$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa File: cb74f0af-7659-30b1-9411-47e725d27122.roa (raw, json) Hash identifier: nts4+2fUl6+ukNunr1kSuvb9y/v6aQe7nVlPxQlCNmA= Subject key identifier: 13:E3:5D:B2:B1:6E:B2:90:9D:2C:BF:FD:96:9F:A0:3A:09:1E:DB:73 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584BBFA5A2852668BAD027B67200 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 174 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a2:85:26:68:ba:d0:27:b6:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=d8d5cdb9-a156-4178-88ab-b3e137135f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:eb:73:a4:8c:b5:4c:d7:fe:d9:3a:0f:fe: b6:1e:41:f7:9b:d8:38:fb:e6:35:65:e9:9d:3f:8a: 03:2c:ae:4e:bf:a7:8b:f1:a2:44:45:bc:46:16:05: 7e:79:62:d0:e5:25:28:a1:97:f3:8f:eb:cd:22:9e: ef:de:33:65:57:52:49:70:d6:00:1b:04:dc:fc:14: 1e:a8:3d:bb:e2:01:b1:16:ce:38:21:44:77:12:0a: 56:ff:17:8a:ca:c2:43:4f:20:2b:67:d8:52:a8:56: b0:df:65:d3:5b:4f:d3:21:01:fb:d3:e9:1d:ab:a9: 09:5a:3a:e6:2d:4f:1c:91:53:06:ab:7f:89:12:7e: 22:65:2d:72:0e:5c:d7:82:f6:50:fb:e9:5a:d5:99: f5:8e:33:17:0d:d0:28:58:ec:33:24:a3:a1:24:81: f8:5c:38:b8:06:43:93:36:80:b5:e6:ab:05:fd:b3: aa:66:44:fb:89:9d:80:bd:6c:7d:3e:79:e7:8b:51: fd:f6:91:e0:20:9d:10:4b:39:14:04:be:3d:f2:49: e8:85:6f:0c:8d:e7:b6:84:b1:8a:3f:17:b2:0c:ae: fc:81:a3:10:7a:89:4c:98:45:09:ad:6c:ae:69:aa: 56:b1:d8:6d:c7:ee:a1:84:c5:1c:25:c0:0e:3f:d0: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E3:5D:B2:B1:6E:B2:90:9D:2C:BF:FD:96:9F:A0:3A:09:1E:DB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c9:f7:c0:3e:47:8c:11:13:1f:4e:f7:79:0b:3b:0d:5c:79: fe:44:89:27:e6:d9:01:c6:51:d1:c9:9a:47:23:d8:f4:9a:e3: 6d:e6:fd:77:5a:c1:f1:27:46:88:44:7b:2c:6b:34:d0:63:bd: 9d:7c:60:2d:ba:be:ff:0a:51:55:62:2a:9c:ed:fe:0d:61:f7: 08:68:81:36:27:70:05:d9:59:e5:ea:9a:40:c2:20:ee:c5:d9: 1e:55:39:e5:e3:46:96:b2:6a:e2:2b:89:ad:95:77:c4:7f:2e: 01:a8:e3:76:13:d9:18:09:de:e9:58:26:2b:ef:8b:69:25:f2: 9e:a9:70:c6:21:07:9a:c3:10:75:07:07:ec:2f:8f:0a:fe:35: a1:79:60:79:6f:7e:7d:fe:5c:06:83:64:98:87:fe:25:d4:24: fe:ed:27:05:cb:61:0a:87:b2:88:b6:5d:52:98:e7:36:48:43: 64:31:11:c9:0c:b7:6c:11:00:05:b7:9b:a0:f4:9d:24:e8:4a: 97:ff:59:b2:08:d3:c3:cf:2e:fd:9c:a3:e4:f5:be:27:36:70: 60:80:0d:86:3e:24:76:c0:c1:9c:a5:34:ba:9a:0b:2c:ee:57: df:fd:70:87:42:65:41:c1:44:da:35:3f:b6:6d:7b:3b:22:8e: d9:f4:54:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paKFJmi60Ce2cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZDhkNWNkYjktYTE1Ni00MTc4LTg4YWItYjNlMTM3MTM1ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE3rc6SMtUzX/tk6D/62HkH3m9g4++Y1Zemd P4oDLK5Ov6eL8aJERbxGFgV+eWLQ5SUooZfzj+vNIp7v3jNlV1JJcNYAGwTc/BQe qD274gGxFs44IUR3EgpW/xeKysJDTyArZ9hSqFaw32XTW0/TIQH70+kdq6kJWjrm LU8ckVMGq3+JEn4iZS1yDlzXgvZQ++la1Zn1jjMXDdAoWOwzJKOhJIH4XDi4BkOT NoC15qsF/bOqZkT7iZ2AvWx9Pnnni1H99pHgIJ0QSzkUBL498knohW8Mjee2hLGK PxeyDK78gaMQeolMmEUJrWyuaapWsdhtx+6hhMUcJcAOP9DxDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPjXbKxbrKQnSy//ZafoDoJHttzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvY2I3NGYwYWYtNzY1OS0z MGIxLTk0MTEtNDdlNzI1ZDI3MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfJ98A+R4wREx9O93kLOw1cef5EiSfm2QHGUdHJmkcj2PSa423m/Xda wfEnRohEeyxrNNBjvZ18YC26vv8KUVViKpzt/g1h9whogTYncAXZWeXqmkDCIO7F 2R5VOeXjRpayauIria2Vd8R/LgGo43YT2RgJ3ulYJivvi2kl8p6pcMYhB5rDEHUH B+wvjwr+NaF5YHlvfn3+XAaDZJiH/iXUJP7tJwXLYQqHsoi2XVKY5zZIQ2QxEckM t2wRAAW3m6D0nSToSpf/WbII08PPLv2co+T1vic2cGCADYY+JHbAwZylNLqaCyzu V9/9cIdCZUHBRNo1P7Ztezsijtn0VNI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:33:38 2025 by rpki-client