$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccef8d40-8728-3e04-bd8f-42ec263b656a.roa File: ccef8d40-8728-3e04-bd8f-42ec263b656a.roa (raw, json) Hash identifier: mxrKfL5FK+WVK9fJlvbv81CBK8UFs1ljrreCl5WCDaM= Subject key identifier: B4:77:12:5F:B8:51:E2:3D:7B:36:2B:DD:DB:A3:4C:78:A9:A4:8B:17 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95AB022FD6E151E2FE9F3000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccef8d40-8728-3e04-bd8f-42ec263b656a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 74.84.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:02:2f:d6:e1:51:e2:fe:9f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=22f927e3-a55d-4173-a67b-278cea60e9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:62:2f:85:2c:46:31:7f:02:2f:83:8e:d8: b9:35:b2:7f:83:aa:7c:77:b0:57:11:15:fd:51:87: 49:8b:cf:18:b3:57:4b:a3:40:32:ff:76:b8:4b:e2: f1:22:08:1d:ac:5b:49:55:55:22:6a:0f:88:5e:d9: e7:1b:b8:93:12:65:d0:4e:70:75:fc:a8:96:45:75: c8:ef:19:cb:27:c5:b8:4d:d7:d1:6a:c6:a2:0f:2c: 42:d6:d9:30:40:9c:9d:1e:6e:ca:fc:6c:7c:d4:b3: 0b:c8:16:14:e8:cd:64:e0:53:9e:78:f1:e3:5d:dc: 35:5c:e0:86:7e:94:f5:60:b7:e3:f1:91:51:e0:59: e5:a4:bb:65:6a:ed:2d:f0:b3:54:c6:fd:5d:0f:1d: 16:88:d8:dd:42:9a:72:ee:51:0a:cc:bb:b9:b7:e8: 3f:6c:98:f7:68:54:4c:bb:77:00:8d:76:fd:04:ed: 78:81:c7:b9:95:db:8c:27:3e:08:c9:9a:5b:42:d0: af:bf:cf:fd:db:3d:15:31:e1:d7:d3:ba:16:9c:c2: 66:77:cf:40:57:b3:2a:33:0c:63:e4:f4:02:5a:8b: f4:0e:cf:5d:af:38:73:47:28:9d:6a:a4:d1:72:3d: 2f:8b:75:ef:eb:5f:e0:de:ed:a3:a9:a1:75:7d:58: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:77:12:5F:B8:51:E2:3D:7B:36:2B:DD:DB:A3:4C:78:A9:A4:8B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccef8d40-8728-3e04-bd8f-42ec263b656a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9f:00:65:ef:b1:d9:a6:58:4f:60:cf:37:ec:24:6a:38:75: 1f:b1:b3:13:f5:bb:fb:58:3c:15:bb:0f:ea:09:d0:57:18:8d: 69:08:9e:94:18:73:22:9f:6b:85:f9:5d:75:f2:78:0c:58:ea: a2:eb:86:9a:eb:e6:d2:80:30:44:30:cf:de:6d:21:90:3b:3d: c8:f7:5d:f7:04:68:83:f4:21:73:9f:63:44:76:ba:25:2b:98: a3:9a:de:e4:fc:c4:f5:d6:75:ad:7f:45:3f:de:22:20:e0:81: b8:c1:8b:50:3b:e1:df:e7:43:99:45:b5:a1:d9:4e:1c:49:ff: d1:96:94:13:53:d7:07:4a:e5:6f:cc:e7:35:54:71:16:4b:1d: 53:e6:ee:55:ea:4b:63:76:d5:65:ba:fb:8f:05:df:f0:0c:2b: 1f:76:90:13:f3:99:0b:95:2f:f3:a7:17:e2:11:03:be:b8:46: 70:ea:a9:fd:2f:40:cb:60:71:a0:90:c3:96:e0:fb:3f:22:92: 16:3c:04:bf:bd:3d:db:96:d7:e1:2c:10:6d:1a:60:ec:63:f0: d6:90:f3:09:e7:b2:08:cf:f3:a1:0f:41:f7:4f:16:0b:ce:18: 18:db:ef:f0:76:78:8a:45:33:b9:f6:c2:7d:cf:09:c6:04:9a: a8:cc:38:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqwIv1uFR4v6fMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjJmOTI3ZTMtYTU1ZC00MTczLWE2N2ItMjc4Y2VhNjBlOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3ZiL4UsRjF/Ai+Djti5NbJ/g6p8d7BXERX9 UYdJi88Ys1dLo0Ay/3a4S+LxIggdrFtJVVUiag+IXtnnG7iTEmXQTnB1/KiWRXXI 7xnLJ8W4TdfRasaiDyxC1tkwQJydHm7K/Gx81LMLyBYU6M1k4FOeePHjXdw1XOCG fpT1YLfj8ZFR4FnlpLtlau0t8LNUxv1dDx0WiNjdQppy7lEKzLu5t+g/bJj3aFRM u3cAjXb9BO14gce5lduMJz4IyZpbQtCvv8/92z0VMeHX07oWnMJmd89AV7MqMwxj 5PQCWov0Ds9drzhzRyidaqTRcj0vi3Xv61/g3u2jqaF1fVhS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR3El+4UeI9ezYr3dujTHippIsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2NlZjhkNDAtODcyOC0z ZTA0LWJkOGYtNDJlYzI2M2I2NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASfAGXvsdmmWE9gzzfsJGo4dR+xsxP1u/tYPBW7D+oJ0FcYjWkInpQY cyKfa4X5XXXyeAxY6qLrhprr5tKAMEQwz95tIZA7Pcj3XfcEaIP0IXOfY0R2uiUr mKOa3uT8xPXWda1/RT/eIiDggbjBi1A74d/nQ5lFtaHZThxJ/9GWlBNT1wdK5W/M 5zVUcRZLHVPm7lXqS2N21WW6+48F3/AMKx92kBPzmQuVL/OnF+IRA764RnDqqf0v QMtgcaCQw5bg+z8ikhY8BL+9PduW1+EsEG0aYOxj8NaQ8wnnsgjP86EPQfdPFgvO GBjb7/B2eIpFM7n2wn3PCcYEmqjMOKA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:57 2025 by rpki-client