$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa File: b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa (raw, json) Hash identifier: g4ovgOkXPA/rUInEyZ6YrAkaFgTEDae5jkif1Q2qqms= Subject key identifier: AD:86:3C:67:F9:4C:8A:65:88:7F:90:E6:72:04:DA:57:47:92:FE:02 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A86697199AB03749C5D9377C0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa Signing time: Tue 15 Jul 2025 09:11:32 +0000 ROA not before: Tue 15 Jul 2025 09:11:32 +0000 ROA not after: Mon 13 Oct 2025 09:11:32 +0000 asID: 152868 IP address blocks: 74.81.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:69:71:99:ab:03:74:9c:5d:93:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 15 09:11:32 2025 GMT Not After : Oct 13 09:11:32 2025 GMT Subject: CN=ae266c22-b8bb-47cb-b104-ad9edc38ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:92:32:5c:d3:5e:d1:c2:24:5b:9d:b6:03:c4: c8:1d:9e:d2:8a:15:21:db:68:37:e7:da:1f:4c:15: fd:0c:a4:49:4c:cb:b4:2c:ec:ec:3d:89:14:2f:f5: 3f:e3:7a:34:3e:09:2d:25:07:0d:81:61:8e:74:68: c2:ce:ff:f6:57:b7:6e:5b:8f:c8:ed:44:d8:12:e9: 43:28:79:7f:d2:1a:54:93:28:f6:59:6b:49:4f:08: bc:31:e5:1e:83:64:c8:6e:29:b3:2c:3b:f8:1b:62: 07:07:48:65:ae:b6:ef:0f:41:28:c2:ab:56:91:70: 57:96:ec:67:39:0f:b7:f1:68:1c:1b:da:3f:1a:eb: ee:0e:44:fa:81:f8:3b:97:4d:64:88:04:1a:42:97: 51:c4:40:bd:16:0d:95:f2:20:5e:e6:05:92:f4:6d: aa:11:77:39:a9:48:09:e7:f9:50:db:65:8d:f0:b9: 25:18:63:0d:26:12:aa:63:4a:72:e9:5c:ac:85:6d: 02:f9:83:85:25:01:e1:33:cd:f5:1b:27:53:a0:e8: 0a:b5:90:df:38:0b:05:4c:8f:68:82:d6:e7:e8:8e: 2f:dc:a1:6d:38:91:25:54:99:44:68:be:56:d1:7d: e1:61:0b:bd:00:b0:bf:a1:21:e7:f7:b1:40:80:94: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:86:3C:67:F9:4C:8A:65:88:7F:90:E6:72:04:DA:57:47:92:FE:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 74.81.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7a:69:e2:8b:14:0f:62:ef:1c:7c:9a:8b:0e:1c:9f:05:55: 47:d1:a4:ab:c6:88:e8:39:be:fe:c7:c7:b5:73:70:17:cd:81: eb:ee:a6:8d:0f:65:34:dd:29:6a:c1:a9:e3:ea:46:a2:fc:b2: 61:e3:0c:ee:5e:94:50:3a:75:10:51:9d:79:38:95:54:28:43: 31:cf:15:bc:56:95:c8:c2:88:b5:4d:43:40:63:fd:6b:1a:57: aa:50:8d:61:ab:9a:18:90:47:e1:67:8c:31:d9:25:87:4c:a1: a7:fa:59:0d:12:9b:57:f6:39:6c:c1:5c:f6:e2:5f:d3:e6:9b: f5:99:32:0c:2e:b9:9a:11:bc:e2:1e:2b:5c:7b:90:1d:31:7a: 93:27:e6:b2:12:ed:bc:c8:58:5e:b4:83:9a:28:b6:c8:80:b5: ec:8e:0a:48:3f:b9:eb:3f:b5:1f:50:b4:31:8c:e2:05:25:5f: 5d:8d:15:0c:c4:a8:b6:e6:31:29:da:9b:17:c2:79:0a:ce:7a: 05:34:9a:66:75:e1:a3:86:6f:de:22:c8:be:cb:dc:75:06:6b: d5:fb:c5:3b:02:a8:f9:c4:37:ce:d5:ba:3e:48:31:6b:e9:1d: 9c:98:76:c6:2b:45:ca:6a:00:ac:f6:ca:f2:a7:2d:b2:5d:bc: 45:bd:3b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqGaXGZqwN0nF2Td8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDcxNTA5MTEzMloXDTI1MTAxMzA5MTEzMlowLzEtMCsGA1UEAxMk YWUyNjZjMjItYjhiYi00N2NiLWIxMDQtYWQ5ZWRjMzhiYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpIyXNNe0cIkW522A8TIHZ7SihUh22g359of TBX9DKRJTMu0LOzsPYkUL/U/43o0PgktJQcNgWGOdGjCzv/2V7duW4/I7UTYEulD KHl/0hpUkyj2WWtJTwi8MeUeg2TIbimzLDv4G2IHB0hlrrbvD0EowqtWkXBXluxn OQ+38WgcG9o/GuvuDkT6gfg7l01kiAQaQpdRxEC9Fg2V8iBe5gWS9G2qEXc5qUgJ 5/lQ22WN8LklGGMNJhKqY0py6VyshW0C+YOFJQHhM831GydToOgKtZDfOAsFTI9o gtbn6I4v3KFtOJElVJlEaL5W0X3hYQu9ALC/oSHn97FAgJR72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2GPGf5TIpliH+Q5nIE2ldHkv4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYjNiOGUwYjEtZjE3MS0z ZmQ3LTk5ZmQtYmVmNjdhNjIwMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ6aeKLFA9i7xx8mosOHJ8FVUfRpKvGiOg5vv7Hx7VzcBfNgevupo0P ZTTdKWrBqePqRqL8smHjDO5elFA6dRBRnXk4lVQoQzHPFbxWlcjCiLVNQ0Bj/Wsa V6pQjWGrmhiQR+FnjDHZJYdMoaf6WQ0Sm1f2OWzBXPbiX9Pmm/WZMgwuuZoRvOIe K1x7kB0xepMn5rIS7bzIWF60g5ootsiAteyOCkg/ues/tR9QtDGM4gUlX12NFQzE qLbmMSnamxfCeQrOegU0mmZ14aOGb94iyL7L3HUGa9X7xTsCqPnEN87Vuj5IMWvp HZyYdsYrRcpqAKz2yvKnLbJdvEW9O+4= -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:44 2025 by rpki-client