$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ce2ff473-ff8f-3232-a50a-d204976f0d0a.roa File: ce2ff473-ff8f-3232-a50a-d204976f0d0a.roa (raw, json) Hash identifier: aAceeigkdRA28MxTX0+hSKJCBzcMvws/zA+/im4tybE= Subject key identifier: 4C:E8:47:D3:A5:BF:B5:41:34:CD:14:F0:5D:7D:65:8F:5E:12:10:94 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584BBE405D568968EF42A069FD70 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ce2ff473-ff8f-3232-a50a-d204976f0d0a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 9304 IP address blocks: 74.81.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5d:56:89:68:ef:42:a0:69:fd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=584bf850-2276-4600-837e-1ced6355ac0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:45:75:88:e7:cc:0c:f7:07:18:f8:e9:c4: fb:a7:8c:ca:78:c0:67:37:10:eb:e1:26:13:46:f0: 13:80:06:fe:4d:76:e2:33:3b:55:c3:d4:b3:39:d8: bf:c4:73:6a:11:43:a8:d2:79:72:9e:71:e0:01:b4: da:0e:45:89:c4:6b:1c:3f:98:1d:32:a4:40:95:a4: 86:73:77:85:9e:be:96:11:58:2a:4d:b1:c9:08:1f: 1b:f5:dd:50:f3:0d:d9:c9:3b:ab:5e:66:d8:19:8f: 20:96:59:78:a7:6e:6a:44:cc:db:2a:9d:a8:30:9d: 51:01:5c:3d:c0:0d:ce:aa:ac:76:e4:72:92:1a:27: 56:3a:cb:b4:7c:fa:a0:23:10:ea:e8:0a:d1:60:0a: ca:ea:85:35:81:85:13:7c:0d:64:68:41:54:7f:25: 71:39:01:8a:be:29:da:cd:77:c1:a0:46:b3:10:fa: 2a:53:3a:85:2f:92:df:d1:fd:f0:2c:16:17:c7:9c: 9a:29:a1:d2:99:32:81:58:94:e5:1b:07:27:14:b1: 75:ca:f9:16:46:f3:0b:3c:bb:2b:a4:df:0a:ff:4a: 87:dc:78:f9:f5:ef:8e:d1:5c:68:aa:85:d6:3a:4f: 06:f9:1b:35:54:b8:9b:98:65:7e:6b:2c:2c:2c:55: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E8:47:D3:A5:BF:B5:41:34:CD:14:F0:5D:7D:65:8F:5E:12:10:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ce2ff473-ff8f-3232-a50a-d204976f0d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 74.81.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4e:bd:75:b3:f1:4a:75:4e:d3:00:ee:09:af:3c:65:ee:1a: a7:50:61:49:66:f2:cf:19:83:92:e3:40:51:14:3a:c6:a9:12: 3b:bd:27:67:75:d5:97:8e:bf:b6:67:6f:e5:db:b5:f9:5b:07: 85:99:b0:45:d1:1a:e1:3b:e7:3a:b9:b5:39:41:5c:8d:34:83: 55:82:9a:6d:2a:c6:1e:fe:3b:cb:33:73:cd:ed:13:3d:a4:50: d5:2c:ea:06:8f:f6:c9:62:a0:31:8c:6e:a1:8b:eb:e8:2d:19: e8:f8:f7:62:8f:9a:21:96:7c:db:f5:32:22:d7:bc:1a:5a:99: d8:c8:66:c7:15:bc:77:3e:7f:ec:62:7f:36:1f:01:a2:96:7e: 7c:30:cf:c5:51:20:ff:18:83:26:98:19:e7:c1:ea:56:02:f3: bc:d3:81:37:0e:2a:ca:71:f9:bc:53:e8:8c:4c:b0:6a:81:2d: 64:11:c2:1e:d6:d4:b5:bc:f7:fd:6d:cd:c6:32:7c:d9:5f:cc: f8:d9:c7:67:8f:37:31:97:fe:ca:32:85:7e:d5:de:42:bf:9f: a1:8d:f8:47:50:26:b0:ae:bc:63:26:03:d6:20:2b:0a:ca:e3: ae:7a:79:67:93:2f:f0:57:df:cd:95:03:fb:0f:c1:08:78:36: 0f:0f:30:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QF1WiWjvQqBp/XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTg0YmY4NTAtMjI3Ni00NjAwLTgzN2UtMWNlZDYzNTVhYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhChFdYjnzAz3Bxj46cT7p4zKeMBnNxDr4SYT RvATgAb+TXbiMztVw9SzOdi/xHNqEUOo0nlynnHgAbTaDkWJxGscP5gdMqRAlaSG c3eFnr6WEVgqTbHJCB8b9d1Q8w3ZyTurXmbYGY8glll4p25qRMzbKp2oMJ1RAVw9 wA3Oqqx25HKSGidWOsu0fPqgIxDq6ArRYArK6oU1gYUTfA1kaEFUfyVxOQGKvina zXfBoEazEPoqUzqFL5Lf0f3wLBYXx5yaKaHSmTKBWJTlGwcnFLF1yvkWRvMLPLsr pN8K/0qH3Hj59e+O0VxoqoXWOk8G+Rs1VLibmGV+aywsLFUHqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzoR9Olv7VBNM0U8F19ZY9eEhCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvY2UyZmY0NzMtZmY4Zi0z MjMyLWE1MGEtZDIwNDk3NmYwZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZOvXWz8Up1TtMA7gmvPGXuGqdQYUlm8s8Zg5LjQFEUOsapEju9J2d1 1ZeOv7Znb+XbtflbB4WZsEXRGuE75zq5tTlBXI00g1WCmm0qxh7+O8szc83tEz2k UNUs6gaP9slioDGMbqGL6+gtGej492KPmiGWfNv1MiLXvBpamdjIZscVvHc+f+xi fzYfAaKWfnwwz8VRIP8YgyaYGefB6lYC87zTgTcOKspx+bxT6IxMsGqBLWQRwh7W 1LW89/1tzcYyfNlfzPjZx2ePNzGX/soyhX7V3kK/n6GN+EdQJrCuvGMmA9YgKwrK 4656eWeTL/BX382VA/sPwQh4Ng8PMAw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:19:22 2025 by rpki-client