$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d0a814e-1a92-3b2e-91db-f9e151e053a6.roa File: 9d0a814e-1a92-3b2e-91db-f9e151e053a6.roa (raw, json) Hash identifier: TYCbO72rCw+cleWYI7KQiJce/9J5S03pGS3gl+84KGQ= Subject key identifier: 32:93:3A:0B:CD:8F:1D:11:16:0C:9E:1D:F7:D9:05:3B:AE:A0:71:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A7887242AC73FA774C6780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d0a814e-1a92-3b2e-91db-f9e151e053a6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 74.84.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:88:72:42:ac:73:fa:77:4c:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c6606eb2-e164-4b79-89f4-7d8e1c7f6a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:87:71:49:4f:7e:2c:ad:b2:f3:4c:53:a0: c1:2f:c1:2b:ef:88:34:a1:ff:b4:80:d0:e9:7e:db: 97:b0:1a:66:a4:8a:c2:0e:7c:64:28:72:b3:7c:59: a6:67:2f:f1:fe:57:5f:f8:85:e2:8f:a8:34:9f:05: 78:5b:67:93:b8:59:08:fb:3c:46:35:a6:ff:7c:7b: be:5f:cc:eb:c5:e9:1a:b6:25:50:bb:29:c7:14:cc: 47:f8:a0:8e:c0:a4:1f:4d:4b:8d:84:54:4b:b0:63: c2:fd:f5:1d:f7:8c:87:29:54:38:4f:c1:cc:b3:48: 53:d2:cf:f1:d4:c7:5e:30:0d:4b:06:6c:da:b0:ee: f9:8e:20:8f:6c:50:c9:7a:50:01:0b:2f:b9:4a:58: 43:09:bc:e5:a7:d3:cb:c6:71:82:21:0f:24:28:59: 0d:bf:88:75:6a:78:53:18:8c:ef:de:e9:c6:2a:be: d8:26:7d:e9:12:0a:bf:5b:7c:a6:bc:09:38:ee:0f: 30:c3:91:4f:70:65:3e:86:64:82:57:04:16:ff:f7: 48:61:50:59:a6:60:ae:04:fc:76:88:71:9b:87:ab: 0f:86:c6:29:3c:73:24:0a:6b:00:c2:49:2e:54:01: eb:54:27:40:32:a5:cb:5c:62:fc:8b:00:00:3e:34: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:3A:0B:CD:8F:1D:11:16:0C:9E:1D:F7:D9:05:3B:AE:A0:71:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d0a814e-1a92-3b2e-91db-f9e151e053a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:31:a6:8a:6a:43:77:41:87:b2:0b:bd:13:18:6b:48:18:30: cb:16:7f:88:a4:37:fe:5f:0f:85:5b:92:4c:e6:a8:a3:66:66: 97:54:53:b0:9a:f1:0f:4f:8f:f1:25:85:67:2b:99:79:d4:a8: 97:db:71:0c:9e:22:ed:4e:01:fb:c2:19:e5:ad:dc:0c:a0:ca: 1e:18:83:94:78:d2:96:22:bb:7d:96:af:76:9f:c4:1e:df:13: c3:a0:78:4b:d5:9b:22:24:ae:a7:90:61:1e:69:b8:5a:34:bd: f2:f5:e3:7e:e8:4d:e3:7b:66:e5:41:23:6c:63:14:00:26:07: bd:2e:8f:d1:e6:66:17:7b:f7:db:b0:5a:46:6e:0f:39:45:98: dc:7b:6b:fc:02:3d:9c:c0:24:86:1f:60:ab:56:51:49:53:a0: 57:6b:71:b4:79:14:7a:78:e0:ad:16:6e:aa:5e:bc:47:44:c7: bd:98:0b:df:ca:8a:e6:4c:1b:c7:b3:01:60:ed:8d:49:41:7d: ae:4e:a1:bb:16:b7:a5:63:3c:66:3a:9a:d1:8b:86:6f:1b:5f: 14:0e:80:93:26:2a:bc:f3:be:0d:87:59:21:3f:ad:7b:ba:8b: b3:bf:67:bb:69:6d:70:10:c6:10:e4:ed:8d:06:94:0c:2d:ed: 93:55:5a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4hyQqxz+ndMZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzY2MDZlYjItZTE2NC00Yjc5LTg5ZjQtN2Q4ZTFjN2Y2YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqaHcUlPfiytsvNMU6DBL8Er74g0of+0gNDp ftuXsBpmpIrCDnxkKHKzfFmmZy/x/ldf+IXij6g0nwV4W2eTuFkI+zxGNab/fHu+ X8zrxekatiVQuynHFMxH+KCOwKQfTUuNhFRLsGPC/fUd94yHKVQ4T8HMs0hT0s/x 1MdeMA1LBmzasO75jiCPbFDJelABCy+5SlhDCbzlp9PLxnGCIQ8kKFkNv4h1anhT GIzv3unGKr7YJn3pEgq/W3ymvAk47g8ww5FPcGU+hmSCVwQW//dIYVBZpmCuBPx2 iHGbh6sPhsYpPHMkCmsAwkkuVAHrVCdAMqXLXGL8iwAAPjSPAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKTOgvNjx0RFgyeHffZBTuuoHG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQwYTgxNGUtMWE5Mi0z YjJlLTkxZGItZjllMTUxZTA1M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQxpopqQ3dBh7ILvRMYa0gYMMsWf4ikN/5fD4VbkkzmqKNmZpdUU7Ca 8Q9Pj/ElhWcrmXnUqJfbcQyeIu1OAfvCGeWt3Aygyh4Yg5R40pYiu32Wr3afxB7f E8OgeEvVmyIkrqeQYR5puFo0vfL1437oTeN7ZuVBI2xjFAAmB70uj9HmZhd799uw WkZuDzlFmNx7a/wCPZzAJIYfYKtWUUlToFdrcbR5FHp44K0WbqpevEdEx72YC9/K iuZMG8ezAWDtjUlBfa5OobsWt6VjPGY6mtGLhm8bXxQOgJMmKrzzvg2HWSE/rXu6 i7O/Z7tpbXAQxhDk7Y0GlAwt7ZNVWiE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:45 2025 by rpki-client