$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa File: f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa (raw, json) Hash identifier: 9ndfsW0ENqfmH/aReqYBXPzc1dBItE6vzDNqd4ixqL8= Subject key identifier: D0:99:C9:93:A1:52:A3:C4:CD:12:A1:4F:44:CB:9D:07:19:D4:BF:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95AB0102F1F45AEDFF291A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 74.84.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:01:02:f1:f4:5a:ed:ff:29:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a67fdff8-1a51-4e1c-873c-eb53b9073a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:30:86:0b:8c:c5:31:98:19:09:16:d1:9e: 6c:7c:50:6d:4f:eb:e2:6f:10:ec:28:ed:20:68:d8: 24:aa:2d:f2:2a:59:f5:9a:fe:e6:bb:4b:db:06:c5: 12:d0:c3:8f:28:59:55:23:a1:61:65:d9:b7:e0:6c: 69:42:c4:7e:a4:e2:70:56:71:4f:2d:4a:41:18:40: d2:77:38:7e:9c:7b:8c:e1:13:be:50:c0:0c:6f:e6: ff:57:d7:5a:12:a0:7f:30:3f:03:fc:da:b4:e1:0c: 56:19:4c:2c:c6:12:5a:d2:80:d6:4e:46:44:cd:7e: 51:29:4c:a2:3e:59:fb:02:0a:5b:48:bf:d3:6a:57: 9e:37:52:ab:84:e2:2b:47:98:ee:2b:e8:73:ac:bf: 6e:b0:c8:cb:2a:c1:58:06:54:10:50:41:74:b4:1e: 40:4d:89:77:f9:cb:42:41:1d:ff:16:22:f7:af:49: de:6d:c2:60:d4:5b:ea:d7:e0:aa:3e:d5:dd:5d:09: 69:bd:be:54:e9:98:13:f0:b6:59:08:c5:0c:fc:53: 60:b7:33:f5:9a:53:30:6c:74:a3:44:cc:50:fa:e0: f6:e5:41:a2:b1:7f:68:ff:6e:b8:41:c4:b7:a5:44: 98:02:73:8d:15:80:c4:ab:2b:72:45:3f:50:93:7a: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:C9:93:A1:52:A3:C4:CD:12:A1:4F:44:CB:9D:07:19:D4:BF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:03:1b:a1:eb:37:df:2d:21:57:50:e9:19:dc:da:b7:ad:a6: 63:00:84:ce:05:87:ab:51:d4:a2:be:4a:cf:49:c3:3f:30:1e: 83:78:e6:fe:59:22:b1:97:78:0f:d2:ac:7a:c1:90:76:56:c2: c3:a0:c4:00:22:66:f8:c1:d9:b7:42:eb:b8:91:7a:fb:90:74: 21:0a:0b:7c:16:a8:c0:99:6e:c5:44:3f:9d:9c:1c:05:be:57: 21:c9:51:23:58:f0:cb:92:e6:0d:da:89:d3:96:63:dd:d9:2f: d6:12:1f:14:2d:e4:94:20:ff:c9:5d:5d:ca:15:c1:d0:e3:1e: 7c:e4:84:5e:27:55:9e:fb:fe:9d:b9:35:47:02:2b:10:93:92: f9:d3:e4:c5:6d:80:48:68:07:c0:d8:49:a3:57:c4:9c:7b:cf: 94:dc:c7:99:3c:0a:11:16:6a:64:bd:ea:ce:24:5c:cc:f5:be: ac:6a:e7:6f:96:a8:60:ff:4f:5f:7f:c5:8e:fc:6e:1a:2e:4b: ca:6d:28:dd:90:b5:a6:30:3d:07:0d:26:32:34:bb:cc:c1:43: 76:0d:2a:0d:fa:d5:a5:23:1d:45:8d:87:50:1f:8e:10:76:27: 14:c2:d0:7f:1b:8c:f4:5f:0b:5f:f6:f2:2b:e5:c9:6b:64:33: 6d:ae:57:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqwEC8fRa7f8pGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTY3ZmRmZjgtMWE1MS00ZTFjLTg3M2MtZWI1M2I5MDczYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCowhguMxTGYGQkW0Z5sfFBtT+vibxDsKO0g aNgkqi3yKln1mv7mu0vbBsUS0MOPKFlVI6FhZdm34GxpQsR+pOJwVnFPLUpBGEDS dzh+nHuM4RO+UMAMb+b/V9daEqB/MD8D/Nq04QxWGUwsxhJa0oDWTkZEzX5RKUyi Pln7AgpbSL/TaleeN1KrhOIrR5juK+hzrL9usMjLKsFYBlQQUEF0tB5ATYl3+ctC QR3/FiL3r0nebcJg1Fvq1+CqPtXdXQlpvb5U6ZgT8LZZCMUM/FNgtzP1mlMwbHSj RMxQ+uD25UGisX9o/264QcS3pUSYAnONFYDEqytyRT9Qk3oByQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCZyZOhUqPEzRKhT0TLnQcZ1L+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjk4NDBkNzItNWIzOC0z NDdmLWIzNTUtMGZkMGMxZjM0ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoDG6HrN98tIVdQ6Rnc2retpmMAhM4Fh6tR1KK+Ss9Jwz8wHoN45v5Z IrGXeA/SrHrBkHZWwsOgxAAiZvjB2bdC67iRevuQdCEKC3wWqMCZbsVEP52cHAW+ VyHJUSNY8MuS5g3aidOWY93ZL9YSHxQt5JQg/8ldXcoVwdDjHnzkhF4nVZ77/p25 NUcCKxCTkvnT5MVtgEhoB8DYSaNXxJx7z5Tcx5k8ChEWamS96s4kXMz1vqxq52+W qGD/T19/xY78bhouS8ptKN2QtaYwPQcNJjI0u8zBQ3YNKg361aUjHUWNh1AfjhB2 JxTC0H8bjPRfC1/28ivlyWtkM22uV2A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:26 2025 by rpki-client