$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa File: a07f8277-ce17-34be-955c-7cc356301d2e.roa (raw, json) Hash identifier: SkNHvgae3XThPJeM4l4AHrX9+d2aRuxpBcCdLRKDzc0= Subject key identifier: 78:74:D2:D3:93:FB:E6:03:F7:2B:D8:6F:E3:55:CF:14:67:A5:E6:DC Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584B4616FA950068D0DD67362000 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 74.123.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fa:95:00:68:d0:dd:67:36:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=ac93d5b7-77b7-40e5-8c7a-1da91d6a9f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:2f:46:59:f9:cf:5f:b1:25:cf:06:ed:26: c5:51:5a:bb:5f:7b:21:40:78:7e:4b:c1:5c:a0:ee: 8d:04:21:77:58:a7:76:67:c4:16:9f:65:7a:e3:c3: da:e3:dc:fc:f1:b0:a2:50:42:f7:0e:24:d6:95:39: 74:e6:7b:28:42:c7:97:2a:41:26:5c:2b:7f:14:e0: c1:51:52:82:9d:1c:14:e7:6d:0a:53:9a:00:de:dc: 20:37:bc:8d:e0:35:bb:3a:0c:2e:e6:93:db:87:1e: 2b:ee:31:e9:71:55:da:53:c1:43:07:72:a1:9b:db: f2:20:4a:19:4b:5e:b7:47:31:9c:98:3f:ce:be:4a: a5:af:b6:47:ec:43:06:df:2b:a5:d5:71:ce:3c:48: f1:6e:c8:22:74:1a:1d:04:5f:b5:36:aa:67:ac:67: a0:0b:50:29:17:de:8a:bb:2b:c8:21:33:9e:e3:e8: 65:2d:6d:c9:48:3e:92:b7:49:12:7f:c6:cf:b5:23: a6:3c:bb:49:d2:59:ad:cf:9b:22:d7:74:d9:c0:ae: 8c:6e:71:97:b5:39:e7:44:66:fb:90:8a:32:58:93: ac:25:e7:b9:eb:59:c5:76:e3:a2:ca:fe:2a:95:e2: 26:4e:76:f8:97:9c:3d:d5:a8:64:aa:1d:7c:ad:13: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:74:D2:D3:93:FB:E6:03:F7:2B:D8:6F:E3:55:CF:14:67:A5:E6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 74.123.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:a4:d1:34:4f:a8:90:cd:e5:2a:59:e0:2f:b9:06:33:bc:86: d1:85:c3:3d:0d:9d:2a:06:19:35:e5:f7:8c:72:55:a0:cd:68: 95:92:17:c6:57:0a:8a:ac:7f:5c:88:ef:7d:25:2e:fb:71:63: 57:e7:62:54:09:82:47:fb:06:19:7f:64:d5:b0:41:2f:06:4a: ef:a1:28:a7:9e:c2:60:ce:80:52:b7:45:b5:36:ac:1f:96:0c: c1:a5:f8:b2:66:de:a3:8d:01:e2:2c:de:f7:56:a1:2d:0b:cc: 0d:04:a3:8f:ab:d1:a5:46:d1:52:17:82:01:a2:ae:0a:11:b5: 2f:41:e3:e8:38:4c:7d:83:ea:40:b2:7c:62:bc:11:fe:27:fb: 2d:75:52:46:22:f3:ca:fd:5f:07:6d:1d:33:7c:b1:11:39:f6: 4c:39:82:ec:cf:b2:92:33:ef:a1:c5:bf:56:3a:e4:7d:56:09: 2d:7c:e5:04:63:3d:7f:ce:d4:50:52:80:4d:2c:fb:b5:83:52: 89:94:70:b6:04:e9:2f:fe:ec:74:c0:bd:f0:d6:cb:7a:ef:04: 54:4b:ee:a5:58:c1:40:33:9d:1b:49:fb:c8:dd:f5:76:45:df: 23:23:cb:2f:3d:69:f0:8f:b8:77:af:fb:7d:46:ec:0a:4f:20: 33:f6:a9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFvqVAGjQ3Wc2IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWM5M2Q1YjctNzdiNy00MGU1LThjN2EtMWRhOTFkNmE5ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXsvRln5z1+xJc8G7SbFUVq7X3shQHh+S8Fc oO6NBCF3WKd2Z8QWn2V648Pa49z88bCiUEL3DiTWlTl05nsoQseXKkEmXCt/FODB UVKCnRwU520KU5oA3twgN7yN4DW7Ogwu5pPbhx4r7jHpcVXaU8FDB3Khm9vyIEoZ S163RzGcmD/Ovkqlr7ZH7EMG3yul1XHOPEjxbsgidBodBF+1NqpnrGegC1ApF96K uyvIITOe4+hlLW3JSD6St0kSf8bPtSOmPLtJ0lmtz5si13TZwK6MbnGXtTnnRGb7 kIoyWJOsJee561nFduOiyv4qleImTnb4l5w91ahkqh18rRNeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh00tOT++YD9yvYb+NVzxRnpebcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvYTA3ZjgyNzctY2UxNy0z NGJlLTk1NWMtN2NjMzU2MzAxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCk0TRPqJDN5SpZ4C+5BjO8htGFwz0NnSoGGTXl94xyVaDNaJWSF8ZX Coqsf1yI730lLvtxY1fnYlQJgkf7Bhl/ZNWwQS8GSu+hKKeewmDOgFK3RbU2rB+W DMGl+LJm3qONAeIs3vdWoS0LzA0Eo4+r0aVG0VIXggGirgoRtS9B4+g4TH2D6kCy fGK8Ef4n+y11UkYi88r9XwdtHTN8sRE59kw5guzPspIz76HFv1Y65H1WCS185QRj PX/O1FBSgE0s+7WDUomUcLYE6S/+7HTAvfDWy3rvBFRL7qVYwUAznRtJ+8jd9XZF 3yMjyy89afCPuHev+31G7ApPIDP2qf4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:10 2025 by rpki-client