$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/897d74de-4598-36d1-a3d8-51fab4477e0a.roa File: 897d74de-4598-36d1-a3d8-51fab4477e0a.roa (raw, json) Hash identifier: MwkTxU7R6tTBx44cXOjuG143qz/m3mOV7L8siVposXE= Subject key identifier: C1:56:18:79:DA:4D:92:70:DE:BE:C0:BF:73:F7:80:65:A6:C9:D9:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AC5AB8FB7D73397A7D8E0EE80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/897d74de-4598-36d1-a3d8-51fab4477e0a.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 209854 IP address blocks: 74.49.196.0/24 maxlen: 24 74.49.197.0/24 maxlen: 24 74.49.198.0/24 maxlen: 24 74.49.199.0/24 maxlen: 24 74.49.204.0/24 maxlen: 24 74.49.205.0/24 maxlen: 24 74.49.206.0/24 maxlen: 24 74.49.207.0/24 maxlen: 24 74.49.212.0/24 maxlen: 24 74.49.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8f:b7:d7:33:97:a7:d8:e0:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=96aff9fd-d8c7-4da9-a609-0084fd7eb5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:da:ad:f5:c2:a3:3c:71:6b:0b:12:2c:49: 5a:18:20:c5:5c:2d:2e:87:45:75:a2:31:ae:fe:d9: 9d:80:bf:e9:0e:b9:69:20:da:af:22:5e:df:49:98: 2b:1b:43:2e:82:2f:7e:6f:f3:be:bd:19:fa:0f:a7: 18:a8:3a:2e:4d:ba:27:90:7a:88:ad:29:89:a1:8b: 74:c6:03:43:38:b5:ed:56:78:ba:5e:e6:91:8c:f6: 26:df:c9:b3:bf:30:bd:11:0f:58:fc:a0:b9:20:23: ba:ed:8b:a8:12:2e:29:75:56:fd:34:ff:49:23:0a: 60:bc:1e:5a:45:4f:55:e3:87:2f:d4:cb:c7:78:39: 77:91:59:57:dc:2b:0a:9e:e2:a8:2f:a9:bf:02:3c: 43:c6:2c:01:dd:39:20:9e:91:21:23:fd:dd:0f:53: 89:98:6e:1b:5e:a3:18:2c:2f:bf:25:38:32:ff:cc: 7d:2d:71:df:01:a4:54:da:30:cd:cd:aa:9d:76:7e: 36:a1:48:2b:c6:ac:bf:23:c6:5d:d3:92:a1:2e:af: 3a:b5:df:bd:ed:55:76:be:22:4a:ed:a8:9b:a2:84: b5:17:39:1a:5f:11:fc:07:2f:83:d5:b4:48:cd:7b: 88:68:bc:36:97:16:f3:b8:e6:2b:0c:8a:ee:42:e1: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:18:79:DA:4D:92:70:DE:BE:C0:BF:73:F7:80:65:A6:C9:D9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/897d74de-4598-36d1-a3d8-51fab4477e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.196.0/22 74.49.204.0/22 74.49.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:95:18:9f:dc:77:a1:c4:d2:9e:ae:55:38:58:43:9f:22:b4: b6:a0:20:c6:7f:e1:18:6c:31:e3:4e:af:cc:30:1c:ed:3e:fe: 00:2a:53:bf:57:c5:77:76:b7:5b:c7:be:1d:fe:cb:97:cc:d0: dc:c0:26:a5:a7:fe:ba:f3:5f:1a:5f:55:a6:93:94:0c:4e:1b: c6:87:9a:86:52:5c:ab:47:b1:09:43:3e:47:08:e4:fd:14:0e: a9:71:bd:ea:92:b3:d9:73:2f:d2:4e:d0:62:71:03:d6:ce:b5: 83:2a:71:61:5e:96:9b:09:54:29:c9:e8:89:6a:dd:34:50:b7: be:c1:32:de:68:5a:25:2d:a5:0f:8d:4b:81:b4:3b:74:7b:da: fb:29:93:d0:95:2f:cf:75:39:fb:86:90:f7:3e:9d:8d:25:3f: 6a:e7:03:f8:eb:4b:78:6a:a8:58:c0:3d:24:2b:42:7a:c0:9c: e3:7a:64:92:59:58:f9:04:e0:76:41:d2:9f:b8:a6:dc:9b:83: 34:86:20:64:9e:d5:41:9b:1b:bc:f7:53:92:a2:61:69:cc:05: 2f:1e:50:f8:0d:1a:b4:ca:45:9b:1d:8c:35:d9:2e:5b:1b:0a: 81:65:62:7d:3a:8e:bd:54:18:7d:3e:9e:d2:ca:cc:96:1a:a6: 6d:13:09:56 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErFq4+31zOXp9jg7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OTZhZmY5ZmQtZDhjNy00ZGE5LWE2MDktMDA4NGZkN2ViNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFnarfXCozxxawsSLElaGCDFXC0uh0V1ojGu /tmdgL/pDrlpINqvIl7fSZgrG0Mugi9+b/O+vRn6D6cYqDouTbonkHqIrSmJoYt0 xgNDOLXtVni6XuaRjPYm38mzvzC9EQ9Y/KC5ICO67YuoEi4pdVb9NP9JIwpgvB5a RU9V44cv1MvHeDl3kVlX3CsKnuKoL6m/AjxDxiwB3TkgnpEhI/3dD1OJmG4bXqMY LC+/JTgy/8x9LXHfAaRU2jDNzaqddn42oUgrxqy/I8Zd05KhLq86td+97VV2viJK 7aibooS1FzkaXxH8By+D1bRIzXuIaLw2lxbzuOYrDIruQuGdHQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMFWGHnaTZJw3r7Av3P3gGWmydmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODk3ZDc0ZGUtNDU5OC0z NmQxLWEzZDgtNTFmYWI0NDc3ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCSjHEAwQC SjHMAwQBSjHUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGyVGJ/cd6HE0p6uVThYQ58itLagIMZ/4RhsMeNO r8wwHO0+/gAqU79XxXd2t1vHvh3+y5fM0NzAJqWn/rrzXxpfVaaTlAxOG8aHmoZS XKtHsQlDPkcI5P0UDqlxveqSs9lzL9JO0GJxA9bOtYMqcWFelpsJVCnJ6Ilq3TRQ t77BMt5oWiUtpQ+NS4G0O3R72vspk9CVL891OfuGkPc+nY0lP2rnA/jrS3hqqFjA PSQrQnrAnON6ZJJZWPkE4HZB0p+4ptybgzSGIGSe1UGbG7z3U5KiYWnMBS8eUPgN GrTKRZsdjDXZLlsbCoFlYn06jr1UGH0+ntLKzJYapm0TCVY= -----END CERTIFICATE-----Generated at Thu Aug 7 05:05:59 2025 by rpki-client