$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa File: 2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa (raw, json) Hash identifier: 2BIpAm+Ga29XRDr+KD+LxJnBU/n0QGVyS3mY3egBKDU= Subject key identifier: 45:76:DC:C5:51:DD:A4:B9:B8:1E:87:C6:0C:D8:89:4B:6F:0F:14:9E Certificate issuer: /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Certificate serial: 010D0C9F4328584BB88D2A923F2A40F89EB744E0 Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 36666 IP address blocks: 74.120.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2a:92:3f:2a:40:f8:9e:b7:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7025e6fe-5aaf-4993-8a43-b7df0a722b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:08:36:99:8c:5a:ba:2c:21:d9:16:24:a9: 01:01:b2:b5:d1:b2:2d:f3:ad:a2:04:d4:62:00:3e: 81:50:92:d8:31:97:8b:22:f0:7f:19:05:bd:fc:6f: e2:e0:7f:41:4b:16:71:10:c0:fd:00:9b:99:3e:c5: 00:6c:fa:da:d9:1c:90:65:a1:c1:c8:30:87:f9:b6: f2:7e:60:26:3d:e3:f6:93:0f:13:1d:3d:b0:68:85: 73:10:6a:92:0f:ae:2a:1c:29:b6:40:b5:a6:d2:84: b0:fb:8b:a7:af:8b:6f:76:90:1d:c3:97:7d:0b:ad: f2:1c:b2:da:b3:6f:3b:11:db:ad:d3:c5:44:1f:e1: 66:93:b1:f2:ad:48:97:df:34:96:11:11:f2:b8:41: 47:d3:df:74:25:83:2f:2b:af:aa:c7:51:be:5e:98: 52:98:95:13:c8:f0:a2:b8:9c:31:8a:d3:9a:e0:99: ad:70:07:1c:1d:c8:a1:bd:3a:83:b7:3b:0e:b4:07: 4a:c2:c5:b6:c5:30:1a:0f:e1:1b:1b:eb:98:9d:dc: e8:de:48:bc:d8:94:1d:6e:c8:c4:de:52:d1:a3:92: e3:5e:f4:bd:06:8f:b1:cd:99:56:21:9d:a5:65:50: cf:4b:93:f2:cc:66:33:42:6c:70:ae:d9:dd:45:c2: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:DC:C5:51:DD:A4:B9:B8:1E:87:C6:0C:D8:89:4B:6F:0F:14:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl X509v3 Authority Key Identifier: keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer sbgp-ipAddrBlock: critical IPv4: 74.120.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:87:3b:7f:4d:9c:55:a0:24:bf:0f:0e:94:44:b5:9a:2c:28: ff:46:0f:a8:ed:2f:8c:6f:39:4b:28:85:d6:87:95:be:05:93: fc:7a:e8:e7:fb:67:50:b0:31:e2:1d:26:e0:f3:15:b9:f8:5f: ad:8b:4a:15:cd:df:30:fa:2e:5e:ae:d3:12:c1:63:01:6d:f5: 46:dc:32:66:91:52:99:43:61:a2:a0:bb:58:77:c7:2c:19:bd: c2:c1:6f:63:8e:0c:8c:7d:a8:bb:9a:91:fd:6d:32:af:ef:40: 4a:ca:dc:f0:21:a7:7d:00:17:bb:86:bd:f2:98:0e:bd:ee:6b: 62:7e:ef:45:4b:10:7a:56:5b:5b:a6:32:85:d4:ff:a6:b9:32: 1b:81:c0:48:ac:02:bc:ea:89:4f:6e:76:1e:dc:ce:ec:12:88: 44:16:4f:37:af:27:62:b5:2f:1b:a0:9e:27:9c:f2:9b:94:03: a5:46:3d:b3:7d:24:e8:a4:d8:41:72:52:58:ed:1f:99:c6:61: e9:ab:3d:d6:3c:b2:3f:d1:46:2c:ae:df:90:18:47:f2:4d:5e: 1d:e9:ce:0d:47:51:20:10:64:1b:85:57:a5:08:60:c5:9e:ec: 7b:f8:d8:03:1f:e7:02:29:f8:ea:4a:09:94:2e:04:a0:f2:fe: e9:85:6c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSqSPypA+J63ROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw ZWViMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzAyNWU2ZmUtNWFhZi00OTkzLThhNDMtYjdkZjBhNzIyYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNIINpmMWrosIdkWJKkBAbK10bIt862iBNRi AD6BUJLYMZeLIvB/GQW9/G/i4H9BSxZxEMD9AJuZPsUAbPra2RyQZaHByDCH+bby fmAmPeP2kw8THT2waIVzEGqSD64qHCm2QLWm0oSw+4unr4tvdpAdw5d9C63yHLLa s287Edut08VEH+Fmk7HyrUiX3zSWERHyuEFH0990JYMvK6+qx1G+XphSmJUTyPCi uJwxitOa4JmtcAccHcihvTqDtzsOtAdKwsW2xTAaD+EbG+uYndzo3ki82JQdbsjE 3lLRo5LjXvS9Bo+xzZlWIZ2lZVDPS5PyzGYzQmxwrtndRcJ3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV23MVR3aS5uB6HxgzYiUtvDxSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMmY3MDU2N2QtMGNmMC0z YzE0LTllNzktM2FlMjk3MzViYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1 MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4 ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCHO39NnFWgJL8PDpREtZosKP9GD6jtL4xvOUsohdaHlb4Fk/x66Of7 Z1CwMeIdJuDzFbn4X62LShXN3zD6Ll6u0xLBYwFt9UbcMmaRUplDYaKgu1h3xywZ vcLBb2OODIx9qLuakf1tMq/vQErK3PAhp30AF7uGvfKYDr3ua2J+70VLEHpWW1um MoXU/6a5MhuBwEisArzqiU9udh7czuwSiEQWTzevJ2K1Lxugniec8puUA6VGPbN9 JOik2EFyUljtH5nGYemrPdY8sj/RRiyu35AYR/JNXh3pzg1HUSAQZBuFV6UIYMWe 7Hv42AMf5wIp+OpKCZQuBKDy/umFbAA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:24 2025 by rpki-client