$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b7c43428-5daf-3640-8258-79bdada20694.roa File: b7c43428-5daf-3640-8258-79bdada20694.roa (raw, json) Hash identifier: o8Z2FUPrUsQBe7lRtpw1fXzxPrcMQSD8+2WmLIFGav0= Subject key identifier: BE:27:14:53:89:BC:F2:DB:C6:5B:B2:5D:E6:53:23:B4:23:55:D7:D6 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AE8912C79999FBA31546CC100 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b7c43428-5daf-3640-8258-79bdada20694.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 398026 IP address blocks: 74.219.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2c:79:99:9f:ba:31:54:6c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=9129b2e5-200c-4f62-a5eb-23f4636f8063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:00:dc:f1:a7:0e:8a:a7:e0:65:46:8a:d2: b8:10:96:cb:c3:61:fe:ad:1e:00:2f:d3:9f:83:ad: 5d:b2:5a:39:c7:5e:31:d0:5a:fd:ef:f0:c7:7e:1c: 50:20:28:cd:60:30:06:c9:ac:f8:aa:ed:b7:16:9f: 00:ab:56:52:2e:ca:eb:ba:9c:6d:40:4a:44:30:04: cc:11:42:e9:44:2a:01:d9:6b:63:a5:99:1b:87:d0: 1a:6c:ca:f7:79:6b:16:2e:b2:1a:57:22:31:fd:72: ff:e1:c3:fd:e8:c5:bb:ea:ba:c4:eb:d1:0c:41:a1: c2:4b:8b:5e:33:50:a6:6c:95:de:0f:e7:ee:b3:53: 94:3c:7d:43:c2:86:96:79:ff:aa:22:2b:bf:68:6d: cb:e7:2f:6c:03:a6:2f:5f:8f:15:cd:b6:00:e4:f1: 1d:34:da:2f:db:1d:c7:2a:f1:8d:bd:29:6d:98:e8: e6:76:04:b9:1e:8d:7e:c8:a0:3d:b7:bf:41:8c:eb: 31:30:a6:92:1e:5e:84:7c:0b:ec:5a:3c:84:0f:68: e1:5e:64:8b:0f:50:9b:55:d3:67:c6:d1:68:13:4e: 63:0b:31:5c:af:5a:e4:c7:76:94:92:ee:10:0a:14: 63:b0:13:84:36:d6:b4:b0:99:18:d5:1f:ec:ea:3e: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:27:14:53:89:BC:F2:DB:C6:5B:B2:5D:E6:53:23:B4:23:55:D7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b7c43428-5daf-3640-8258-79bdada20694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 74.219.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:46:66:9b:0a:5b:dd:57:75:a1:5d:8a:7d:e7:49:ba:96:80: 26:15:76:4f:0e:0d:a1:38:1b:7c:11:20:65:64:fb:e6:3e:37: 27:27:4e:6e:f6:49:6c:87:80:e4:1f:d0:98:2b:dd:4c:4d:3f: a4:95:88:de:59:99:4b:a6:02:57:3b:4b:c5:f1:34:3f:0e:8c: 57:4c:1b:11:b3:46:5b:aa:0d:a6:fb:22:5b:30:5e:82:d7:0c: 0d:20:8f:72:3b:b9:e1:80:fa:e4:af:b0:73:af:e3:98:a5:d2: 41:7c:68:b0:10:ed:b9:9b:3a:22:c5:20:3b:c3:cc:4d:ec:3a: 90:25:08:34:f1:36:16:37:5c:20:f1:3d:3e:f2:00:a7:87:17: 3b:49:14:7e:4e:f1:72:57:e8:fd:d7:cb:ee:20:2c:0f:58:f8: 33:7c:e8:13:b6:87:1f:a8:36:cc:38:a5:ed:65:78:97:52:45: 87:89:f2:99:c5:ba:1a:bd:ff:43:1a:92:de:d1:6a:6b:3d:c5: d5:02:19:ad:33:b6:c0:d8:bb:9e:99:fe:cc:3a:d6:a3:c8:f9: c1:8d:63:7b:07:34:99:73:ff:56:f5:c8:85:c8:3d:d0:f2:4c: b3:1a:57:04:24:48:fd:f9:6b:fa:a2:32:47:1d:3d:58:3e:47: 73:4e:8d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSx5mZ+6MVRswQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OTEyOWIyZTUtMjAwYy00ZjYyLWE1ZWItMjNmNDYzNmY4MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PwA3PGnDoqn4GVGitK4EJbLw2H+rR4AL9Of g61dslo5x14x0Fr97/DHfhxQICjNYDAGyaz4qu23Fp8Aq1ZSLsrrupxtQEpEMATM EULpRCoB2WtjpZkbh9AabMr3eWsWLrIaVyIx/XL/4cP96MW76rrE69EMQaHCS4te M1CmbJXeD+fus1OUPH1DwoaWef+qIiu/aG3L5y9sA6YvX48VzbYA5PEdNNov2x3H KvGNvSltmOjmdgS5Ho1+yKA9t79BjOsxMKaSHl6EfAvsWjyED2jhXmSLD1CbVdNn xtFoE05jCzFcr1rkx3aUku4QChRjsBOENta0sJkY1R/s6j5MmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4nFFOJvPLbxluyXeZTI7QjVdfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjdjNDM0MjgtNWRhZi0z NjQwLTgyNTgtNzliZGFkYTIwNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASttHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFGZpsKW91XdaFdin3nSbqWgCYVdk8ODaE4G3wRIGVk++Y+NycnTm72 SWyHgOQf0Jgr3UxNP6SViN5ZmUumAlc7S8XxND8OjFdMGxGzRluqDab7IlswXoLX DA0gj3I7ueGA+uSvsHOv45il0kF8aLAQ7bmbOiLFIDvDzE3sOpAlCDTxNhY3XCDx PT7yAKeHFztJFH5O8XJX6P3Xy+4gLA9Y+DN86BO2hx+oNsw4pe1leJdSRYeJ8pnF uhq9/0Makt7Rams9xdUCGa0ztsDYu56Z/sw61qPI+cGNY3sHNJlz/1b1yIXIPdDy TLMaVwQkSP35a/qiMkcdPVg+R3NOjco= -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:01 2025 by rpki-client