$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/529ab78b-3470-3e02-8c1b-51b01f6ceba2.roa File: 529ab78b-3470-3e02-8c1b-51b01f6ceba2.roa (raw, json) Hash identifier: VGPb+vUdOLh1JfvYHfGSHzyYBEtzh0thVHta7WA/eZ4= Subject key identifier: 21:20:97:00:E8:A5:38:18:C5:33:0F:E8:86:BB:42:06:39:E3:CB:5E Certificate issuer: /CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd Certificate serial: 010D0C9F4328584AFC1C216B00BA53F1B0707200 Authority key identifier: 2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/529ab78b-3470-3e02-8c1b-51b01f6ceba2.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 3688 IP address blocks: 74.117.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:21:6b:00:ba:53:f1:b0:70:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3f0c8da6-d1d9-4c43-bfd2-bed08683e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:75:b0:64:e9:86:5f:cd:7a:9a:ac:bd:e2: 3f:12:c1:6f:ae:f8:b7:1f:61:17:c0:03:10:05:bc: 93:5f:e2:7e:01:b9:9f:fa:c4:c8:4e:f9:1d:8b:83: bc:f1:aa:0c:5c:92:3b:48:b8:f4:bb:d2:e9:4d:ca: e3:fe:01:17:e8:53:45:6a:f4:ff:63:8b:4c:b5:f1: b6:ec:6b:d8:6f:87:b8:58:2a:6f:de:0a:8c:79:c2: 36:30:8b:be:86:a0:36:e7:92:69:50:54:65:9f:5d: 33:90:1d:91:99:3b:3d:d9:21:4a:8e:ff:d6:d5:5f: 46:b6:43:87:a8:4b:f9:21:ee:a7:14:d8:a8:4a:04: 7b:c9:bb:69:ff:8b:23:82:8a:fa:b4:f4:96:c9:1e: 76:e9:47:d7:4c:f1:51:cb:cb:6f:6c:ba:cf:1b:ce: 3a:c0:cc:a8:59:77:69:a3:5a:f8:4f:2c:3a:10:82: 0b:38:d5:52:20:6e:0a:b2:80:df:8d:0a:c7:91:54: 2d:9c:6d:36:20:ec:72:45:a1:ca:40:c9:bc:7a:0c: 60:5a:46:f1:54:44:cd:b3:8f:26:07:ec:a3:0a:1f: dd:5e:7b:12:d5:02:13:77:77:b5:98:4f:d5:be:a4: 5f:5e:f8:76:6e:85:70:65:63:d8:5c:6b:9d:78:41: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:97:00:E8:A5:38:18:C5:33:0F:E8:86:BB:42:06:39:E3:CB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/529ab78b-3470-3e02-8c1b-51b01f6ceba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl X509v3 Authority Key Identifier: keyid:2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer sbgp-ipAddrBlock: critical IPv4: 74.117.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e7:6f:91:c5:da:f8:df:e0:aa:05:08:e5:1e:0d:71:2d:6e: 1d:22:96:cf:d9:0f:73:e0:c6:f3:c8:0e:1f:f3:3c:69:03:6a: 6d:8e:51:68:a3:09:10:a1:6d:8f:6a:2e:26:16:92:89:1e:2b: 17:3b:50:43:e8:cc:01:36:14:37:02:e6:f1:61:26:e4:d3:17: 4d:ca:27:7f:fe:c7:36:01:26:12:0f:77:13:ca:99:5c:60:53: 28:37:b9:fc:16:38:58:07:bb:5b:74:b0:7e:85:77:dd:a0:f7: 50:cf:23:09:55:0a:4d:ff:f7:92:af:bf:a4:a6:e2:ad:79:c5: c1:a2:5b:8c:e5:79:55:7c:3c:e2:60:8d:53:de:6a:b6:52:5f: ad:4b:0c:78:3b:f3:3f:d6:e6:94:3a:1f:2a:4b:6e:38:e5:28: 8a:67:5c:93:00:c1:16:c8:1d:4f:6f:ed:f8:60:7f:55:03:87: 07:85:1f:64:13:6d:d7:80:7f:14:7d:0e:71:0e:72:77:f3:ca: b5:3b:c2:5e:ab:63:88:e4:6c:6b:67:9d:86:08:81:3b:e6:c6: e9:85:f9:65:5d:db:d6:e5:4e:d5:0f:51:47:b4:d5:49:48:e5: aa:b9:0e:79:ee:95:02:aa:20:55:c9:14:2a:3e:9a:cd:fb:00: f5:1f:79:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HCFrALpT8bBwcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJkZWRhNjUtYzRjMy00ZWM0LWI4ZDQtYzM0Y2Y1ZDAx NWRkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2YwYzhkYTYtZDFkOS00YzQzLWJmZDItYmVkMDg2ODNlODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVp1sGTphl/NepqsveI/EsFvrvi3H2EXwAMQ BbyTX+J+Abmf+sTITvkdi4O88aoMXJI7SLj0u9LpTcrj/gEX6FNFavT/Y4tMtfG2 7GvYb4e4WCpv3gqMecI2MIu+hqA255JpUFRln10zkB2RmTs92SFKjv/W1V9GtkOH qEv5Ie6nFNioSgR7ybtp/4sjgor6tPSWyR526UfXTPFRy8tvbLrPG846wMyoWXdp o1r4Tyw6EIILONVSIG4KsoDfjQrHkVQtnG02IOxyRaHKQMm8egxgWkbxVETNs48m B+yjCh/dXnsS1QITd3e1mE/VvqRfXvh2boVwZWPYXGudeEGwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEglwDopTgYxTMP6Ia7QgY548teMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYmRl ZGE2NS1jNGMzLTRlYzQtYjhkNC1jMzRjZjVkMDE1ZGQvNTI5YWI3OGItMzQ3MC0z ZTAyLThjMWItNTFiMDFmNmNlYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWJkZWRhNjUtYzRjMy00ZWM0LWI4 ZDQtYzM0Y2Y1ZDAxNWRkL2FiZGVkYTY1LWM0YzMtNGVjNC1iOGQ0LWMzNGNmNWQw MTVkZC5jcmwwHwYDVR0jBBgwFoAULS+LIEPKDwNlE3IwKdIn1z7pd+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYmRlZGE2NS1jNGMzLTRlYzQtYjhkNC1jMzRj ZjVkMDE1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrnb5HF2vjf4KoFCOUeDXEtbh0ils/ZD3PgxvPIDh/zPGkDam2OUWij CRChbY9qLiYWkokeKxc7UEPozAE2FDcC5vFhJuTTF03KJ3/+xzYBJhIPdxPKmVxg Uyg3ufwWOFgHu1t0sH6Fd92g91DPIwlVCk3/95Kvv6Sm4q15xcGiW4zleVV8POJg jVPearZSX61LDHg78z/W5pQ6HypLbjjlKIpnXJMAwRbIHU9v7fhgf1UDhweFH2QT bdeAfxR9DnEOcnfzyrU7wl6rY4jkbGtnnYYIgTvmxumF+WVd29blTtUPUUe01UlI 5aq5DnnulQKqIFXJFCo+ms37APUfeT0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:24 2025 by rpki-client