$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/8cf1bd98-3735-34b2-8a52-932db30be2cb.roa File: 8cf1bd98-3735-34b2-8a52-932db30be2cb.roa (raw, json) Hash identifier: 096TJpUxNPHNpjKK73f4g+FvdWhhJghrOK7iaUUawck= Subject key identifier: AD:25:91:99:D9:2C:17:1C:9C:CA:13:EC:EC:74:4F:23:23:B5:12:60 Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F4328584AC87652BB4360B1D2E9989EC0 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/8cf1bd98-3735-34b2-8a52-932db30be2cb.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 7018 IP address blocks: 74.80.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:52:bb:43:60:b1:d2:e9:98:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=1b1a30b6-f0f7-49ee-8173-9bd060bbcc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:c3:66:fe:82:de:41:ab:95:36:02:dd:67: 82:e9:04:ab:0d:b4:dc:18:90:58:34:90:32:52:3a: 44:bc:4a:8d:86:81:52:5f:67:f6:1a:1d:fe:5f:31: 31:8a:3b:b4:0d:88:22:62:7f:6e:8f:15:9f:9a:7d: e8:2e:98:84:b6:48:95:90:f3:f2:0e:1e:f7:63:82: 9d:c0:3e:cf:67:67:f3:10:81:0a:b5:7f:6f:c9:de: 11:96:5b:08:0c:e0:c9:41:e5:30:ef:43:e3:c0:98: 79:13:19:31:a6:38:9c:44:fb:51:a7:9b:77:96:1a: 86:80:1e:ca:5c:29:11:da:0d:01:06:f8:8a:02:78: 42:31:0e:2e:15:f5:04:a7:fa:69:80:c0:be:10:dc: a6:ed:0c:4e:8a:99:3d:46:5d:4a:9d:96:c1:b0:41: 4e:f4:d8:fe:65:6a:5a:ab:6e:13:35:dd:41:c4:a1: 4e:4c:de:52:0d:fd:40:cf:41:72:e4:2a:bb:ed:af: 82:b9:c4:a4:0d:55:19:3e:62:4b:95:bc:97:6a:43: dd:5a:e8:5f:4a:0f:2b:7f:c0:17:2c:b4:c9:67:2f: 89:b8:ff:e6:4d:47:64:f1:0b:05:72:83:a8:61:1b: e2:da:f0:c6:5f:b1:9f:00:38:06:8b:44:17:23:0d: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:25:91:99:D9:2C:17:1C:9C:CA:13:EC:EC:74:4F:23:23:B5:12:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/8cf1bd98-3735-34b2-8a52-932db30be2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 74.80.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:65:6c:b6:30:54:52:80:5e:d2:39:9e:0c:41:ae:17:bb:6d: f9:f2:7a:e8:de:a7:12:04:cc:1c:62:9b:8e:3a:d3:5b:d6:7b: f0:39:8a:b4:d4:a3:00:59:4c:85:e0:06:db:d3:df:71:54:50: d3:ea:79:e3:99:51:87:fe:01:db:1c:bd:e9:eb:a5:db:6a:7c: 9a:d9:25:d6:2b:33:31:37:34:e8:7b:bc:95:98:ef:91:ce:77: ae:16:7c:64:61:2b:d6:14:13:fb:16:8a:62:db:b8:c0:39:53: 58:a7:68:2f:87:28:a4:10:a5:7a:5a:70:c3:11:e5:8d:8d:96: 12:32:7a:c4:60:88:9c:f0:dd:06:65:5c:5a:09:87:c0:4b:ce: 83:86:6c:b5:36:fe:48:16:3c:6d:fd:bc:3c:ee:d5:ce:c8:ec: 5c:d3:cf:dc:ca:52:6c:5f:b2:34:cd:30:78:03:af:57:8e:68: 81:13:66:e4:1c:2b:f3:40:08:5b:d0:b1:1c:8c:46:26:51:c0: b5:7e:ef:bd:f0:2e:78:6d:ce:e1:72:c1:77:38:b6:54:29:ec: 6e:2d:99:6e:02:73:a6:fd:1e:73:5b:f8:11:90:f7:44:44:1d: 09:ff:c2:a7:57:2a:bb:9b:be:20:c4:07:9a:15:a7:f1:cb:66: 22:f9:29:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlK7Q2Cx0umYnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWIxYTMwYjYtZjBmNy00OWVlLTgxNzMtOWJkMDYwYmJjYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRPDZv6C3kGrlTYC3WeC6QSrDbTcGJBYNJAy UjpEvEqNhoFSX2f2Gh3+XzExiju0DYgiYn9ujxWfmn3oLpiEtkiVkPPyDh73Y4Kd wD7PZ2fzEIEKtX9vyd4RllsIDODJQeUw70PjwJh5ExkxpjicRPtRp5t3lhqGgB7K XCkR2g0BBviKAnhCMQ4uFfUEp/ppgMC+ENym7QxOipk9Rl1KnZbBsEFO9Nj+ZWpa q24TNd1BxKFOTN5SDf1Az0Fy5Cq77a+CucSkDVUZPmJLlbyXakPdWuhfSg8rf8AX LLTJZy+JuP/mTUdk8QsFcoOoYRvi2vDGX7GfADgGi0QXIw1xaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0lkZnZLBccnMoT7Ox0TyMjtRJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvOGNmMWJkOTgtMzczNS0z NGIyLThhNTItOTMyZGIzMGJlMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABllbLYwVFKAXtI5ngxBrhe7bfnyeujepxIEzBxim44601vWe/A5irTU owBZTIXgBtvT33FUUNPqeeOZUYf+AdscvenrpdtqfJrZJdYrMzE3NOh7vJWY75HO d64WfGRhK9YUE/sWimLbuMA5U1inaC+HKKQQpXpacMMR5Y2NlhIyesRgiJzw3QZl XFoJh8BLzoOGbLU2/kgWPG39vDzu1c7I7FzTz9zKUmxfsjTNMHgDr1eOaIETZuQc K/NACFvQsRyMRiZRwLV+773wLnhtzuFywXc4tlQp7G4tmW4Cc6b9HnNb+BGQ90RE HQn/wqdXKrubviDEB5oVp/HLZiL5KQc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:50 2025 by rpki-client