$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21e8d138-ed63-34fe-8de8-01b58ff49409.roa File: 21e8d138-ed63-34fe-8de8-01b58ff49409.roa (raw, json) Hash identifier: ww8ckVMH68pUgkUXInHxqckLLmSm5p5Hn9r8T1xCwdY= Subject key identifier: 02:62:52:BF:A5:C5:E9:09:8F:24:0C:58:EE:79:F7:51:13:1C:D3:A7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA09438ED729D5345A4692D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21e8d138-ed63-34fe-8de8-01b58ff49409.roa Signing time: Fri 24 Oct 2025 10:55:41 +0000 ROA not before: Fri 24 Oct 2025 10:55:41 +0000 ROA not after: Thu 22 Jan 2026 11:55:41 +0000 asID: 9304 IP address blocks: 74.1.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:94:38:ed:72:9d:53:45:a4:69:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 10:55:41 2025 GMT Not After : Jan 22 11:55:41 2026 GMT Subject: CN=7f753cfe-e537-436c-bfc8-57986381357e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:83:0c:b3:68:91:2a:db:4e:35:08:a2:5e: bc:3b:7e:8b:a8:ae:e8:9b:1d:9e:3f:a2:ad:ab:ec: b8:6c:4b:4e:c1:26:26:a5:3b:24:41:2c:89:e9:ae: f8:ec:6a:fb:44:f2:b6:53:43:3e:83:bb:f0:6b:d5: 06:db:7b:80:26:a0:e1:ab:70:3d:22:f2:c3:eb:31: f6:2e:b4:cd:97:a8:de:c1:6a:39:0e:e8:32:b0:22: 25:b3:9f:5c:33:b9:b1:a1:e1:c6:eb:b3:69:01:3b: 47:33:bf:06:13:ba:3c:d2:78:91:c6:6b:06:48:f4: d0:07:69:66:6b:75:64:46:d7:1a:b5:8a:a6:5a:bf: 53:54:b8:ae:aa:79:35:fa:8f:72:78:8e:f1:4d:75: 02:52:76:68:2a:bf:65:f3:1b:79:d0:f5:f1:4e:2c: 76:53:61:40:5e:a2:06:a7:d9:3b:71:70:73:7c:86: 34:da:4b:eb:88:d0:93:81:2d:9e:24:aa:ad:75:ea: 4f:54:cd:5d:98:e4:8f:70:54:15:1a:92:3c:d8:4a: 85:36:74:ea:c2:ce:ef:b0:25:cb:a6:91:6e:08:8c: 4d:ce:60:e6:50:03:38:9a:88:0c:b8:a6:f9:7b:5b: e2:0f:23:2f:41:3e:5e:db:12:17:75:b6:21:aa:ad: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:52:BF:A5:C5:E9:09:8F:24:0C:58:EE:79:F7:51:13:1C:D3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21e8d138-ed63-34fe-8de8-01b58ff49409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2b:74:b7:7a:97:68:3c:f8:5e:29:95:d7:cf:7d:bb:ce:d5: 8f:1d:c5:f9:7a:d7:40:f2:30:44:77:ce:aa:09:8c:c0:fb:2f: f2:09:e2:9e:e1:8f:87:9e:74:cc:08:47:6f:a8:01:96:81:40: 9e:b4:b4:d8:3b:d2:f5:04:6e:4f:00:e7:2f:9e:2e:d0:4c:09: fd:2e:15:d5:76:50:3d:4a:a0:4d:a8:23:7b:ef:3c:d6:d7:ed: dc:7e:0e:c8:4a:0a:b9:bc:64:13:5a:40:fa:53:da:b0:17:75: 05:b4:8d:70:6c:fe:4a:af:71:65:30:94:a9:a4:77:19:87:ba: ad:9f:fd:58:74:94:ec:3d:60:9b:c0:d3:48:6b:8c:a0:d5:c6: 93:11:ab:22:07:1c:61:74:e4:15:2a:e1:51:6a:10:bc:28:18: ad:6c:a3:43:26:25:db:e2:60:4f:52:8d:83:d4:57:46:de:de: 89:ce:42:43:c1:e0:cc:f7:ec:52:a2:ee:37:65:e8:4f:65:05: 6c:1c:fe:32:d0:d6:38:83:93:ef:e9:9b:54:c3:e5:f2:2e:a6: 3b:95:2b:1e:10:f8:15:2d:ab:69:1f:db:fc:e7:94:6a:4b:60: 09:e1:92:bc:08:1f:f7:39:a7:99:e0:72:e0:d5:ba:ba:1c:c1: 92:3e:5a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuglDjtcp1TRaRpLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNDEwNTU0MVoXDTI2MDEyMjExNTU0MVowLzEtMCsGA1UEAxMk N2Y3NTNjZmUtZTUzNy00MzZjLWJmYzgtNTc5ODYzODEzNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEGDDLNokSrbTjUIol68O36LqK7omx2eP6Kt q+y4bEtOwSYmpTskQSyJ6a747Gr7RPK2U0M+g7vwa9UG23uAJqDhq3A9IvLD6zH2 LrTNl6jewWo5DugysCIls59cM7mxoeHG67NpATtHM78GE7o80niRxmsGSPTQB2lm a3VkRtcatYqmWr9TVLiuqnk1+o9yeI7xTXUCUnZoKr9l8xt50PXxTix2U2FAXqIG p9k7cXBzfIY02kvriNCTgS2eJKqtdepPVM1dmOSPcFQVGpI82EqFNnTqws7vsCXL ppFuCIxNzmDmUAM4mogMuKb5e1viDyMvQT5e2xIXdbYhqq3CJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJiUr+lxekJjyQMWO5591ETHNOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFlOGQxMzgtZWQ2My0z NGZlLThkZTgtMDFiNThmZjQ5NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0rdLd6l2g8+F4pldfPfbvO1Y8dxfl610DyMER3zqoJjMD7L/IJ4p7h j4eedMwIR2+oAZaBQJ60tNg70vUEbk8A5y+eLtBMCf0uFdV2UD1KoE2oI3vvPNbX 7dx+DshKCrm8ZBNaQPpT2rAXdQW0jXBs/kqvcWUwlKmkdxmHuq2f/Vh0lOw9YJvA 00hrjKDVxpMRqyIHHGF05BUq4VFqELwoGK1so0MmJdviYE9SjYPUV0be3onOQkPB 4Mz37FKi7jdl6E9lBWwc/jLQ1jiDk+/pm1TD5fIupjuVKx4Q+BUtq2kf2/znlGpL YAnhkrwIH/c5p5ngcuDVurocwZI+Wpk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:40 2025 by rpki-client