$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/4434e63e-d258-36e2-913f-066239292e64.roa File: 4434e63e-d258-36e2-913f-066239292e64.roa (raw, json) Hash identifier: XXm2bjzmvbGfpXGM8lH0s6dXtu8kmORof+ZfpzYieQU= Subject key identifier: 90:DC:D6:88:97:16:27:80:6A:3A:0C:16:27:25:52:DF:98:A0:1D:58 Certificate issuer: /CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987 Certificate serial: 010D0C9F4328584AA42B75BA9A223CCFFB271B80 Authority key identifier: EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/4434e63e-d258-36e2-913f-066239292e64.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 209.94.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:75:ba:9a:22:3c:cf:fb:27:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=7c2bd0f0-3497-4e4f-8dd9-cf0b4f08edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:60:c2:e7:1e:14:f2:c8:5c:ed:f1:5e:3d: bc:9d:d1:2d:2f:ad:41:4e:11:37:02:9a:13:8b:09: 06:6f:65:1d:f6:92:56:9c:93:5b:7b:32:c4:da:b7: 92:cb:18:14:c6:82:88:44:82:fc:c1:81:47:c8:f8: 61:99:0b:39:30:52:46:5d:d2:b5:28:54:03:84:40: 8e:83:fe:f2:0b:b5:23:cd:42:42:65:73:fe:b4:6d: 49:96:16:d1:f3:56:a7:82:9e:84:7e:35:95:0f:b9: a4:33:b1:04:dc:be:80:3d:c4:1e:87:a7:65:53:c2: 3a:c4:0d:9e:26:3c:b1:6d:79:36:de:e3:fe:f7:90: 0a:13:46:6d:c5:15:e8:5f:ef:7a:01:d4:b8:fa:73: 9a:f8:a3:60:d9:ff:d1:5c:a0:8d:21:00:40:78:29: cc:82:7f:b3:de:b5:3e:e5:63:e9:b3:6c:32:32:60: 59:f0:a4:f3:26:cf:95:ee:53:f6:84:cf:b9:c3:79: 9b:1e:23:1f:11:b3:1b:8c:d9:34:e1:2a:f8:1e:30: 7e:a3:58:89:ed:c3:26:5f:f3:8b:68:36:ea:ef:b6: b7:0c:2b:9a:67:2b:4a:3c:ed:9d:a6:66:db:da:a0: ed:54:1e:cb:d4:b0:56:1d:87:18:20:1b:e6:0d:f2: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DC:D6:88:97:16:27:80:6A:3A:0C:16:27:25:52:DF:98:A0:1D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/4434e63e-d258-36e2-913f-066239292e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl X509v3 Authority Key Identifier: keyid:EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer sbgp-ipAddrBlock: critical IPv4: 209.94.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:87:a6:f8:92:cb:2c:f9:aa:35:be:22:a8:bc:ca:17:be:86: 6f:1b:fa:d0:0f:48:f5:8a:12:7c:e7:66:61:6f:82:d8:7b:e5: d7:46:44:e5:e0:e7:8e:b9:87:a0:3f:13:f6:c0:79:f0:27:19: 81:a1:35:4e:11:b8:f4:c5:ed:aa:49:0a:fc:5d:4b:f1:6b:c7: 91:7b:ae:7b:16:bf:05:9f:e4:43:8f:e8:92:ce:c2:89:87:95: 99:cc:bf:5a:70:73:a5:6c:15:d0:a4:d8:86:cc:ca:1b:dd:45: 55:35:55:fd:1a:d0:cf:0f:a6:3d:b6:af:d5:3c:57:93:bc:7f: 2a:2b:38:f0:e0:d8:0e:11:11:c3:6c:e2:55:a2:43:03:43:14: eb:43:aa:0e:88:be:a9:a6:c0:34:d6:94:cb:24:03:ba:be:a6: 1f:a4:cd:8b:09:04:2d:f8:ce:f8:70:38:3d:8b:96:46:44:30: ca:c3:a5:c4:b2:98:0e:6d:3f:5c:66:c7:1b:4d:8a:01:74:2e: 43:ed:8d:73:d7:fc:45:ec:c2:a9:4a:31:cf:6c:f0:ff:26:82: 90:4c:30:6b:61:f1:5c:e2:d2:86:28:64:3b:94:60:68:de:49: c1:cf:1b:ad:cc:d3:8a:a6:37:cc:f9:22:b4:31:7f:83:cc:bf: 4f:67:2f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3W6miI8z/snG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ5OWFiY2QtODMyYi00YmE4LTgwY2EtNGUwYTY0Yjlj OTg3MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk N2MyYmQwZjAtMzQ5Ny00ZTRmLThkZDktY2YwYjRmMDhlZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynhgwuceFPLIXO3xXj28ndEtL61BThE3ApoT iwkGb2Ud9pJWnJNbezLE2reSyxgUxoKIRIL8wYFHyPhhmQs5MFJGXdK1KFQDhECO g/7yC7UjzUJCZXP+tG1JlhbR81angp6EfjWVD7mkM7EE3L6APcQeh6dlU8I6xA2e JjyxbXk23uP+95AKE0ZtxRXoX+96AdS4+nOa+KNg2f/RXKCNIQBAeCnMgn+z3rU+ 5WPps2wyMmBZ8KTzJs+V7lP2hM+5w3mbHiMfEbMbjNk04Sr4HjB+o1iJ7cMmX/OL aDbq77a3DCuaZytKPO2dpmbb2qDtVB7L1LBWHYcYIBvmDfJuqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDc1oiXFieAajoMFiclUt+YoB1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDk5 YWJjZC04MzJiLTRiYTgtODBjYS00ZTBhNjRiOWM5ODcvNDQzNGU2M2UtZDI1OC0z NmUyLTkxM2YtMDY2MjM5MjkyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ5OWFiY2QtODMyYi00YmE4LTgw Y2EtNGUwYTY0YjljOTg3Lzk0OTlhYmNkLTgzMmItNGJhOC04MGNhLTRlMGE2NGI5 Yzk4Ny5jcmwwHwYDVR0jBBgwFoAU6kY5ZMnpcVfI/1vhf2FnZnGf6jMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDk5YWJjZC04MzJiLTRiYTgtODBjYS00ZTBh NjRiOWM5ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0V5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeHpviSyyz5qjW+Iqi8yhe+hm8b+tAPSPWKEnznZmFvgth75ddGROXg 5465h6A/E/bAefAnGYGhNU4RuPTF7apJCvxdS/Frx5F7rnsWvwWf5EOP6JLOwomH lZnMv1pwc6VsFdCk2IbMyhvdRVU1Vf0a0M8Ppj22r9U8V5O8fyorOPDg2A4REcNs 4lWiQwNDFOtDqg6IvqmmwDTWlMskA7q+ph+kzYsJBC34zvhwOD2LlkZEMMrDpcSy mA5tP1xmxxtNigF0LkPtjXPX/EXswqlKMc9s8P8mgpBMMGth8Vzi0oYoZDuUYGje ScHPG63M04qmN8z5IrQxf4PMv09nL5s= -----END CERTIFICATE-----Generated at Tue Aug 5 17:28:59 2025 by rpki-client