$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa File: d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa (raw, json) Hash identifier: AgKrKWPLTvFfcqWcSg+C3k8UQxEXu4sxvYu/c2qdTuA= Subject key identifier: 45:F4:6C:6B:C9:D4:53:F4:2C:6F:28:B8:19:6F:E1:6E:E9:19:58:C0 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78C3B8C431853BE765460 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 74.112.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8c:3b:8c:43:18:53:be:76:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=773d873a-1a52-42ab-bb91-7db432ff06e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:59:b8:b2:6c:59:7e:1e:86:1e:0a:2e:3c: 2f:cf:1a:88:6d:54:50:a2:97:aa:0a:47:fa:86:0b: 34:11:37:1c:24:03:99:ff:28:d4:7d:a4:c8:f6:2b: 9b:7f:ce:c6:c2:0f:4c:ab:4b:e0:fa:72:91:2e:bb: 5b:58:e1:d0:1a:0c:3f:11:ae:f3:86:7f:0c:3c:6f: 7c:28:4f:73:b8:ca:c5:2b:b5:66:92:b1:ee:de:05: 60:00:41:2b:dd:7d:06:6c:65:b5:ff:e3:aa:2d:4e: 63:17:c4:dc:3f:b5:12:5f:de:bf:7d:7a:27:41:48: 33:78:2a:f9:4b:9f:9a:0f:47:1f:b6:a7:bb:b8:86: e2:af:09:3d:b2:83:2b:d8:9b:3a:d4:c8:49:22:d5: 85:42:5d:cc:d3:0e:61:72:88:9c:33:fc:d9:47:2c: 6b:14:2e:3c:3d:89:f4:99:4d:25:3b:13:71:fc:6e: ca:5b:d1:93:86:82:7c:42:8b:15:da:08:a1:33:e4: 39:ee:02:45:ff:a2:84:f4:ac:97:e0:52:81:31:b8: f9:cf:ef:78:21:6c:06:b0:a8:02:84:ab:ee:d7:e7: 65:50:5c:c4:9c:a3:50:e6:40:09:33:10:e2:02:27: 77:4d:6f:04:d8:54:05:d3:1d:28:c1:ca:1e:38:d0: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F4:6C:6B:C9:D4:53:F4:2C:6F:28:B8:19:6F:E1:6E:E9:19:58:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 74.112.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:91:23:cd:59:98:c0:6f:32:fb:fe:a4:20:50:ab:c3:5c:80: d6:07:7f:7b:ce:ad:fc:ba:53:f8:ef:7f:f8:c5:81:06:f5:52: f8:10:d1:cd:a4:47:c1:ba:1e:61:6e:a7:85:98:6b:47:c9:85: 34:2e:32:a7:0b:ba:c3:bb:89:01:03:53:77:7e:63:ae:e3:99: af:5f:85:10:9f:89:b4:48:c3:3d:1b:94:68:0d:dc:d6:d6:93: d2:92:f2:0e:ed:89:c8:54:1c:c3:9b:5c:93:cd:3c:41:a2:60: bc:ff:48:46:b3:cf:21:49:c2:16:01:fe:75:2c:a6:bf:da:53: bb:64:cf:d1:68:47:a1:c3:ac:bf:e9:96:8c:20:db:16:d5:a1: 7b:7d:f6:9e:b4:ef:82:55:e1:16:b8:ed:f2:52:f6:01:07:c8: 59:ec:a4:6e:13:ca:b1:50:4d:12:8e:32:5c:bc:53:6c:b5:33: 1e:b0:e5:8f:93:1f:5f:21:5e:d0:c8:ed:57:83:09:72:ca:93: 70:1e:da:14:67:e7:87:fc:ec:d2:d8:fb:1e:63:11:92:d5:df: 94:83:5f:f6:4b:ab:32:6b:48:29:86:9c:41:3b:69:a6:3b:3a: 72:c9:a1:cb:1d:32:92:be:00:5a:52:20:5e:d7:d7:02:38:7d: 00:87:bc:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4w7jEMYU752VGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzczZDg3M2EtMWE1Mi00MmFiLWJiOTEtN2RiNDMyZmYwNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva1ZuLJsWX4ehh4KLjwvzxqIbVRQopeqCkf6 hgs0ETccJAOZ/yjUfaTI9iubf87Gwg9Mq0vg+nKRLrtbWOHQGgw/Ea7zhn8MPG98 KE9zuMrFK7VmkrHu3gVgAEEr3X0GbGW1/+OqLU5jF8TcP7USX96/fXonQUgzeCr5 S5+aD0cftqe7uIbirwk9soMr2Js61MhJItWFQl3M0w5hcoicM/zZRyxrFC48PYn0 mU0lOxNx/G7KW9GThoJ8QosV2gihM+Q57gJF/6KE9KyX4FKBMbj5z+94IWwGsKgC hKvu1+dlUFzEnKNQ5kAJMxDiAid3TW8E2FQF0x0owcoeONCazQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX0bGvJ1FP0LG8ouBlv4W7pGVjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDQ4Zjg4Y2UtODRiOC0z NGM5LWI3N2UtYzE5YWMyMmU4MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEORI81ZmMBvMvv+pCBQq8NcgNYHf3vOrfy6U/jvf/jFgQb1UvgQ0c2k R8G6HmFup4WYa0fJhTQuMqcLusO7iQEDU3d+Y67jma9fhRCfibRIwz0blGgN3NbW k9KS8g7tichUHMObXJPNPEGiYLz/SEazzyFJwhYB/nUspr/aU7tkz9FoR6HDrL/p lowg2xbVoXt99p6074JV4Ra47fJS9gEHyFnspG4TyrFQTRKOMly8U2y1Mx6w5Y+T H18hXtDI7VeDCXLKk3Ae2hRn54f87NLY+x5jEZLV35SDX/ZLqzJrSCmGnEE7aaY7 OnLJocsdMpK+AFpSIF7X1wI4fQCHvP4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:38 2025 by rpki-client