$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/431f8f93-ece6-34a9-aa33-83bf2fd2979f.roa File: 431f8f93-ece6-34a9-aa33-83bf2fd2979f.roa (raw, json) Hash identifier: hhID7w8JA2vxO7X8pXoslNsH235sCvyXHDpb9e4SFrI= Subject key identifier: F8:59:56:70:06:16:8F:6E:36:AE:9B:A3:17:17:D0:93:DC:B3:87:1B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9703B6CDB36592BF9288C900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/431f8f93-ece6-34a9-aa33-83bf2fd2979f.roa Signing time: Tue 21 Oct 2025 00:42:15 +0000 ROA not before: Tue 21 Oct 2025 00:42:15 +0000 ROA not after: Mon 19 Jan 2026 01:42:15 +0000 asID: 174 IP address blocks: 74.1.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:03:b6:cd:b3:65:92:bf:92:88:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 00:42:15 2025 GMT Not After : Jan 19 01:42:15 2026 GMT Subject: CN=e534bf55-0358-44ab-b65d-004bf00ef10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:b8:d1:2c:34:5c:cb:2f:ee:9f:40:82:ee: 95:d9:4e:11:51:35:dd:47:aa:80:d7:94:61:7a:b1: 80:31:32:2f:c8:72:d5:cd:c0:18:d3:cb:20:71:46: f0:1e:8b:23:3b:53:02:7c:12:42:d9:06:67:10:68: bd:72:d3:0e:6f:f9:41:92:49:a6:4e:a4:98:3c:b7: ea:b5:81:1f:a8:10:74:af:84:86:42:d6:5f:dc:0a: 53:e9:59:e6:3b:09:2a:b7:f8:0c:bc:0f:48:e2:41: 4d:1f:0e:21:ba:3b:b8:da:d0:4a:d9:72:04:3e:17: cb:c8:db:1a:29:64:3e:08:a0:e4:73:85:c2:8b:e2: 28:6b:74:d8:9e:42:33:93:ce:41:ce:5d:3a:11:ac: 5f:ee:db:8b:af:91:d4:2c:4f:6a:ee:94:be:c7:97: 7f:55:22:b6:48:92:d5:45:33:72:2a:d0:85:f5:f9: d6:c6:95:07:af:15:5b:54:b9:e8:d1:f1:00:a1:1e: 72:8a:b5:bd:27:22:02:80:4a:ab:12:5b:20:c6:b3: 85:7b:e3:bd:2a:eb:ea:9a:38:45:db:ee:35:54:af: dc:6a:1a:6d:6c:28:74:1e:be:31:b0:09:1f:6e:ff: 11:fc:0f:5e:d3:85:06:68:50:4c:06:e0:6c:d3:03: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:56:70:06:16:8F:6E:36:AE:9B:A3:17:17:D0:93:DC:B3:87:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/431f8f93-ece6-34a9-aa33-83bf2fd2979f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0d:4f:bf:11:f2:1a:4e:c5:0a:0a:bb:dc:a5:06:0d:ea:1e: df:91:63:d7:8c:c4:83:b0:48:6b:b2:d0:c8:1d:17:72:b7:84: c1:82:12:ce:18:3f:9f:85:51:15:e3:cf:cb:18:fd:95:07:bb: 9c:5f:4b:61:86:36:8c:f7:0c:63:df:43:42:aa:db:d7:7c:b4: 40:a5:5a:f7:72:d8:09:d8:58:e6:25:d3:e5:d6:0a:ae:b9:95: c8:c8:c6:a4:90:18:b7:96:53:7a:93:29:ce:32:93:45:8a:ea: 09:e4:53:de:2a:71:5d:8c:9f:4d:7b:ba:1c:ec:30:6b:a0:43: cc:db:37:cf:31:3b:77:b7:5b:9c:ce:92:6b:68:bd:65:87:eb: 11:47:29:ed:81:4e:fd:10:6c:be:39:73:81:6d:5d:af:44:c8: 0e:64:ae:18:84:97:c7:76:f6:b5:e7:4e:a3:99:04:86:e0:1c: 1b:80:e6:79:65:29:27:90:d1:dd:93:51:39:ee:07:07:29:23: 53:7f:b3:3c:c9:14:3b:33:ff:81:8d:bb:dd:e5:c3:35:bc:43: 25:92:8b:23:3a:59:06:f8:6b:96:5e:52:d1:d6:94:7d:22:c8: 1d:f1:c3:4b:10:74:0a:73:35:00:c6:70:77:c0:18:3f:70:97: a2:dd:b2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXA7bNs2WSv5KIyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAwNDIxNVoXDTI2MDExOTAxNDIxNVowLzEtMCsGA1UEAxMk ZTUzNGJmNTUtMDM1OC00NGFiLWI2NWQtMDA0YmYwMGVmMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ640Sw0XMsv7p9Agu6V2U4RUTXdR6qA15Rh erGAMTIvyHLVzcAY08sgcUbwHosjO1MCfBJC2QZnEGi9ctMOb/lBkkmmTqSYPLfq tYEfqBB0r4SGQtZf3ApT6VnmOwkqt/gMvA9I4kFNHw4huju42tBK2XIEPhfLyNsa KWQ+CKDkc4XCi+Ioa3TYnkIzk85Bzl06Eaxf7tuLr5HULE9q7pS+x5d/VSK2SJLV RTNyKtCF9fnWxpUHrxVbVLno0fEAoR5yirW9JyICgEqrElsgxrOFe+O9KuvqmjhF 2+41VK/cahptbCh0Hr4xsAkfbv8R/A9e04UGaFBMBuBs0wPeDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhZVnAGFo9uNq6boxcX0JPcs4cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDMxZjhmOTMtZWNlNi0z NGE5LWFhMzMtODNiZjJmZDI5NzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgNT78R8hpOxQoKu9ylBg3qHt+RY9eMxIOwSGuy0MgdF3K3hMGCEs4Y P5+FURXjz8sY/ZUHu5xfS2GGNoz3DGPfQ0Kq29d8tEClWvdy2AnYWOYl0+XWCq65 lcjIxqSQGLeWU3qTKc4yk0WK6gnkU94qcV2Mn017uhzsMGugQ8zbN88xO3e3W5zO kmtovWWH6xFHKe2BTv0QbL45c4FtXa9EyA5krhiEl8d29rXnTqOZBIbgHBuA5nll KSeQ0d2TUTnuBwcpI1N/szzJFDsz/4GNu93lwzW8QyWSiyM6WQb4a5ZeUtHWlH0i yB3xw0sQdApzNQDGcHfAGD9wl6LdsmY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:44 2025 by rpki-client