$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/412b5645-3c85-3d63-b6dc-bfbc79b134b8.roa File: 412b5645-3c85-3d63-b6dc-bfbc79b134b8.roa (raw, json) Hash identifier: 82cRdbm0GDpOXnAoIBAgQxT0OCm2ebYyO07DDV0/enU= Subject key identifier: 08:20:A9:FB:50:28:92:28:51:DA:45:54:35:0E:81:94:19:A0:3B:0A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9703861A699A3AF280AA6048 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/412b5645-3c85-3d63-b6dc-bfbc79b134b8.roa Signing time: Tue 21 Oct 2025 00:41:52 +0000 ROA not before: Tue 21 Oct 2025 00:41:52 +0000 ROA not after: Mon 19 Jan 2026 01:41:52 +0000 asID: 174 IP address blocks: 74.1.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:03:86:1a:69:9a:3a:f2:80:aa:60:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 00:41:52 2025 GMT Not After : Jan 19 01:41:52 2026 GMT Subject: CN=b9688f38-48fc-4979-ad51-0e19ea20663f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:06:cb:2b:a1:78:fb:6f:3a:49:eb:bf:16: 57:50:fe:82:02:0f:7d:c2:51:ac:dd:d6:fb:74:28: 05:f0:0a:3d:ec:21:23:70:18:03:2a:f5:75:1b:40: 8d:48:34:6b:db:7f:fa:d8:13:b0:60:47:7c:2c:43: 1f:d9:8f:4f:6a:e9:2b:99:ff:8b:28:b9:16:17:4a: 5d:4f:b7:5f:49:7a:28:d4:4c:35:a2:01:41:f4:03: c1:5a:7c:97:40:56:60:b5:ba:31:ee:44:d1:d1:f7: a9:db:8a:34:cf:7b:e7:9e:be:2c:76:06:21:fb:51: e0:e5:de:d8:c9:43:a8:8b:d8:d1:c1:42:65:a8:7e: 5c:3d:64:6e:d9:38:e4:e7:ee:bf:e0:0c:62:31:cf: 92:02:da:eb:0a:8e:f2:5a:40:d7:47:84:3b:e8:3f: 36:03:89:31:fc:16:33:bd:9a:70:95:3a:cc:fe:13: a5:7f:d9:a4:cf:ad:b4:61:89:e4:9e:e3:18:3c:f6: c6:be:0e:ab:2d:1c:d3:45:61:1c:83:f1:35:5b:b2: 0d:22:4a:aa:fc:76:ab:a7:45:a7:77:9d:b2:c6:29: cf:a4:69:2c:aa:28:71:3c:ec:a9:5a:73:84:37:d2: e0:55:07:cf:fa:88:62:2f:ae:9a:c6:c7:23:13:4a: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:A9:FB:50:28:92:28:51:DA:45:54:35:0E:81:94:19:A0:3B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/412b5645-3c85-3d63-b6dc-bfbc79b134b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7d:7c:78:e6:34:b9:44:ce:b3:5f:37:67:4f:4c:82:db:d9: ad:7f:46:fd:53:fe:7e:74:16:2f:94:59:ec:c8:da:1a:ea:dd: c0:59:aa:20:b9:b6:48:60:b0:25:ff:5c:b7:df:1d:8b:fd:cf: ac:c3:6b:18:ba:7b:f7:74:6d:36:5a:1c:54:0b:c9:2a:b4:8f: 5f:9a:74:6a:b5:bc:30:b9:33:78:f6:c6:d9:06:8b:62:67:ec: 01:f9:35:2f:47:46:90:f2:33:51:ac:7c:90:ca:36:b0:83:05: 09:07:7d:a9:9b:06:35:48:4a:fb:e3:b1:36:01:8d:21:57:90: 50:83:43:e8:10:b1:a6:9c:eb:bb:39:ec:be:91:8f:09:a6:be: 39:57:18:7c:0d:a0:b9:04:51:ea:52:49:a2:9f:7d:48:86:fe: 90:af:d2:e3:36:c3:26:0f:a2:d1:5a:7d:a2:dd:74:9b:df:e3: 93:80:d1:4f:0b:79:a6:45:e5:a8:21:2d:28:10:00:1a:c5:ce: 4d:51:41:96:49:2e:ee:74:ee:33:b0:0e:7e:9c:1b:85:e7:3b: 9f:5a:5a:e2:b9:9b:42:43:bc:35:31:7b:17:24:f4:1e:5f:f8: 40:83:95:ce:1c:19:ce:a0:11:d1:60:8c:2b:27:bb:8c:36:69: 42:c7:cc:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXA4YaaZo68oCqYEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAwNDE1MloXDTI2MDExOTAxNDE1MlowLzEtMCsGA1UEAxMk Yjk2ODhmMzgtNDhmYy00OTc5LWFkNTEtMGUxOWVhMjA2NjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y4GyyuhePtvOknrvxZXUP6CAg99wlGs3db7 dCgF8Ao97CEjcBgDKvV1G0CNSDRr23/62BOwYEd8LEMf2Y9Paukrmf+LKLkWF0pd T7dfSXoo1Ew1ogFB9APBWnyXQFZgtbox7kTR0fep24o0z3vnnr4sdgYh+1Hg5d7Y yUOoi9jRwUJlqH5cPWRu2Tjk5+6/4AxiMc+SAtrrCo7yWkDXR4Q76D82A4kx/BYz vZpwlTrM/hOlf9mkz620YYnknuMYPPbGvg6rLRzTRWEcg/E1W7INIkqq/Harp0Wn d52yxinPpGksqihxPOypWnOEN9LgVQfP+ohiL66axscjE0oZLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAggqftQKJIoUdpFVDUOgZQZoDsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDEyYjU2NDUtM2M4NS0z ZDYzLWI2ZGMtYmZiYzc5YjEzNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ9fHjmNLlEzrNfN2dPTILb2a1/Rv1T/n50Fi+UWezI2hrq3cBZqiC5 tkhgsCX/XLffHYv9z6zDaxi6e/d0bTZaHFQLySq0j1+adGq1vDC5M3j2xtkGi2Jn 7AH5NS9HRpDyM1GsfJDKNrCDBQkHfambBjVISvvjsTYBjSFXkFCDQ+gQsaac67s5 7L6RjwmmvjlXGHwNoLkEUepSSaKffUiG/pCv0uM2wyYPotFafaLddJvf45OA0U8L eaZF5aghLSgQABrFzk1RQZZJLu507jOwDn6cG4XnO59aWuK5m0JDvDUxexck9B5f +ECDlc4cGc6gEdFgjCsnu4w2aULHzOc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:01:53 2025 by rpki-client