$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa File: bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json) Hash identifier: 59YJRhn3m83+Ro9hk7kUqCoXgNurzwxxfsu5DK6pK6M= Subject key identifier: BE:5E:EF:AA:F7:2F:6A:12:42:0D:43:92:A0:F0:3E:A1:3C:20:81:15 Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F4328584AA42B86A56817253B86BCDBC0 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 19528 IP address blocks: 74.209.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:86:a5:68:17:25:3b:86:bc:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=ef00d0d9-d93b-4ccc-8735-acc6e7896559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:63:13:92:5c:ae:87:cf:ac:fa:83:72:0f: 22:90:31:60:5d:de:de:f1:d9:89:f7:36:d3:50:a8: e5:62:21:07:c8:5c:21:1c:c9:60:ed:cb:1e:94:92: 7e:50:ce:6a:8a:03:6e:22:b4:2e:c7:67:7c:a4:1e: ba:90:33:c8:95:39:69:ab:c1:c5:e8:99:3e:5d:7a: da:85:a9:12:6c:e7:1e:77:c5:97:ea:cd:b3:48:21: ad:77:35:f6:03:0e:64:f1:a2:0c:56:39:eb:98:50: 4b:3d:14:29:5b:67:44:d0:51:88:ed:3b:f9:2f:eb: 1d:0c:90:27:97:d0:ce:bb:54:01:ec:c3:e4:c2:70: 33:6c:63:c2:34:28:97:04:b6:58:85:44:21:cd:1d: 2d:e9:78:31:a1:2e:a5:f1:87:6b:23:65:ae:e4:7f: 2d:61:81:39:cc:c3:5d:1a:3e:d3:37:c4:bc:6c:32: 95:1e:b6:73:b1:76:a7:a5:6c:0c:11:65:d8:ca:06: 53:a6:f6:55:2c:07:0e:f7:3a:db:1f:40:bb:71:e1: 43:2e:40:61:88:32:4e:50:e0:87:83:cd:3a:56:bf: 03:86:de:c4:14:f2:9b:c4:6a:01:c3:34:06:71:e9: ee:10:ba:9b:9e:30:59:87:f4:cc:a0:95:c7:47:4b: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5E:EF:AA:F7:2F:6A:12:42:0D:43:92:A0:F0:3E:A1:3C:20:81:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6b:ca:39:68:1b:5b:16:db:22:2b:64:78:97:a2:07:81:13: 32:49:15:e3:2a:4d:cc:b6:d6:2b:6a:8b:29:ea:79:1e:6f:78: e4:52:81:9e:a9:eb:19:ba:13:5c:07:91:6c:20:eb:3a:75:1c: f8:6b:1f:7a:48:6e:5d:61:5d:ff:43:f1:4b:1d:bc:c6:48:7d: 14:93:d5:ea:f2:cf:bb:98:f8:22:3f:e7:0c:04:df:d1:22:31: c5:b9:e7:b2:0c:7b:60:48:80:5e:ea:60:75:2e:ce:7a:ce:dd: e7:f9:64:fc:0f:eb:30:f7:db:20:a9:e9:34:03:5e:1f:57:3b: 68:9a:6d:12:57:b3:be:8c:45:4b:6e:15:a1:a0:32:e5:dd:84: 69:62:b5:19:a0:b7:99:90:d6:4e:89:95:7b:3d:c2:ca:8d:b9: ad:5b:7d:20:1e:b8:af:f8:c9:f9:95:03:56:a2:da:d3:7a:2f: 01:d0:98:63:59:dd:28:9e:6b:59:d7:84:b5:cc:32:21:7d:1d: 86:e7:da:33:79:76:df:d7:9c:dd:be:12:8e:28:cb:00:a3:3a: 4d:97:5b:90:32:a5:ce:8c:50:4a:8f:d6:6a:bf:54:0f:90:83: 07:12:da:a4:e4:0a:e4:40:88:59:a6:03:10:f8:f3:b5:a2:ea: 38:84:ae:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4alaBclO4a828AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZWYwMGQwZDktZDkzYi00Y2NjLTg3MzUtYWNjNmU3ODk2NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulpjE5JcrofPrPqDcg8ikDFgXd7e8dmJ9zbT UKjlYiEHyFwhHMlg7cselJJ+UM5qigNuIrQux2d8pB66kDPIlTlpq8HF6Jk+XXra hakSbOced8WX6s2zSCGtdzX2Aw5k8aIMVjnrmFBLPRQpW2dE0FGI7Tv5L+sdDJAn l9DOu1QB7MPkwnAzbGPCNCiXBLZYhUQhzR0t6XgxoS6l8YdrI2Wu5H8tYYE5zMNd Gj7TN8S8bDKVHrZzsXanpWwMEWXYygZTpvZVLAcO9zrbH0C7ceFDLkBhiDJOUOCH g806Vr8Dht7EFPKbxGoBwzQGcenuELqbnjBZh/TMoJXHR0u6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5e76r3L2oSQg1DkqDwPqE8IIEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvYmRmNmE3ZDEtYTMyNC0z NWFmLTg0MTQtZDJhZTEwMTI0MmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBStGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdryjloG1sW2yIrZHiXogeBEzJJFeMqTcy21itqiynqeR5veORSgZ6p 6xm6E1wHkWwg6zp1HPhrH3pIbl1hXf9D8UsdvMZIfRST1eryz7uY+CI/5wwE39Ei McW557IMe2BIgF7qYHUuznrO3ef5ZPwP6zD32yCp6TQDXh9XO2iabRJXs76MRUtu FaGgMuXdhGlitRmgt5mQ1k6JlXs9wsqNua1bfSAeuK/4yfmVA1ai2tN6LwHQmGNZ 3Siea1nXhLXMMiF9HYbn2jN5dt/XnN2+Eo4oywCjOk2XW5Aypc6MUEqP1mq/VA+Q gwcS2qTkCuRAiFmmAxD487Wi6jiEroA= -----END CERTIFICATE-----Generated at Fri Aug 8 12:56:22 2025 by rpki-client