$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa File: 95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa (raw, json) Hash identifier: NbFPB0lxKTdd+al4a+oadGj6JfwfXfxb33YmIUBZ3ms= Subject key identifier: 5C:1B:A3:1F:72:43:E9:41:82:6B:33:71:91:9F:E5:84:88:C0:FC:24 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584AA42B7DD5BCF8A3F4932BEC40 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 74.221.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7d:d5:bc:f8:a3:f4:93:2b:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=681fa6c4-1ec9-49b1-af16-b3833eb98950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:fb:bc:e5:36:76:f2:19:56:35:fb:de:77: a4:c8:5e:30:8e:9c:87:f7:f2:fc:13:46:51:b9:33: 4b:82:a5:23:11:73:9a:ae:02:b7:be:42:95:1c:37: b6:f1:6a:d9:fa:14:42:1b:01:e3:f7:ff:9a:d8:43: 3e:26:ab:cf:03:04:92:7d:ba:f4:10:b9:27:a2:8a: 88:47:0a:d0:64:67:4a:08:ef:ee:50:d9:fb:32:0f: 07:d0:bd:87:af:44:72:e2:48:87:ad:88:9f:d3:ec: 60:15:88:6d:d2:26:87:e7:56:d7:00:95:8e:10:7f: 7e:ff:97:cb:74:22:97:2d:e6:74:42:cc:56:88:d0: b4:f2:1d:43:99:50:4f:ea:f8:6b:f8:f3:82:c8:a1: 94:ba:5c:9b:0f:d9:b4:bd:d9:ed:f2:2e:76:53:99: 9c:a2:ad:d3:75:74:f7:a7:e2:e6:af:29:39:36:f6: 92:49:b8:a3:d0:68:fa:b8:9b:87:ae:93:35:29:ce: 18:ea:a3:70:63:73:fc:c5:f5:a6:24:7a:43:ae:e5: e7:7e:2d:63:41:af:9a:3a:ae:d5:7f:6e:73:8f:d9: 49:fb:00:4b:7f:9b:89:94:38:0d:92:18:71:0d:3b: fd:f7:71:3a:4b:3a:5c:1b:71:e7:15:98:b9:f1:ea: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1B:A3:1F:72:43:E9:41:82:6B:33:71:91:9F:E5:84:88:C0:FC:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d985ce-3d20-3675-90ae-40ce0af5e8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 74.221.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:f0:65:07:8d:10:18:88:3a:e7:5f:1d:59:54:cc:60:75: 92:28:4b:b9:d5:77:10:bc:bb:fc:64:d8:70:48:ce:25:e9:2b: e3:ab:e5:81:0d:11:5a:67:e9:af:9d:df:bc:4f:71:54:9b:78: 95:fa:fd:f0:27:e2:96:c3:34:a3:68:1d:d2:60:e5:0e:e0:30: 72:2b:7e:0e:68:cf:91:64:25:ce:b6:58:8b:43:15:1a:de:99: f7:92:6a:d7:e4:97:f6:c8:b1:db:f9:a6:d7:56:f7:67:f2:d1: 20:41:8f:d2:b7:1a:c7:88:b6:aa:35:4d:72:40:06:c0:7c:57: a3:70:e2:53:b7:1a:78:3d:3b:d6:0e:48:a3:fa:9a:09:fa:3d: 4d:fc:a4:14:9f:c2:c5:40:84:5c:c5:73:32:31:f2:57:ce:54: b9:75:be:4c:79:32:e1:f4:24:ed:7e:8f:4f:20:e4:2c:d0:cf: c8:72:9b:c1:8b:23:fa:e7:bb:9f:2d:18:d5:10:03:28:dd:88: 0c:76:2f:c1:34:6f:a5:21:75:87:05:29:c9:6e:d5:68:7f:ae: 80:60:dd:11:27:f2:de:79:7f:67:34:1d:b3:18:42:08:e4:77: 4a:dd:ba:4d:0a:98:06:c5:c9:b7:a2:65:92:53:5c:e0:41:73: 38:28:70:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK33VvPij9JMr7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NjgxZmE2YzQtMWVjOS00OWIxLWFmMTYtYjM4MzNlYjk4OTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTj7vOU2dvIZVjX73nekyF4wjpyH9/L8E0ZR uTNLgqUjEXOargK3vkKVHDe28WrZ+hRCGwHj9/+a2EM+JqvPAwSSfbr0ELknooqI RwrQZGdKCO/uUNn7Mg8H0L2Hr0Ry4kiHrYif0+xgFYht0iaH51bXAJWOEH9+/5fL dCKXLeZ0QsxWiNC08h1DmVBP6vhr+POCyKGUulybD9m0vdnt8i52U5mcoq3TdXT3 p+Lmryk5NvaSSbij0Gj6uJuHrpM1Kc4Y6qNwY3P8xfWmJHpDruXnfi1jQa+aOq7V f25zj9lJ+wBLf5uJlDgNkhhxDTv993E6SzpcG3HnFZi58epdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwbox9yQ+lBgmszcZGf5YSIwPwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOTVkOTg1Y2UtM2QyMC0z Njc1LTkwYWUtNDBjZTBhZjVlOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESt2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYu8GUHjRAYiDrnXx1ZVMxgdZIoS7nVdxC8u/xk2HBIziXpK+Or5YEN EVpn6a+d37xPcVSbeJX6/fAn4pbDNKNoHdJg5Q7gMHIrfg5oz5FkJc62WItDFRre mfeSatfkl/bIsdv5ptdW92fy0SBBj9K3GseItqo1TXJABsB8V6Nw4lO3Gng9O9YO SKP6mgn6PU38pBSfwsVAhFzFczIx8lfOVLl1vkx5MuH0JO1+j08g5CzQz8hym8GL I/rnu58tGNUQAyjdiAx2L8E0b6UhdYcFKclu1Wh/roBg3REn8t55f2c0HbMYQgjk d0rduk0KmAbFybeiZZJTXOBBczgocMA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:29:23 2025 by rpki-client