$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa File: 797dab8c-04a6-391b-ae3b-355157435b76.roa (raw, json) Hash identifier: pljIzRzlIqbz0W/UaxKHjsUbEKZsh9wReJYeU1htmAw= Subject key identifier: 28:59:09:5B:1E:C8:41:5C:3F:B2:2B:8F:65:2D:8A:7A:4C:9F:B5:25 Certificate issuer: /CN=27856758-5ea9-463e-969e-eb2a87a469d5 Certificate serial: 010D0C9F4328584B891765217012E4EFB58542C0 Authority key identifier: B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 64233 IP address blocks: 74.121.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:65:21:70:12:e4:ef:b5:85:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27856758-5ea9-463e-969e-eb2a87a469d5 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=d489dea5-644e-410a-8ce1-0aab7166ba73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:bd:f5:36:3c:69:a8:49:62:04:94:e2:9d: fa:9c:78:f7:2c:6a:1f:7b:16:95:b5:99:57:56:a4: 8a:e9:bf:72:28:63:32:ee:55:16:bd:b6:9d:11:e4: 8a:a2:b6:a8:6c:82:aa:27:f7:f8:be:a1:76:a1:11: 1d:cb:8d:af:0f:4b:80:1b:81:cb:2d:4e:44:43:ab: 73:b1:fe:7c:21:ed:9e:c3:13:ec:10:f4:ab:b1:99: d9:c7:77:84:39:40:43:24:12:d4:b8:f5:f4:5b:af: de:db:45:4d:9a:72:06:0e:30:22:10:e5:36:2b:03: a8:b7:db:13:89:27:e3:f3:76:9f:76:6a:dd:64:bb: eb:6e:f4:70:c3:59:a4:09:bf:7d:0d:de:35:a1:9d: 36:62:a6:b4:6d:2b:8a:71:76:1b:2b:69:6e:aa:77: f7:a1:3c:c4:0a:1b:7f:5b:da:dd:4a:c7:75:ea:ac: d8:41:d3:f6:c3:ce:bf:b8:64:d1:f7:88:a6:be:80: 76:28:10:79:76:f3:f9:55:82:50:de:91:9b:22:04: 1b:db:94:f0:50:77:27:eb:c0:d8:a4:02:cc:b9:96: 88:2a:7b:bd:a5:ca:eb:71:1c:e7:20:d4:12:25:ca: d8:5c:78:f2:77:d4:35:9d:d0:34:d3:f8:ae:d2:fa: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:59:09:5B:1E:C8:41:5C:3F:B2:2B:8F:65:2D:8A:7A:4C:9F:B5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl X509v3 Authority Key Identifier: keyid:B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer sbgp-ipAddrBlock: critical IPv4: 74.121.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:df:4b:c4:47:b2:56:99:59:19:e4:ec:84:11:9b:c9:a0:c4: ae:f3:7b:6b:e5:4f:47:54:4b:fd:0e:af:01:3f:0d:de:86:c6: 83:8c:28:34:5f:bf:db:b2:cb:0e:bd:93:32:03:52:8a:ff:2e: 7b:44:1f:8c:3b:ee:42:6e:a4:68:42:18:f9:3b:b7:29:8f:0f: 6c:8a:91:c6:2f:e1:01:ea:02:b3:9c:01:73:1a:e4:69:0a:b7: e5:ef:e9:4a:35:fa:f6:c6:48:d1:fb:61:ab:d9:dd:61:98:5e: 1c:ec:80:a6:51:19:1e:0e:e3:b3:05:e2:20:98:d9:93:e1:93: bb:88:d6:70:ef:43:06:60:dd:86:58:a0:c3:2f:87:66:e3:c1: 64:be:03:45:55:37:58:0f:63:79:4f:fe:0b:b9:57:05:7e:a7: 8a:dd:0f:45:76:4f:d3:e8:8d:56:85:e1:eb:e2:af:af:93:24: 86:8d:be:da:01:07:e3:bd:63:a6:4b:ee:a3:e0:89:fb:9c:6f: f8:87:a3:8a:14:c5:b6:00:78:42:37:dd:22:b1:ec:45:97:4c: 83:7c:f3:7f:25:f6:ec:f8:0a:b6:2b:b1:3e:25:cb:2b:91:35: 77:25:2d:0b:23:4f:31:d5:b0:6e:34:c6:69:5f:a5:a9:88:21: 11:2d:16:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2UhcBLk77WFQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc4NTY3NTgtNWVhOS00NjNlLTk2OWUtZWIyYTg3YTQ2 OWQ1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZDQ4OWRlYTUtNjQ0ZS00MTBhLThjZTEtMGFhYjcxNjZiYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsO99TY8aahJYgSU4p36nHj3LGofexaVtZlX VqSK6b9yKGMy7lUWvbadEeSKoraobIKqJ/f4vqF2oREdy42vD0uAG4HLLU5EQ6tz sf58Ie2ewxPsEPSrsZnZx3eEOUBDJBLUuPX0W6/e20VNmnIGDjAiEOU2KwOot9sT iSfj83afdmrdZLvrbvRww1mkCb99Dd41oZ02Yqa0bSuKcXYbK2luqnf3oTzECht/ W9rdSsd16qzYQdP2w86/uGTR94imvoB2KBB5dvP5VYJQ3pGbIgQb25TwUHcn68DY pALMuZaIKnu9pcrrcRznINQSJcrYXHjyd9Q1ndA00/iu0vpcmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChZCVseyEFcP7Irj2UtinpMn7UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNzg1 Njc1OC01ZWE5LTQ2M2UtOTY5ZS1lYjJhODdhNDY5ZDUvNzk3ZGFiOGMtMDRhNi0z OTFiLWFlM2ItMzU1MTU3NDM1Yjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjc4NTY3NTgtNWVhOS00NjNlLTk2 OWUtZWIyYTg3YTQ2OWQ1LzI3ODU2NzU4LTVlYTktNDYzZS05NjllLWViMmE4N2E0 NjlkNS5jcmwwHwYDVR0jBBgwFoAUuKJpMmkN/JGR+c0zFylDRyUConcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNzg1Njc1OC01ZWE5LTQ2M2UtOTY5ZS1lYjJh ODdhNDY5ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3fS8RHslaZWRnk7IQRm8mgxK7ze2vlT0dUS/0OrwE/Dd6GxoOMKDRf v9uyyw69kzIDUor/LntEH4w77kJupGhCGPk7tymPD2yKkcYv4QHqArOcAXMa5GkK t+Xv6Uo1+vbGSNH7YavZ3WGYXhzsgKZRGR4O47MF4iCY2ZPhk7uI1nDvQwZg3YZY oMMvh2bjwWS+A0VVN1gPY3lP/gu5VwV+p4rdD0V2T9PojVaF4evir6+TJIaNvtoB B+O9Y6ZL7qPgifucb/iHo4oUxbYAeEI33SKx7EWXTIN8838l9uz4CrYrsT4lyyuR NXclLQsjTzHVsG40xmlfpamIIREtFks= -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:22 2025 by rpki-client