$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa File: db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa (raw, json) Hash identifier: HYonuaxB+q6vOSVzkiJYTFdHBMwBikOPxs1faLZKNq0= Subject key identifier: 30:E6:29:6F:19:4B:58:2C:1D:BB:B2:84:B5:F9:68:37:00:76:C4:62 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584BA667AA3F9EE0B589F831FB00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 834 IP address blocks: 74.49.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:aa:3f:9e:e0:b5:89:f8:31:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=bc44f0b5-a099-41ff-80e3-d1c46becffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6e:f1:f4:1f:65:9d:66:a8:da:46:51:74:67: b7:c8:0e:e4:ef:c7:a2:77:f7:90:b6:c5:10:2f:48: 83:9e:3d:9c:1e:82:23:8a:15:54:0e:fb:31:a5:b6: eb:f3:de:7a:2f:32:aa:3f:fa:de:5d:cd:72:ae:1c: 14:0a:9e:1c:a9:8d:32:7a:e1:df:f5:63:c6:15:54: ea:94:b4:e9:1f:11:15:6e:d4:c7:44:c2:7b:12:82: 44:b2:f3:20:be:d2:80:7a:c7:af:19:ce:6a:7e:61: 9e:f1:3b:a0:19:4c:d7:f7:23:09:b5:20:8e:38:6f: b1:32:f7:b2:59:d2:45:2f:6b:7c:9f:30:e9:76:8c: 5f:98:10:2f:a5:eb:35:3d:62:f6:99:7b:47:ff:9d: 53:c9:59:ba:cf:a4:df:e2:b4:00:21:08:3b:cd:72: 58:22:94:a5:2c:dc:fa:9f:d9:8f:66:72:e4:20:bf: c1:a0:21:b1:84:10:c3:e0:4c:6f:cc:53:aa:0b:5e: 0f:37:6a:e9:e0:ea:92:54:43:be:c8:52:ee:df:e3: 6b:70:2a:4d:f9:c7:7b:b4:9d:f7:63:fc:31:9c:c5: de:b3:9d:d0:c5:19:a7:58:d4:bf:9c:43:98:81:3f: c7:c1:4f:58:c4:33:b0:3b:43:c8:e6:40:b8:0b:6e: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:29:6F:19:4B:58:2C:1D:BB:B2:84:B5:F9:68:37:00:76:C4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db67fa9c-74b8-3197-80f1-0a9221aa64c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a9:58:20:39:c1:0d:53:a1:48:1f:a0:75:c0:01:87:24:0a: 2c:8d:ea:e0:32:f4:f4:16:37:c7:78:fb:7b:0c:b4:05:2f:ea: ff:6e:da:90:89:fb:ca:b3:7c:55:5d:a6:cd:e4:d2:63:93:1b: 8e:e6:17:34:7c:a3:17:ad:90:d7:41:2d:25:e2:fd:df:37:8f: ec:96:a7:93:bf:8d:65:89:20:c0:14:bb:37:de:0d:be:47:f1: 40:85:51:ff:d0:19:23:7f:20:21:5f:e1:3c:ac:72:08:40:28: 97:03:a8:17:98:cf:32:fc:f6:36:6a:29:ee:ad:d8:ce:05:b2: bc:22:c2:1d:ec:64:95:53:fc:8e:64:7b:18:e0:25:bf:ab:56: dd:5f:b9:d8:d1:bd:d0:65:0d:99:6d:e4:19:ba:4a:83:ba:4f: ce:4e:ad:eb:c8:3e:14:93:c7:9b:2d:9e:91:c2:0f:e8:e6:26: 60:8e:99:00:22:5c:4c:12:b1:df:c7:02:6e:c7:5a:ef:84:96: 7f:ee:11:5d:7b:a2:6b:cc:94:12:3d:de:49:90:5f:e1:1c:a1: 01:90:aa:51:31:1f:a4:0a:cf:1c:b8:d5:93:7e:c6:dc:62:cf: 96:2d:20:1e:64:40:53:d0:5e:0a:7c:d1:b5:9e:8d:80:e2:41: 92:67:1d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6o/nuC1ifgx+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YmM0NGYwYjUtYTA5OS00MWZmLTgwZTMtZDFjNDZiZWNmZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m7x9B9lnWao2kZRdGe3yA7k78eid/eQtsUQ L0iDnj2cHoIjihVUDvsxpbbr8956LzKqP/reXc1yrhwUCp4cqY0yeuHf9WPGFVTq lLTpHxEVbtTHRMJ7EoJEsvMgvtKAesevGc5qfmGe8TugGUzX9yMJtSCOOG+xMvey WdJFL2t8nzDpdoxfmBAvpes1PWL2mXtH/51TyVm6z6Tf4rQAIQg7zXJYIpSlLNz6 n9mPZnLkIL/BoCGxhBDD4ExvzFOqC14PN2rp4OqSVEO+yFLu3+NrcCpN+cd7tJ33 Y/wxnMXes53QxRmnWNS/nEOYgT/HwU9YxDOwO0PI5kC4C25sEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDmKW8ZS1gsHbuyhLX5aDcAdsRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGI2N2ZhOWMtNzRiOC0z MTk3LTgwZjEtMGE5MjIxYWE2NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJupWCA5wQ1ToUgfoHXAAYckCiyN6uAy9PQWN8d4+3sMtAUv6v9u2pCJ +8qzfFVdps3k0mOTG47mFzR8oxetkNdBLSXi/d83j+yWp5O/jWWJIMAUuzfeDb5H 8UCFUf/QGSN/ICFf4TyscghAKJcDqBeYzzL89jZqKe6t2M4Fsrwiwh3sZJVT/I5k exjgJb+rVt1fudjRvdBlDZlt5Bm6SoO6T85OrevIPhSTx5stnpHCD+jmJmCOmQAi XEwSsd/HAm7HWu+Eln/uEV17omvMlBI93kmQX+EcoQGQqlExH6QKzxy41ZN+xtxi z5YtIB5kQFPQXgp80bWejYDiQZJnHWM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:43 2025 by rpki-client