDL2s8Zv0HKXSMMJ6Hz/sA= Subject key identifier: 01:1F:23:4E:9B:65:53:F6:39:33:2A:B4:1A:2F:D9:6B:65:95:1B:3D Certificate issuer: /CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9 Certificate serial: 010D0C9F4328584B4F74EF6D7605F076AA3D2B80 Authority key identifier: 18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/34e49ef5-cd98-32d3-b7da-7f4da275f803.roa Signing time: Thu 25 Sep 2025 09:32:10 +0000 ROA not before: Thu 25 Sep 2025 09:32:10 +0000 ROA not after: Wed 24 Dec 2025 10:32:10 +0000 asID: 36464 IP address blocks: 74.118.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:74:ef:6d:76:05:f0:76:aa:3d:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9 Validity Not Before: Sep 25 09:32:10 2025 GMT Not After : Dec 24 10:32:10 2025 GMT Subject: CN=32b19f9d-1825-49c5-bad2-3acd81837247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:34:83:99:17:7c:aa:e7:15:95:37:6f:79: 93:9f:80:e0:7d:c9:ab:07:d5:76:d6:d2:b2:1a:9b: 83:44:09:b5:31:0b:17:b0:d5:59:6a:68:bb:04:9b: 6a:c7:42:ce:c1:98:42:a4:1c:cc:5c:9c:8c:c1:b1: 54:91:9e:35:ac:9c:c0:60:b9:87:54:c9:6a:67:fb: 8e:e3:8c:2a:74:33:6f:2a:46:9e:64:b8:e9:af:0d: 39:9b:74:11:f5:48:d7:21:c0:59:3f:b4:46:8d:b6: b3:41:bd:aa:b2:4d:ab:36:4b:cf:1b:4d:33:3e:57: da:bc:35:64:c8:47:28:ab:0f:c6:6f:f4:f6:83:00: 97:2a:d3:88:ae:82:6a:cd:db:68:fc:e7:79:42:fd: 19:04:c2:63:e9:28:21:1e:d9:d3:53:37:99:52:d5: 8a:70:b8:b7:7f:95:c7:85:2a:e0:9d:b6:01:e0:42: 43:38:aa:1f:64:62:28:e6:a7:cb:8b:61:f2:d0:da: f5:e7:67:eb:31:8c:41:f4:b1:79:10:97:5e:c0:ab: 8e:ff:49:3c:de:d1:1f:cf:e1:a0:59:d0:c5:a6:9a: c8:05:83:63:4d:19:38:10:3c:d6:8f:17:b9:72:f7: 06:5d:30:8e:03:98:e7:03:ee:d1:72:da:75:2e:7e: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:23:4E:9B:65:53:F6:39:33:2A:B4:1A:2F:D9:6B:65:95:1B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/34e49ef5-cd98-32d3-b7da-7f4da275f803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl X509v3 Authority Key Identifier: keyid:18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer sbgp-ipAddrBlock: critical IPv4: 74.118.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c2:00:ee:e1:a6:aa:6b:66:eb:bf:06:28:ae:5a:be:54:df: e2:ee:cd:66:11:1d:83:3b:dd:87:4c:62:7a:d8:23:d0:da:63: 8e:2b:c6:0f:cf:d6:cc:66:d2:94:2d:b6:df:9a:a2:ff:b1:f5: 60:38:df:fe:2a:59:ef:e7:df:2c:53:d0:f6:d5:33:d5:dd:2e: 5d:ef:23:5a:4c:75:8a:08:9e:5e:22:81:01:fe:48:d9:e2:28: 8f:b9:56:93:37:0e:f5:db:1f:ca:25:ad:96:a0:a7:e0:6c:a1: bc:b8:84:54:0d:7d:6b:37:cc:1f:e3:15:bf:68:81:b4:d5:8f: 89:67:35:66:00:71:64:f1:cf:97:10:c8:2b:17:20:1f:99:fa: 91:17:bd:28:cb:1a:88:12:77:bf:20:45:9e:ef:9c:64:09:e9: f1:2d:a1:04:2d:ac:26:36:14:c0:b7:b8:ee:22:e0:41:99:90: 04:a2:1e:de:9d:1e:25:6d:6e:52:23:fa:83:19:0d:87:66:b8: 75:52:61:5d:02:6a:e2:cb:eb:f4:17:3e:ec:ab:f0:c6:83:1b: f1:e9:a0:25:34:06:e4:00:46:a2:73:91:81:97:7d:45:53:dd: 53:f0:44:db:12:fa:f5:63:82:59:22:93:de:9b:a3:29:9c:42: 11:46:5c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtPdO9tdgXwdqo9K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4ZmNiODYtNDczZC00YTMxLThhMGQtOTVhMDQ2Y2Rh OWE5MB4XDTI1MDkyNTA5MzIxMFoXDTI1MTIyNDEwMzIxMFowLzEtMCsGA1UEAxMk MzJiMTlmOWQtMTgyNS00OWM1LWJhZDItM2FjZDgxODM3MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMc0g5kXfKrnFZU3b3mTn4DgfcmrB9V21tKy GpuDRAm1MQsXsNVZami7BJtqx0LOwZhCpBzMXJyMwbFUkZ41rJzAYLmHVMlqZ/uO 44wqdDNvKkaeZLjprw05m3QR9UjXIcBZP7RGjbazQb2qsk2rNkvPG00zPlfavDVk yEcoqw/Gb/T2gwCXKtOIroJqzdto/Od5Qv0ZBMJj6SghHtnTUzeZUtWKcLi3f5XH hSrgnbYB4EJDOKofZGIo5qfLi2Hy0Nr152frMYxB9LF5EJdewKuO/0k83tEfz+Gg WdDFpprIBYNjTRk4EDzWjxe5cvcGXTCOA5jnA+7Rctp1Ln5dYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEfI06bZVP2OTMqtBov2WtllRs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hODhm Y2I4Ni00NzNkLTRhMzEtOGEwZC05NWEwNDZjZGE5YTkvMzRlNDllZjUtY2Q5OC0z MmQzLWI3ZGEtN2Y0ZGEyNzVmODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTg4ZmNiODYtNDczZC00YTMxLThh MGQtOTVhMDQ2Y2RhOWE5L2E4OGZjYjg2LTQ3M2QtNGEzMS04YTBkLTk1YTA0NmNk YTlhOS5jcmwwHwYDVR0jBBgwFoAUGKS4ZEPLGXmdAO1pELLDk1DGJk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hODhmY2I4Ni00NzNkLTRhMzEtOGEwZC05NWEw NDZjZGE5YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXCAO7hpqprZuu/BiiuWr5U3+LuzWYRHYM73YdMYnrYI9DaY44rxg/P 1sxm0pQttt+aov+x9WA43/4qWe/n3yxT0PbVM9XdLl3vI1pMdYoInl4igQH+SNni KI+5VpM3DvXbH8olrZagp+Bsoby4hFQNfWs3zB/jFb9ogbTVj4lnNWYAcWTxz5cQ yCsXIB+Z+pEXvSjLGogSd78gRZ7vnGQJ6fEtoQQtrCY2FMC3uO4i4EGZkASiHt6d HiVtblIj+oMZDYdmuHVSYV0CauLL6/QXPuyr8MaDG/HpoCU0BuQARqJzkYGXfUVT 3VPwRNsS+vVjglkik96boymcQhFGXMU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:53:54 2025 by rpki-client