$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa File: 43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa (raw, json) Hash identifier: tP3E4oGgGOcDv9/wP8tMbRGLtGruzT0jzsaajg2ooDI= Subject key identifier: AC:A1:ED:DB:02:B7:0D:6F:EF:DA:8D:49:CC:CD:D5:5E:79:96:A4:61 Certificate issuer: /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015 Certificate serial: 010D0C9F4328584B970CD8CF255E11D7408971C0 Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 74.123.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d8:cf:25:5e:11:d7:40:89:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=8e75a594-3fed-49fe-9404-12037c9108e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:2d:29:e8:4d:8d:4a:ac:e9:e5:5b:89:52: 3d:fd:c3:6b:2d:5f:ad:15:eb:42:df:e9:a8:1d:4f: a7:a6:ad:08:c9:9c:78:0a:34:5f:c7:92:ef:1d:5e: 53:4b:d5:52:ee:a1:e2:a4:b9:d3:99:53:03:da:c2: d0:42:fa:31:4c:71:99:64:76:81:3c:30:d2:6e:16: e7:a9:d1:7b:c0:0f:25:c1:08:d9:56:68:82:ce:00: 83:d7:da:cf:f7:de:d4:8e:6f:e2:f1:8d:fb:16:99: a2:5e:a0:d8:b7:dd:39:8d:83:68:d9:61:50:52:18: d7:3b:2c:30:9a:d9:53:07:66:04:9a:45:f7:9d:a1: d0:db:4a:08:62:f7:cd:4f:c0:02:ca:9f:82:0c:c7: 5a:79:3f:3d:d8:18:54:33:fd:f5:46:66:e5:08:c3: 1f:92:b2:f3:85:d1:d1:f6:9e:ed:56:36:bb:78:a0: f0:aa:44:65:c0:39:94:0a:a6:b4:16:cd:92:6b:f1: 0a:0f:11:b4:af:c6:10:1f:4b:cb:0d:8d:3b:98:50: 33:a8:db:e7:4c:56:12:5b:e1:48:a4:6d:7f:83:4a: a6:f8:86:95:a0:94:53:73:55:ef:98:e0:90:24:d1: e9:62:78:33:a9:e3:02:ce:59:9c:cc:87:6b:7f:7f: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A1:ED:DB:02:B7:0D:6F:EF:DA:8D:49:CC:CD:D5:5E:79:96:A4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl X509v3 Authority Key Identifier: keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer sbgp-ipAddrBlock: critical IPv4: 74.123.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:90:b6:55:cc:89:0c:2d:f7:32:ba:70:0a:fe:b7:5b:ea:3b: 6c:b8:88:66:60:e6:ed:0b:49:cf:d2:0a:28:ee:2e:c8:b6:85: 16:f0:1b:6e:5e:cc:84:f8:eb:cd:f9:91:97:7f:8e:89:5a:cb: ec:0c:4b:f3:3b:5e:d0:8d:4c:32:17:7e:75:cf:97:c2:35:dc: 9a:07:31:05:30:cf:ac:9c:34:84:ba:1f:a2:ac:2f:90:0d:bc: 0e:bd:93:e0:af:da:13:a2:f5:15:c1:e9:61:31:a5:5d:5c:a4: 15:ed:0c:a1:59:a0:8e:cc:66:02:de:65:4f:b2:ff:9d:16:98: 10:9e:dc:e0:b7:9a:a7:db:e5:ee:1a:5b:57:28:78:ff:21:f3: f6:31:5b:31:92:92:41:f1:a0:48:d9:62:57:22:88:7f:11:6b: 03:eb:8e:f9:ed:09:f5:8c:b2:a9:01:68:fc:4e:4f:fc:ab:a1: 81:c8:da:d8:86:18:e5:e1:7f:34:50:fa:ec:ab:d3:94:6d:d6: 59:12:a8:04:89:22:5d:06:68:42:4c:84:92:b1:e9:f9:1f:f5: 4a:74:ef:61:8c:8d:55:d9:11:d9:8c:ed:ec:f8:2f:fd:51:0b: 77:53:04:0a:4e:7d:73:26:54:e0:1f:7a:04:37:b4:2b:62:f2: 7a:bb:ba:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNjPJV4R10CJccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRkZmIyYzItNmIwZS00ZjJjLTk1NmQtNDk3ZGYwODgx MDE1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OGU3NWE1OTQtM2ZlZC00OWZlLTk0MDQtMTIwMzdjOTEwOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvItKehNjUqs6eVbiVI9/cNrLV+tFetC3+mo HU+npq0IyZx4CjRfx5LvHV5TS9VS7qHipLnTmVMD2sLQQvoxTHGZZHaBPDDSbhbn qdF7wA8lwQjZVmiCzgCD19rP997Ujm/i8Y37FpmiXqDYt905jYNo2WFQUhjXOyww mtlTB2YEmkX3naHQ20oIYvfNT8ACyp+CDMdaeT892BhUM/31RmblCMMfkrLzhdHR 9p7tVja7eKDwqkRlwDmUCqa0Fs2Sa/EKDxG0r8YQH0vLDY07mFAzqNvnTFYSW+FI pG1/g0qm+IaVoJRTc1XvmOCQJNHpYngzqeMCzlmczIdrf3++bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyh7dsCtw1v79qNSczN1V55lqRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NGRm YjJjMi02YjBlLTRmMmMtOTU2ZC00OTdkZjA4ODEwMTUvNDNlN2I1M2YtZDVhOS0z ZDI5LWFiNzMtYWQwZDZhMzc3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDRkZmIyYzItNmIwZS00ZjJjLTk1 NmQtNDk3ZGYwODgxMDE1LzQ0ZGZiMmMyLTZiMGUtNGYyYy05NTZkLTQ5N2RmMDg4 MTAxNS5jcmwwHwYDVR0jBBgwFoAUrKjCp3aNxrzYtX8M8Pq6iUOo2DUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NGRmYjJjMi02YjBlLTRmMmMtOTU2ZC00OTdk ZjA4ODEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnuRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWQtlXMiQwt9zK6cAr+t1vqO2y4iGZg5u0LSc/SCijuLsi2hRbwG25e zIT46835kZd/jolay+wMS/M7XtCNTDIXfnXPl8I13JoHMQUwz6ycNIS6H6KsL5AN vA69k+Cv2hOi9RXB6WExpV1cpBXtDKFZoI7MZgLeZU+y/50WmBCe3OC3mqfb5e4a W1coeP8h8/YxWzGSkkHxoEjZYlciiH8RawPrjvntCfWMsqkBaPxOT/yroYHI2tiG GOXhfzRQ+uyr05Rt1lkSqASJIl0GaEJMhJKx6fkf9Up072GMjVXZEdmM7ez4L/1R C3dTBApOfXMmVOAfegQ3tCti8nq7uk4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:18 2025 by rpki-client