$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0dfea730-01d8-357a-be92-321d039fe21a.roa File: 0dfea730-01d8-357a-be92-321d039fe21a.roa (raw, json) Hash identifier: VFYEnucaT/O28pvffdNl7KDoc4yLi3Iw9wrnjnkxvjo= Subject key identifier: FE:18:53:01:04:1A:96:27:6C:D0:B2:50:66:BA:E1:C2:51:94:78:69 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9ACB03566773A246B12856F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0dfea730-01d8-357a-be92-321d039fe21a.roa Signing time: Wed 22 Oct 2025 09:11:14 +0000 ROA not before: Wed 22 Oct 2025 09:11:14 +0000 ROA not after: Tue 20 Jan 2026 10:11:14 +0000 asID: 63199 IP address blocks: 74.1.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:cb:03:56:67:73:a2:46:b1:28:56:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 22 09:11:14 2025 GMT Not After : Jan 20 10:11:14 2026 GMT Subject: CN=cd60472f-3432-4e10-a20d-b1cbea95840d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b7:c9:bd:9b:26:a9:89:79:7c:64:7d:76:37: 6e:1b:6e:22:6d:eb:fb:39:5a:15:0a:3c:0e:f7:31: 25:a9:13:ad:85:48:e5:11:40:a1:f2:52:29:34:09: c2:a6:b4:2a:1b:e6:97:99:f6:cd:7d:64:a8:41:83: 4b:4a:3a:2e:dd:0c:94:16:6d:41:e9:8a:11:54:11: 4c:11:95:6c:d8:a2:5a:f7:52:01:27:6f:bd:f8:ad: 45:d8:0f:67:32:38:20:f5:86:81:e2:61:5d:4e:76: 8c:bd:d2:f7:9f:31:85:01:44:50:bd:ac:65:9c:70: 90:e3:a7:10:e0:5c:72:df:9c:b5:24:4d:8f:6f:c1: 29:2a:16:29:b9:1e:80:02:0b:91:d6:06:2a:07:97: 2d:37:45:62:dc:65:23:3c:82:6f:6f:1a:8b:cf:37: 4d:29:08:4c:81:b3:dd:66:a2:2f:b4:e0:cd:c5:5f: 86:9b:b6:43:b3:7c:26:76:c6:87:58:ca:76:6e:ff: 3d:89:81:13:26:3b:d8:34:f4:ae:d3:a5:75:e4:69: 5f:1a:83:59:33:b2:26:20:c9:aa:de:15:f1:2b:04: 07:22:ef:3d:ca:31:35:03:7f:51:d0:d1:e3:df:ec: c7:f5:c8:45:71:c5:e3:70:21:6d:2b:56:1b:f7:42: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:18:53:01:04:1A:96:27:6C:D0:B2:50:66:BA:E1:C2:51:94:78:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0dfea730-01d8-357a-be92-321d039fe21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:af:75:ad:e3:50:6a:b8:04:2a:2f:6c:c3:fc:8d:ed:ee:95: 14:c1:5c:8d:53:5e:8b:90:21:32:be:a3:9f:b6:f4:83:09:8c: 2b:6f:b1:69:e3:0d:4c:3f:33:bd:e5:1d:67:b0:ef:85:39:65: 1f:88:49:16:af:22:6e:5e:e1:40:4b:6b:71:77:2a:18:28:5f: ce:ec:9f:17:31:6b:73:c5:36:a3:cd:99:ca:a9:6b:78:f9:a1: c1:17:b6:8c:61:8e:4e:c2:80:49:d7:c8:1a:0f:ec:ab:39:13: fc:16:b3:9c:b3:56:8b:ef:be:fc:94:e1:87:00:dd:d2:53:8d: 86:7d:a1:fd:98:28:d9:bf:02:b3:20:d8:49:c7:f4:57:79:7b: 84:97:3d:38:8a:30:77:50:b9:4b:fb:20:4b:56:f8:2a:32:b6: c2:df:96:a8:6f:81:25:f6:b5:96:bb:51:a3:8f:46:d9:ba:36: 91:03:5e:0e:cb:63:55:c4:96:ad:17:10:b5:84:6c:fb:f1:e6: db:54:dc:36:9e:60:46:fa:fa:62:59:ce:a2:e4:de:d0:1d:1e: 38:46:e8:1f:da:5b:71:74:81:db:0f:8a:17:ae:ca:3a:70:54: 4c:1a:e7:f1:67:da:d1:3c:f8:33:da:99:c9:b1:44:41:6b:2b: a5:fc:33:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuaywNWZ3OiRrEoVvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMjA5MTExNFoXDTI2MDEyMDEwMTExNFowLzEtMCsGA1UEAxMk Y2Q2MDQ3MmYtMzQzMi00ZTEwLWEyMGQtYjFjYmVhOTU4NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLfJvZsmqYl5fGR9djduG24ibev7OVoVCjwO 9zElqROthUjlEUCh8lIpNAnCprQqG+aXmfbNfWSoQYNLSjou3QyUFm1B6YoRVBFM EZVs2KJa91IBJ2+9+K1F2A9nMjgg9YaB4mFdTnaMvdL3nzGFAURQvaxlnHCQ46cQ 4Fxy35y1JE2Pb8EpKhYpuR6AAguR1gYqB5ctN0Vi3GUjPIJvbxqLzzdNKQhMgbPd ZqIvtODNxV+Gm7ZDs3wmdsaHWMp2bv89iYETJjvYNPSu06V15GlfGoNZM7ImIMmq 3hXxKwQHIu89yjE1A39R0NHj3+zH9chFccXjcCFtK1Yb90L3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4YUwEEGpYnbNCyUGa64cJRlHhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGRmZWE3MzAtMDFkOC0z NTdhLWJlOTItMzIxZDAzOWZlMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGvda3jUGq4BCovbMP8je3ulRTBXI1TXouQITK+o5+29IMJjCtvsWnj DUw/M73lHWew74U5ZR+ISRavIm5e4UBLa3F3KhgoX87snxcxa3PFNqPNmcqpa3j5 ocEXtoxhjk7CgEnXyBoP7Ks5E/wWs5yzVovvvvyU4YcA3dJTjYZ9of2YKNm/ArMg 2EnH9Fd5e4SXPTiKMHdQuUv7IEtW+CoytsLflqhvgSX2tZa7UaOPRtm6NpEDXg7L Y1XElq0XELWEbPvx5ttU3DaeYEb6+mJZzqLk3tAdHjhG6B/aW3F0gdsPiheuyjpw VEwa5/Fn2tE8+DPamcmxREFrK6X8M+Q= -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:16 2025 by rpki-client