$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa File: c9a29383-8363-36e5-827b-b3c653f5ba4b.roa (raw, json) Hash identifier: NnTANme5FA18CAH5hdA+FBXc1ko4Sxj4fpfEVdFCK3o= Subject key identifier: FC:08:85:92:0D:46:5C:7F:93:6A:0E:6D:7F:FB:08:C3:E9:B1:F6:DF Certificate issuer: /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015 Certificate serial: 010D0C9F4328584B970CD8BDD47ABADBC32E0580 Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 74.123.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d8:bd:d4:7a:ba:db:c3:2e:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=394adb5d-f2a8-4e7f-afdc-6bcd1582f730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:d4:de:fe:f1:ac:b9:45:6b:8b:92:ad:5a: c4:09:3e:3d:bf:61:b4:6c:46:40:8a:94:11:c4:ba: f2:a7:12:27:ce:14:95:a2:6a:ac:a5:ff:e7:f3:81: 4d:1d:a3:da:7c:7d:d9:95:e1:d9:ca:e0:7d:4e:83: 3c:51:98:2f:2a:c0:c0:38:af:b3:b4:fa:dc:79:53: fe:d7:27:49:10:f8:d6:f0:db:40:9a:c3:d2:5b:8c: 06:7d:6f:de:df:15:98:e7:af:06:d8:9a:0b:14:64: 82:c4:39:2d:de:84:87:fe:2a:92:d9:35:cf:9e:30: 81:aa:52:ac:8e:7d:be:56:44:c8:df:f2:9e:d0:f8: c6:4f:bf:31:dc:06:ec:0b:9b:a7:18:a2:1a:e6:1d: 32:1e:d8:ff:4e:69:ce:aa:78:25:3a:e0:78:61:4d: 79:63:0f:b0:8f:98:87:be:a5:33:cf:24:d7:4c:07: 17:ab:e0:a8:80:ce:b1:9a:01:92:8f:33:15:f8:90: 07:12:11:52:94:36:4a:3f:87:de:ca:e1:68:ac:bb: 6e:a7:db:4a:87:43:56:22:61:55:38:b9:8c:dc:36: 11:63:91:3c:f1:30:f6:15:30:15:b5:2b:f3:a3:07: 23:bf:ad:b5:1c:bd:ad:86:c1:7b:5d:c8:e9:a2:3d: f9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:08:85:92:0D:46:5C:7F:93:6A:0E:6D:7F:FB:08:C3:E9:B1:F6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/c9a29383-8363-36e5-827b-b3c653f5ba4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl X509v3 Authority Key Identifier: keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer sbgp-ipAddrBlock: critical IPv4: 74.123.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2a:12:19:fe:d2:8d:31:20:16:33:0f:9a:60:d4:20:89:6d: fe:93:73:18:65:d2:fb:2d:8f:1f:74:e7:eb:38:4a:c9:f2:61: d2:cb:19:2a:62:2e:47:be:91:bb:e6:1f:6c:2e:78:8f:21:2d: 9f:75:d0:6d:81:a6:a8:35:bf:81:4c:d0:b9:28:cc:69:94:8a: 83:9f:5a:f2:83:cf:9f:ef:8e:f9:99:bd:bd:8e:39:b7:19:51: 88:59:e5:38:7a:8c:0b:0b:ed:49:b9:c2:3c:a9:e3:be:37:b4: d7:50:37:fc:e5:c8:b5:97:da:f0:40:f2:70:66:79:05:ea:dd: ff:e5:6e:8c:9c:ee:66:09:b2:a3:ff:d1:37:2e:3e:09:b5:70: da:48:f3:75:bc:ed:33:2d:5d:bb:9a:1f:d9:15:cb:90:1e:6b: c8:8f:5f:a5:54:d9:10:43:19:5f:56:df:5e:e1:64:a5:1f:86: 0e:0c:63:c3:fe:53:6e:e0:38:ca:b5:45:77:2b:84:08:3e:24: 22:cb:d3:8a:8e:5f:55:15:a2:06:49:d6:cd:78:c2:0c:cd:53: 8b:f9:44:0d:bf:3a:e3:52:9e:70:9b:ed:09:2d:2c:16:33:74: f0:5d:2f:a1:d6:76:06:87:3a:fb:e4:22:cd:a6:87:33:22:18: 68:24:a5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNi91Hq628MuBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRkZmIyYzItNmIwZS00ZjJjLTk1NmQtNDk3ZGYwODgx MDE1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Mzk0YWRiNWQtZjJhOC00ZTdmLWFmZGMtNmJjZDE1ODJmNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphHU3v7xrLlFa4uSrVrECT49v2G0bEZAipQR xLrypxInzhSVomqspf/n84FNHaPafH3ZleHZyuB9ToM8UZgvKsDAOK+ztPrceVP+ 1ydJEPjW8NtAmsPSW4wGfW/e3xWY568G2JoLFGSCxDkt3oSH/iqS2TXPnjCBqlKs jn2+VkTI3/Ke0PjGT78x3AbsC5unGKIa5h0yHtj/TmnOqnglOuB4YU15Yw+wj5iH vqUzzyTXTAcXq+CogM6xmgGSjzMV+JAHEhFSlDZKP4feyuForLtup9tKh0NWImFV OLmM3DYRY5E88TD2FTAVtSvzowcjv621HL2thsF7Xcjpoj35AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwIhZINRlx/k2oObX/7CMPpsfbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NGRm YjJjMi02YjBlLTRmMmMtOTU2ZC00OTdkZjA4ODEwMTUvYzlhMjkzODMtODM2My0z NmU1LTgyN2ItYjNjNjUzZjViYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDRkZmIyYzItNmIwZS00ZjJjLTk1 NmQtNDk3ZGYwODgxMDE1LzQ0ZGZiMmMyLTZiMGUtNGYyYy05NTZkLTQ5N2RmMDg4 MTAxNS5jcmwwHwYDVR0jBBgwFoAUrKjCp3aNxrzYtX8M8Pq6iUOo2DUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NGRmYjJjMi02YjBlLTRmMmMtOTU2ZC00OTdk ZjA4ODEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnuRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUqEhn+0o0xIBYzD5pg1CCJbf6Tcxhl0vstjx905+s4SsnyYdLLGSpi Lke+kbvmH2wueI8hLZ910G2Bpqg1v4FM0LkozGmUioOfWvKDz5/vjvmZvb2OObcZ UYhZ5Th6jAsL7Um5wjyp4743tNdQN/zlyLWX2vBA8nBmeQXq3f/lboyc7mYJsqP/ 0TcuPgm1cNpI83W87TMtXbuaH9kVy5Aea8iPX6VU2RBDGV9W317hZKUfhg4MY8P+ U27gOMq1RXcrhAg+JCLL04qOX1UVogZJ1s14wgzNU4v5RA2/OuNSnnCb7QktLBYz dPBdL6HWdgaHOvvkIs2mhzMiGGgkpe8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:06 2025 by rpki-client