$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa File: f88ad909-af6e-3c19-97ea-abc7c4271328.roa (raw, json) Hash identifier: o2GC1ed5KCEjR/4A/Ua0eFCqdu1Eb7BOJkzNLTn3KaA= Subject key identifier: D5:D1:07:75:A4:8F:4D:FB:5A:2E:DD:01:74:02:B6:43:2C:B1:1A:70 Certificate issuer: /CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f Certificate serial: 010D0C9F4328584AA160D3A784B0B2F129C84440 Authority key identifier: F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 2635 IP address blocks: 74.114.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d3:a7:84:b0:b2:f1:29:c8:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8ec010-d2c2-435f-9826-9a03c2ab949f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=667b9d02-67ba-437d-8d2a-76a32c41e095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:0b:8b:fb:bc:3b:8b:23:c3:e8:6c:97:2f: 8b:65:94:1b:b8:5b:9e:e9:13:56:8d:7a:d7:fb:a8: 50:22:83:e0:ca:3d:7a:9f:21:f2:f3:16:97:0a:f0: ae:f8:6b:07:59:0f:90:fb:8e:a8:70:3f:3f:9b:a1: bb:31:07:44:07:32:46:cf:40:7b:a1:13:e1:ad:96: 85:e5:a6:b9:04:bb:ba:0a:34:f0:0e:94:ca:9c:26: f4:b7:2f:4b:82:e9:6e:25:97:e9:19:f8:62:24:bc: d7:73:7f:33:c7:e1:34:66:7d:d2:62:03:b4:6c:52: 9b:27:08:1a:f9:c9:38:7d:b1:e5:fd:2a:63:1e:f8: bf:94:b3:d9:aa:b5:18:9c:15:7a:a7:cf:80:c7:1c: 38:45:79:7a:36:16:c0:89:d7:dd:c1:94:91:d8:50: 8b:4b:c4:82:f6:9d:10:a3:6a:53:c1:3d:5e:19:7b: 5a:88:e5:74:5c:a1:5a:7e:7b:49:7b:ad:e2:aa:44: a9:ae:c1:ca:88:29:1a:50:cc:8b:32:f4:92:65:38: c5:04:d4:89:c1:22:d0:52:ef:5c:89:1a:37:f7:c6: d3:14:b3:34:bf:16:65:f2:c2:29:89:2f:c9:ea:14: 35:51:b2:f4:d9:ad:43:fc:f5:19:2f:87:a6:3b:74: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D1:07:75:A4:8F:4D:FB:5A:2E:DD:01:74:02:B6:43:2C:B1:1A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/f88ad909-af6e-3c19-97ea-abc7c4271328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f/1d8ec010-d2c2-435f-9826-9a03c2ab949f.crl X509v3 Authority Key Identifier: keyid:F3:0B:61:DF:FC:73:3E:6D:EF:9B:19:45:49:C5:3E:91:C0:76:06:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d8ec010-d2c2-435f-9826-9a03c2ab949f.cer sbgp-ipAddrBlock: critical IPv4: 74.114.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:40:61:72:7f:74:22:c8:80:b1:32:98:75:94:d9:d4:1f:2d: 0e:21:79:e5:62:88:f2:28:88:95:2a:eb:e1:7e:43:51:d5:27: ba:81:77:0b:1e:04:71:38:d9:46:14:70:5e:a4:cc:11:08:8b: 21:b9:2b:db:57:fe:8f:bc:4f:b3:7b:ca:1f:c4:dd:50:a3:05: 83:46:5d:20:52:02:10:03:f1:8f:14:d5:92:ec:c9:f9:e9:24: 13:8f:06:4e:2c:1f:79:b9:d0:59:7e:76:69:32:36:4f:3a:9a: 28:74:53:b0:60:f2:7a:02:61:cf:56:b6:b4:51:46:3c:b1:ab: be:45:9e:7b:b1:c8:84:c2:9a:02:32:2d:c9:2f:bb:8e:21:54: 59:c6:4c:4b:68:5e:be:88:6c:04:19:e2:23:ee:3f:21:54:6b: 9c:78:66:01:44:8f:17:24:35:61:fc:09:ea:d2:1b:99:98:24: 6d:5d:cf:47:5b:3e:90:1d:c4:79:62:49:da:21:36:81:19:8f: 00:9c:e6:6a:6c:67:18:cb:ba:50:f3:c8:b5:d1:dd:fe:71:1b: b3:97:f3:c2:ce:ca:d4:a1:b1:13:bd:2c:27:a7:6a:b5:e9:88: 44:64:77:50:47:9f:33:1a:3e:8e:59:99:32:24:a7:a5:52:93: a1:b3:ef:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNOnhLCy8SnIREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4ZWMwMTAtZDJjMi00MzVmLTk4MjYtOWEwM2MyYWI5 NDlmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NjY3YjlkMDItNjdiYS00MzdkLThkMmEtNzZhMzJjNDFlMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbELi/u8O4sjw+hsly+LZZQbuFue6RNWjXrX +6hQIoPgyj16nyHy8xaXCvCu+GsHWQ+Q+46ocD8/m6G7MQdEBzJGz0B7oRPhrZaF 5aa5BLu6CjTwDpTKnCb0ty9LguluJZfpGfhiJLzXc38zx+E0Zn3SYgO0bFKbJwga +ck4fbHl/SpjHvi/lLPZqrUYnBV6p8+Axxw4RXl6NhbAidfdwZSR2FCLS8SC9p0Q o2pTwT1eGXtaiOV0XKFafntJe63iqkSprsHKiCkaUMyLMvSSZTjFBNSJwSLQUu9c iRo398bTFLM0vxZl8sIpiS/J6hQ1UbL02a1D/PUZL4emO3TpgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXRB3Wkj037Wi7dAXQCtkMssRpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDhl YzAxMC1kMmMyLTQzNWYtOTgyNi05YTAzYzJhYjk0OWYvZjg4YWQ5MDktYWY2ZS0z YzE5LTk3ZWEtYWJjN2M0MjcxMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ4ZWMwMTAtZDJjMi00MzVmLTk4 MjYtOWEwM2MyYWI5NDlmLzFkOGVjMDEwLWQyYzItNDM1Zi05ODI2LTlhMDNjMmFi OTQ5Zi5jcmwwHwYDVR0jBBgwFoAU8wth3/xzPm3vmxlFScU+kcB2BqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDhlYzAxMC1kMmMyLTQzNWYtOTgyNi05YTAz YzJhYjk0OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhAYXJ/dCLIgLEymHWU2dQfLQ4heeViiPIoiJUq6+F+Q1HVJ7qBdwse BHE42UYUcF6kzBEIiyG5K9tX/o+8T7N7yh/E3VCjBYNGXSBSAhAD8Y8U1ZLsyfnp JBOPBk4sH3m50Fl+dmkyNk86mih0U7Bg8noCYc9WtrRRRjyxq75FnnuxyITCmgIy Lckvu44hVFnGTEtoXr6IbAQZ4iPuPyFUa5x4ZgFEjxckNWH8CerSG5mYJG1dz0db PpAdxHliSdohNoEZjwCc5mpsZxjLulDzyLXR3f5xG7OX88LOytShsRO9LCenarXp iERkd1BHnzMaPo5ZmTIkp6VSk6Gz77k= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:13 2025 by rpki-client