$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/23a0fdf8-308b-3799-826a-481cdce8e5ce.roa File: 23a0fdf8-308b-3799-826a-481cdce8e5ce.roa (raw, json) Hash identifier: aQv5gmu3DbqIQhd8jF/OIlS7UW1VXf+dLCu4HWLVAQs= Subject key identifier: 63:97:75:BC:86:77:FC:6E:D0:1B:C9:58:6C:14:E7:85:3A:23:33:80 Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F4328584AA42B86C568D51E0920FAAE80 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/23a0fdf8-308b-3799-826a-481cdce8e5ce.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 19528 IP address blocks: 74.209.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:86:c5:68:d5:1e:09:20:fa:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=7f084bc5-47f1-4617-8019-12bf0720c398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:50:fa:79:66:ca:f5:fc:38:31:5e:2f:4f:44: ae:e3:ac:73:3a:f7:b4:af:b9:93:60:3e:48:97:03: 88:4d:e4:08:af:2a:5c:a7:d2:51:92:08:6f:78:10: 3a:4c:16:e2:ec:65:04:3a:68:e5:3d:b0:2f:70:12: 17:4a:61:9d:6e:1f:5d:25:c1:9d:31:44:50:3b:12: 36:6d:25:08:b7:dd:c8:b6:c9:38:dd:91:ec:83:66: 46:8b:ce:28:6e:76:86:a4:87:3d:4b:cc:d3:59:33: 7b:03:80:52:25:20:4e:00:75:75:1b:3d:95:db:a7: 19:64:33:1f:c0:4e:44:fa:a0:14:aa:fd:10:b0:ad: 95:d1:4c:10:98:de:8f:8a:f7:11:c2:1d:89:63:6b: b0:63:c7:59:f9:de:e3:19:0a:01:5c:49:e6:40:3f: d4:c4:ed:7b:2d:61:39:54:30:79:0e:65:8d:8d:61: 8e:9c:46:1d:0c:0a:68:63:9f:50:94:fd:bd:15:53: 30:3c:1f:ed:64:03:dd:8b:a7:b1:0e:d2:10:6d:f9: ed:1f:cd:a0:da:1c:1f:10:d2:bd:ec:27:c6:8c:4b: a5:72:1f:aa:dd:8d:6b:26:fd:5f:0c:95:38:df:d8: e5:d2:b3:0c:0a:06:27:c6:d4:93:b7:08:f0:ab:e4: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:75:BC:86:77:FC:6E:D0:1B:C9:58:6C:14:E7:85:3A:23:33:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/23a0fdf8-308b-3799-826a-481cdce8e5ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:75:b4:d5:0a:9a:3d:67:97:da:05:ea:fd:d1:fe:6f:01:85: a9:14:a6:58:ac:93:77:b8:d4:fd:45:c6:e2:57:53:aa:8c:38: 4f:87:9a:f0:b2:87:a4:5d:6b:bc:ad:a1:8c:2c:d9:40:38:0e: 1d:67:89:27:e7:08:fd:16:07:d5:36:1c:33:19:61:18:8d:fc: 6c:33:56:5c:1a:54:0f:ec:22:35:6d:29:46:80:b2:45:04:cd: fa:6d:dd:d5:76:3b:2e:cb:6d:d5:67:b5:d2:7c:48:7f:b6:94: dd:98:08:10:be:09:61:5b:23:67:6b:7d:6c:e4:2c:66:ab:92: ef:7f:38:e1:56:a2:8d:5e:66:7c:3d:ba:2b:8f:1d:46:fb:ae: e5:dc:cf:12:b2:7f:54:66:53:a9:0f:aa:c7:45:4f:ff:f9:75: bf:85:ef:98:74:6c:d2:63:1a:f3:fc:41:6a:16:2c:79:25:99: d6:4f:e2:b9:1a:c8:0e:dd:7e:1f:c6:4a:85:74:9f:8d:37:d1: 74:f2:62:d4:53:eb:08:86:dc:f1:06:30:be:bc:ed:db:28:4d: 43:90:26:57:3b:c3:3a:5c:a6:bc:f7:87:bf:6b:c7:8d:72:24: 05:f4:9b:49:05:c8:c6:f6:df:4f:5c:ca:c2:de:34:dc:f8:a1: 34:ce:9e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4bFaNUeCSD6roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk N2YwODRiYzUtNDdmMS00NjE3LTgwMTktMTJiZjA3MjBjMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFD6eWbK9fw4MV4vT0Su46xzOve0r7mTYD5I lwOITeQIrypcp9JRkghveBA6TBbi7GUEOmjlPbAvcBIXSmGdbh9dJcGdMURQOxI2 bSUIt93Itsk43ZHsg2ZGi84obnaGpIc9S8zTWTN7A4BSJSBOAHV1Gz2V26cZZDMf wE5E+qAUqv0QsK2V0UwQmN6PivcRwh2JY2uwY8dZ+d7jGQoBXEnmQD/UxO17LWE5 VDB5DmWNjWGOnEYdDApoY59QlP29FVMwPB/tZAPdi6exDtIQbfntH82g2hwfENK9 7CfGjEulch+q3Y1rJv1fDJU439jl0rMMCgYnxtSTtwjwq+R+7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOXdbyGd/xu0BvJWGwU54U6IzOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvMjNhMGZkZjgtMzA4Yi0z Nzk5LTgyNmEtNDgxY2RjZThlNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB1tNUKmj1nl9oF6v3R/m8BhakUplisk3e41P1FxuJXU6qMOE+HmvCy h6Rda7ytoYws2UA4Dh1niSfnCP0WB9U2HDMZYRiN/GwzVlwaVA/sIjVtKUaAskUE zfpt3dV2Oy7LbdVntdJ8SH+2lN2YCBC+CWFbI2drfWzkLGarku9/OOFWoo1eZnw9 uiuPHUb7ruXczxKyf1RmU6kPqsdFT//5db+F75h0bNJjGvP8QWoWLHklmdZP4rka yA7dfh/GSoV0n4030XTyYtRT6wiG3PEGML687dsoTUOQJlc7wzpcprz3h79rx41y JAX0m0kFyMb2309cysLeNNz4oTTOno4= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:04 2025 by rpki-client