$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa File: cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa (raw, json) Hash identifier: jBsadLRglXfin/uMcPElMzCIwUoWGZPXxGngicRyWRc= Subject key identifier: BC:CD:1F:32:4E:2D:87:31:BB:35:62:D4:83:D8:59:C8:8C:F3:0F:D8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A7850F7063C63AC4E9572C Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 74.84.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:85:0f:70:63:c6:3a:c4:e9:57:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fe91eb3a-9ba5-4f5e-bae3-f7cebc499804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:d4:f9:ac:af:dc:b2:d6:dd:ba:38:27:73: ab:75:88:27:b4:b1:75:b2:4e:cd:2e:d1:29:ca:fd: 19:65:c2:52:bd:bc:84:0d:29:c6:14:14:b0:92:35: 10:30:c9:c7:e5:c7:36:8d:5a:bd:99:20:51:fb:d9: 28:f6:30:8e:f1:6b:03:1c:35:1f:c2:91:09:02:6e: 1a:18:4a:b5:59:31:d3:05:34:e5:42:79:e8:81:94: 74:75:54:ae:0c:81:96:f2:51:e7:5c:1c:04:d4:bd: 31:0f:f4:95:c4:8e:26:8f:b3:80:73:70:f6:f6:93: 27:13:5d:ba:77:b1:28:03:ef:dd:10:b7:84:ac:5e: 2c:d9:22:76:03:0d:d9:64:e6:c8:a0:7c:fc:b6:74: 35:05:b0:90:ba:b0:eb:1f:38:b1:b5:87:96:e4:07: 25:ec:fd:05:62:4d:aa:38:0a:ca:40:e8:ff:5d:18: 40:45:98:a6:8f:35:22:c4:fa:34:9a:07:92:77:a5: 60:39:cc:9b:89:2c:00:d7:8d:84:9b:5f:86:d3:98: 7d:e5:42:1a:57:96:61:2f:1f:57:7a:2e:5a:02:1e: 2d:b5:ff:5c:49:11:42:97:b2:c6:a9:b7:0f:7a:4a: 19:c1:fe:e3:77:64:08:75:c3:7a:39:e5:e7:1a:1f: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:1F:32:4E:2D:87:31:BB:35:62:D4:83:D8:59:C8:8C:F3:0F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:72:74:84:48:17:ae:9e:27:1a:1d:b1:47:65:74:f1:d0:38: 56:d7:71:53:a5:f2:b2:c2:af:43:ec:ad:30:2d:69:18:1f:01: 95:b8:b2:95:2f:69:97:17:a0:df:2e:c0:90:36:5b:c0:4e:7b: 3b:aa:f4:f0:34:5f:e6:b6:38:77:af:5a:b3:27:59:e8:b9:26: 43:ea:c3:80:ad:0d:4f:e2:00:c9:c4:78:7e:8e:b9:04:5e:6e: b2:6b:50:6e:03:7e:a6:29:70:82:bc:51:6a:58:4d:e8:c9:d8: 87:45:5c:02:ca:13:e1:e0:f4:82:6b:1a:54:6c:6c:88:ea:93: 52:91:fc:b1:52:b8:c9:2c:ba:8c:b6:b1:53:d9:4a:ef:20:e6: db:c2:0e:96:16:81:ec:ec:49:16:da:eb:f6:e8:31:12:6b:ba: c4:8f:ef:fb:3a:68:b5:c9:32:af:ce:70:b6:9b:aa:ec:8a:3b: 60:06:b9:16:b0:e1:f0:75:f4:9b:4b:ae:f5:fb:b5:d8:34:48: ab:c0:d5:3c:84:6e:fb:4f:9f:24:24:09:1a:95:4e:5c:02:1f: be:73:d3:92:51:a1:da:7c:78:bd:8f:ac:a3:19:d2:c8:98:2b: ac:f4:cd:ec:ed:8d:c0:74:d0:33:1e:80:0d:ce:11:a0:6d:17: 72:97:ca:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4UPcGPGOsTpVywwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmU5MWViM2EtOWJhNS00ZjVlLWJhZTMtZjdjZWJjNDk5ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7PU+ayv3LLW3bo4J3OrdYgntLF1sk7NLtEp yv0ZZcJSvbyEDSnGFBSwkjUQMMnH5cc2jVq9mSBR+9ko9jCO8WsDHDUfwpEJAm4a GEq1WTHTBTTlQnnogZR0dVSuDIGW8lHnXBwE1L0xD/SVxI4mj7OAc3D29pMnE126 d7EoA+/dELeErF4s2SJ2Aw3ZZObIoHz8tnQ1BbCQurDrHzixtYeW5Acl7P0FYk2q OArKQOj/XRhARZimjzUixPo0mgeSd6VgOcybiSwA142Em1+G05h95UIaV5ZhLx9X ei5aAh4ttf9cSRFCl7LGqbcPekoZwf7jd2QIdcN6OeXnGh8WmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzNHzJOLYcxuzVi1IPYWciM8w/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2RlZjIxOTUtYWE2My0z MGM2LWJlMTktODFmZDRlNjNiMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxydIRIF66eJxodsUdldPHQOFbXcVOl8rLCr0PsrTAtaRgfAZW4spUv aZcXoN8uwJA2W8BOezuq9PA0X+a2OHevWrMnWei5JkPqw4CtDU/iAMnEeH6OuQRe brJrUG4DfqYpcIK8UWpYTejJ2IdFXALKE+Hg9IJrGlRsbIjqk1KR/LFSuMksuoy2 sVPZSu8g5tvCDpYWgezsSRba6/boMRJrusSP7/s6aLXJMq/OcLabquyKO2AGuRaw 4fB19JtLrvX7tdg0SKvA1TyEbvtPnyQkCRqVTlwCH75z05JRodp8eL2PrKMZ0siY K6z0zeztjcB00DMegA3OEaBtF3KXyl0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:24:56 2025 by rpki-client