$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa File: abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa (raw, json) Hash identifier: S1Q891GwbfGUjhpxOmsTBFe+1GV3jUh9SpwFWUjmm6o= Subject key identifier: 1E:DF:78:72:53:74:48:82:86:77:7F:A1:17:56:FF:61:54:38:89:B1 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584B9E07C002A5BAFB768E137C80 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 74.221.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c0:02:a5:ba:fb:76:8e:13:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3e88f9c6-fe59-4688-859a-a522056b4c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:0d:ff:29:87:4d:02:a0:c0:63:3d:31:e5: f4:98:54:60:d2:7b:59:b0:c9:2f:68:fa:e0:82:13: 32:f5:e3:6c:6e:e1:eb:a1:b7:9c:16:5b:08:59:8c: 4d:b2:bd:dc:0a:9a:af:9c:9c:22:ec:fd:0d:83:50: 21:29:4b:07:a3:07:fb:6a:82:87:6b:e1:24:a4:f7: 13:74:1d:0e:8f:58:d5:37:b3:d6:79:77:26:9f:09: 84:09:81:7d:76:02:6e:c1:64:06:31:3f:87:87:3f: 93:f7:20:fc:2c:cc:1b:64:29:e3:1d:cd:98:cd:4d: 10:ac:50:34:a6:e9:98:a7:00:cc:af:d6:62:12:87: 2b:a6:77:ad:dd:12:50:f9:f5:4b:3d:eb:23:44:73: cd:7c:14:0b:d2:e5:de:4f:5f:99:7e:fa:a4:5f:af: 87:8d:c8:90:be:bd:11:05:61:c9:ff:15:19:de:90: 78:04:6b:16:69:67:5b:b7:20:65:ed:1f:42:e1:ad: 53:77:87:1e:69:28:e8:39:c1:b1:68:d9:b9:c7:3b: 7a:e5:ab:1d:5b:2f:8f:b4:fe:68:4f:ab:8e:2f:a4: b9:a4:bd:29:5b:46:b6:cb:6f:cf:a8:41:d0:31:f0: 0d:e4:f1:a4:76:9c:6d:f8:f8:3d:a5:88:03:3e:0e: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DF:78:72:53:74:48:82:86:77:7F:A1:17:56:FF:61:54:38:89:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 74.221.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5e:42:bf:85:ba:ff:5b:44:c0:0c:f5:95:9f:20:fc:e1:74: 00:29:88:7e:a4:f5:21:29:39:b4:f3:17:99:fc:3f:44:26:94: 38:b2:ac:58:73:5d:91:af:7c:f7:45:d4:cd:d3:7f:61:a2:2d: 35:8f:14:00:b0:6a:2f:d8:d5:b9:2b:30:41:2e:a9:c1:56:da: 19:23:2a:54:0f:c0:07:52:7e:1a:bb:2d:84:c7:08:2b:5e:99: e9:27:e1:e5:ff:21:ef:88:a9:19:a7:f4:af:ba:63:c9:ba:c6: cc:25:9b:a9:c0:35:1f:bf:7a:28:e6:c3:4a:86:ce:22:b2:0a: 75:13:57:91:74:cb:4c:b0:59:1c:cc:50:0d:1d:63:ec:69:97: 1a:36:6f:13:4f:36:b2:ce:c6:b8:c6:96:69:ad:67:a6:3e:60: ae:7c:c9:36:9d:54:4d:3b:ba:c6:04:7f:49:5f:d2:fc:20:db: a5:84:bd:b9:24:05:1b:92:db:b9:1f:ea:39:4b:b8:01:bb:4d: 17:f2:36:fe:8c:4f:f7:c0:74:ef:6f:19:85:64:95:84:88:a5: ce:6d:4e:0b:70:11:91:fe:8e:b4:ea:39:99:49:b7:cd:0c:ae: ca:b1:b7:f7:e9:23:83:39:04:96:39:80:0e:8b:c6:aa:04:37: 44:62:9f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8ACpbr7do4TfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2U4OGY5YzYtZmU1OS00Njg4LTg1OWEtYTUyMjA1NmI0YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymkN/ymHTQKgwGM9MeX0mFRg0ntZsMkvaPrg ghMy9eNsbuHrobecFlsIWYxNsr3cCpqvnJwi7P0Ng1AhKUsHowf7aoKHa+EkpPcT dB0Oj1jVN7PWeXcmnwmECYF9dgJuwWQGMT+Hhz+T9yD8LMwbZCnjHc2YzU0QrFA0 pumYpwDMr9ZiEocrpnet3RJQ+fVLPesjRHPNfBQL0uXeT1+ZfvqkX6+HjciQvr0R BWHJ/xUZ3pB4BGsWaWdbtyBl7R9C4a1Td4ceaSjoOcGxaNm5xzt65asdWy+PtP5o T6uOL6S5pL0pW0a2y2/PqEHQMfAN5PGkdpxt+Pg9pYgDPg7E/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7feHJTdEiChnd/oRdW/2FUOImxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYWJmN2JhNTgtMzRmYS0z OGQwLTlmZjMtYmNmYWIxY2M3YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdeQr+Fuv9bRMAM9ZWfIPzhdAApiH6k9SEpObTzF5n8P0QmlDiyrFhz XZGvfPdF1M3Tf2GiLTWPFACwai/Y1bkrMEEuqcFW2hkjKlQPwAdSfhq7LYTHCCte mekn4eX/Ie+IqRmn9K+6Y8m6xswlm6nANR+/eijmw0qGziKyCnUTV5F0y0ywWRzM UA0dY+xplxo2bxNPNrLOxrjGlmmtZ6Y+YK58yTadVE07usYEf0lf0vwg26WEvbkk BRuS27kf6jlLuAG7TRfyNv6MT/fAdO9vGYVklYSIpc5tTgtwEZH+jrTqOZlJt80M rsqxt/fpI4M5BJY5gA6LxqoEN0Rinzg= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:36 2025 by rpki-client