$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa File: 2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa (raw, json) Hash identifier: ucXRIZjmQqGW6+BZEPloHs5GerrER+o+CyPry3iNn+8= Subject key identifier: DC:A6:BA:1E:A0:C7:35:86:EB:94:B9:6C:9B:3A:F4:B0:84:6A:9F:39 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFC58C1F9E5EBB9A63D600 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 394708 IP address blocks: 74.126.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c5:8c:1f:9e:5e:bb:9a:63:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=0ecb007f-f03e-4400-8d28-c8be69d297aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:dd:a0:a7:27:18:ff:89:45:97:01:67:e1: 43:6d:25:8a:3b:7a:d1:94:68:2d:a5:a5:d7:65:46: e2:8a:06:ca:f6:7c:ad:b4:f9:87:df:41:4f:ca:84: 00:1e:a2:55:04:b5:5d:29:2b:62:0f:45:5f:ac:41: 44:a5:ed:e2:40:36:cb:7b:ff:a3:e0:e5:b3:20:92: 8b:e0:e9:9a:6a:0f:2f:ba:d7:88:93:80:9b:01:36: a7:c8:6a:00:5a:9c:7d:3d:27:a1:9c:8b:ef:a2:23: 26:00:56:01:4a:e9:8b:75:86:86:08:b6:92:8c:a7: 78:42:b1:5b:da:57:81:60:7e:1b:7a:b1:d0:d3:e0: 69:7e:92:c3:87:09:9b:8a:bd:ab:b7:06:ac:1b:a4: 42:1a:3e:4a:2d:aa:35:46:1e:01:e6:af:57:3d:8b: 00:b7:6d:bc:37:72:cf:3b:cd:6d:62:01:c8:59:95: 84:c2:f7:89:6e:9f:64:a1:a5:15:9b:82:55:6c:85: 2e:55:74:e6:a2:5f:7c:a2:5e:7e:1e:76:f5:e7:94: fe:a4:1d:75:bb:9e:9a:81:6d:73:ff:ea:c1:d9:93: a3:09:59:6a:b1:67:65:f0:82:8b:79:a7:e8:8a:c9: b5:df:4a:9b:ee:02:41:69:44:98:5d:53:0c:01:7d: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A6:BA:1E:A0:C7:35:86:EB:94:B9:6C:9B:3A:F4:B0:84:6A:9F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 74.126.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:81:2e:f7:9f:18:5d:09:f2:50:48:69:66:af:46:f3:0c:96: b4:ea:05:3e:04:96:4a:32:61:f8:bb:52:c6:c7:50:2d:b2:9c: 06:d8:4f:95:4b:a7:a4:5d:3e:90:b2:4f:c1:83:cd:5b:1b:18: 6d:bb:38:0d:00:26:4f:fe:e4:c2:0e:c1:e9:b9:6c:dc:7e:7d: 3d:14:59:88:91:c1:5c:23:3b:42:40:a1:df:bb:14:50:9b:71: bf:da:96:7c:50:3d:1e:8c:6f:9e:91:78:5f:28:ab:88:89:73: 44:1d:2a:00:f0:92:ca:83:cb:7b:7b:49:05:09:5b:c4:92:cc: fa:7e:13:e9:5d:7c:7b:df:75:90:b9:db:d5:82:2f:88:96:42: ca:9b:be:a4:05:02:53:73:6c:9e:d5:cc:91:e4:e5:f9:78:80: 9e:7d:fb:28:2a:cd:70:b0:76:44:e1:83:12:56:00:af:b8:80: 22:70:1e:43:aa:9d:2b:9c:65:37:63:9e:25:4b:14:b1:23:f2: 99:8d:ab:1b:14:d6:c9:09:74:0f:20:46:2d:53:8d:6f:d1:af: 19:38:1a:a6:46:4c:4f:03:dc:ff:e6:27:2d:40:dd:14:af:2d: c8:27:7f:ba:eb:a6:60:4a:dc:9a:18:2c:43:b9:1c:2a:51:e6: 5c:83:2c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538WMH55eu5pj1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MGVjYjAwN2YtZjAzZS00NDAwLThkMjgtYzhiZTY5ZDI5N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDfdoKcnGP+JRZcBZ+FDbSWKO3rRlGgtpaXX ZUbiigbK9nyttPmH30FPyoQAHqJVBLVdKStiD0VfrEFEpe3iQDbLe/+j4OWzIJKL 4Omaag8vuteIk4CbATanyGoAWpx9PSehnIvvoiMmAFYBSumLdYaGCLaSjKd4QrFb 2leBYH4berHQ0+BpfpLDhwmbir2rtwasG6RCGj5KLao1Rh4B5q9XPYsAt228N3LP O81tYgHIWZWEwveJbp9koaUVm4JVbIUuVXTmol98ol5+Hnb155T+pB11u56agW1z /+rB2ZOjCVlqsWdl8IKLeafoism130qb7gJBaUSYXVMMAX0x7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNymuh6gxzWG65S5bJs69LCEap85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMmIyNmFmZjQtNjdlZC0z NDIyLTlhNjYtZTE3ZWNkZjg2ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaBLvefGF0J8lBIaWavRvMMlrTqBT4ElkoyYfi7UsbHUC2ynAbYT5VL p6RdPpCyT8GDzVsbGG27OA0AJk/+5MIOwem5bNx+fT0UWYiRwVwjO0JAod+7FFCb cb/alnxQPR6Mb56ReF8oq4iJc0QdKgDwksqDy3t7SQUJW8SSzPp+E+ldfHvfdZC5 29WCL4iWQsqbvqQFAlNzbJ7VzJHk5fl4gJ59+ygqzXCwdkThgxJWAK+4gCJwHkOq nSucZTdjniVLFLEj8pmNqxsU1skJdA8gRi1TjW/Rrxk4GqZGTE8D3P/mJy1A3RSv Lcgnf7rrpmBK3JoYLEO5HCpR5lyDLMQ= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:49 2025 by rpki-client