$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa File: fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa (raw, json) Hash identifier: sEcma5wfI1ykTyh3VqPRmtcAFCq6u4JC5UTAFBEiD74= Subject key identifier: 60:E8:41:41:03:75:6D:48:9F:5F:F7:32:69:47:99:9B:4A:D2:86:5F Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Certificate serial: 010D0C9F4328584BA0D25062CB9E27D5DF90A180 Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 10753 IP address blocks: 74.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:62:cb:9e:27:d5:df:90:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=63b36e1c-5236-4d1b-a12d-50b88dfe67e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:a2:5f:79:16:75:32:f9:3e:83:fb:60:87: 50:dc:ff:7a:1e:c2:48:fe:d9:42:2f:d0:8a:18:42: 5f:0a:e9:fe:f6:a3:63:83:20:4f:3f:69:c8:39:65: 96:8d:3e:22:c5:79:2d:09:45:c8:43:67:d3:13:65: c2:0a:ba:7b:b1:d9:7e:af:2d:a8:c5:fc:7b:23:23: ed:5b:1d:c4:22:03:e5:19:47:92:03:73:c2:c7:6e: 92:a5:51:bb:4a:f8:94:9b:a4:aa:54:86:46:a1:95: af:48:72:69:e5:c9:4a:3e:f0:ec:f6:db:3a:d7:f4: f8:e3:ba:00:ae:f5:a3:a5:77:62:70:3f:47:36:34: 4d:84:82:e6:47:c1:6e:a4:47:82:c7:33:fc:a7:6c: 93:e2:91:b7:8c:84:3f:e8:6a:1e:7e:88:c6:64:69: df:36:9b:0a:c8:f2:2b:a9:96:76:6b:16:ec:c4:b2: 3e:a7:71:71:23:53:7e:6d:69:c8:67:d1:49:0d:29: e7:77:c3:cf:cf:aa:91:0a:50:44:d5:cb:f0:ed:b5: 89:b8:a1:24:f5:09:42:53:d5:4a:34:59:20:f4:d1: eb:6d:c5:c0:59:90:84:1c:64:45:70:d6:2b:38:db: 0c:69:91:5b:00:ce:1b:3f:c4:5f:ab:66:6c:51:6c: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:41:41:03:75:6D:48:9F:5F:F7:32:69:47:99:9B:4A:D2:86:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl X509v3 Authority Key Identifier: keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer sbgp-ipAddrBlock: critical IPv4: 74.51.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a2:d7:6d:9b:80:f6:aa:64:46:71:7a:f8:16:47:a8:6f:0a: c2:36:ce:42:f3:76:50:f5:8a:04:a6:b3:73:11:1e:2c:e4:55: 52:84:79:44:b4:b2:a5:02:31:4a:8e:bc:31:93:9d:85:81:b7: cb:f8:37:1c:63:3d:d2:21:db:c4:b7:d0:4a:55:37:b7:cf:d0: f1:5c:d2:b3:f2:5c:87:da:18:c7:64:56:e6:bf:fd:d2:60:a7: 49:4b:96:55:64:af:2a:03:7d:68:cc:4b:c9:a2:b7:61:64:d1: fd:1a:98:6c:24:88:a0:2e:e0:02:2c:f8:b2:97:09:19:0a:57: f7:87:1e:5a:99:fc:fa:86:be:3f:8b:73:7d:e8:1a:9a:cc:48: cd:07:45:58:7c:84:1b:ea:a7:dc:f9:78:50:8b:75:c0:9d:c6: 9f:1c:12:9b:c9:5c:05:c5:2f:27:c3:e3:80:4a:da:fd:3c:e5: aa:5a:bf:70:2f:72:d0:f1:ac:19:0c:69:8a:c5:e3:d1:11:e6: 44:99:62:08:44:61:31:75:82:27:a6:cc:8b:14:89:f8:ab:a9: 6e:4d:e4:4a:5b:29:19:1a:63:88:aa:e6:7b:5b:e9:46:b8:d8: e8:5d:b0:0c:43:ff:5d:8e:fc:38:e5:3d:47:29:3a:4c:79:28: 45:46:84:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lBiy54n1d+QoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1N2E0ZTQtNDc3MS00Yjg3LWJlNmEtZTNiMjdmNWFj NWRkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjNiMzZlMWMtNTIzNi00ZDFiLWExMmQtNTBiODhkZmU2N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mqiX3kWdTL5PoP7YIdQ3P96HsJI/tlCL9CK GEJfCun+9qNjgyBPP2nIOWWWjT4ixXktCUXIQ2fTE2XCCrp7sdl+ry2oxfx7IyPt Wx3EIgPlGUeSA3PCx26SpVG7SviUm6SqVIZGoZWvSHJp5clKPvDs9ts61/T447oA rvWjpXdicD9HNjRNhILmR8FupEeCxzP8p2yT4pG3jIQ/6GoefojGZGnfNpsKyPIr qZZ2axbsxLI+p3FxI1N+bWnIZ9FJDSnnd8PPz6qRClBE1cvw7bWJuKEk9QlCU9VK NFkg9NHrbcXAWZCEHGRFcNYrONsMaZFbAM4bP8Rfq2ZsUWyfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDoQUEDdW1In1/3MmlHmZtK0oZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3 YTRlNC00NzcxLTRiODctYmU2YS1lM2IyN2Y1YWM1ZGQvZmIwOWY4YWQtMzhmNC0z ZjVmLWIyOTQtOTA0MGIxMmVjOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM1N2E0ZTQtNDc3MS00Yjg3LWJl NmEtZTNiMjdmNWFjNWRkL2FjNTdhNGU0LTQ3NzEtNGI4Ny1iZTZhLWUzYjI3ZjVh YzVkZC5jcmwwHwYDVR0jBBgwFoAU1dmHxFHPdgJ2FWwY2sXGD83J/ckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3YTRlNC00NzcxLTRiODctYmU2YS1lM2Iy N2Y1YWM1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWi122bgPaqZEZxevgWR6hvCsI2zkLzdlD1igSms3MRHizkVVKEeUS0 sqUCMUqOvDGTnYWBt8v4NxxjPdIh28S30EpVN7fP0PFc0rPyXIfaGMdkVua//dJg p0lLllVkryoDfWjMS8mit2Fk0f0amGwkiKAu4AIs+LKXCRkKV/eHHlqZ/PqGvj+L c33oGprMSM0HRVh8hBvqp9z5eFCLdcCdxp8cEpvJXAXFLyfD44BK2v085apav3Av ctDxrBkMaYrF49ER5kSZYghEYTF1giemzIsUifirqW5N5EpbKRkaY4iq5ntb6Ua4 2OhdsAxD/12O/DjlPUcpOkx5KEVGhP8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:18 2025 by rpki-client