$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5274feaa-7abb-3647-b6f3-bb0eb8aa3bd5.roa File: 5274feaa-7abb-3647-b6f3-bb0eb8aa3bd5.roa (raw, json) Hash identifier: CFwGPoYTjWtJbVTs/HUWXt0IRU9zNlZo5fZXqP5nHvs= Subject key identifier: 3B:97:18:98:C8:12:0A:FB:BF:D6:20:87:75:74:CD:45:2F:47:F0:D7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B97033BA628410B6870CAC000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5274feaa-7abb-3647-b6f3-bb0eb8aa3bd5.roa Signing time: Tue 21 Oct 2025 00:41:16 +0000 ROA not before: Tue 21 Oct 2025 00:41:16 +0000 ROA not after: Mon 19 Jan 2026 01:41:16 +0000 asID: 174 IP address blocks: 74.1.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:03:3b:a6:28:41:0b:68:70:ca:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 00:41:16 2025 GMT Not After : Jan 19 01:41:16 2026 GMT Subject: CN=d711bcf4-3afa-454a-a684-acaa7905950b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:6d:f9:bb:14:15:c8:66:a2:db:f4:b6:50: b1:25:de:0b:45:48:95:83:b2:b4:42:58:e6:ed:0e: d0:ec:92:52:09:e6:cd:a0:78:93:a4:51:87:52:17: 50:4f:a4:2b:35:e5:ef:bb:19:cf:69:08:27:af:3f: 9a:df:5c:6a:5c:9c:52:fe:24:73:bf:59:ba:fd:3d: 57:72:c0:19:58:d5:35:42:c7:73:eb:b9:a4:21:ce: 69:27:bd:8c:9a:4d:bb:cf:e0:8d:a2:23:da:c4:89: 78:6a:55:88:a8:0c:0c:6e:a4:e4:95:b4:54:db:26: df:2f:81:9d:73:c1:2e:ad:fd:8a:6e:39:5d:86:b1: 8d:12:0e:f5:25:29:73:b0:0f:44:c2:02:c5:c8:87: cf:c1:97:5b:ea:3e:c0:31:55:39:3e:2a:fa:a6:ac: d4:6b:72:43:dd:f3:9c:a6:25:46:cb:3b:fc:6d:62: eb:48:df:4e:6c:23:b0:ca:da:c6:a2:d2:de:08:3f: b7:3c:7e:91:e9:5c:bd:12:70:da:1b:19:82:40:1b: 42:b4:77:0c:26:18:e2:09:bd:10:c2:91:37:5b:4f: bd:82:93:f1:67:49:9e:50:00:ed:62:fa:4c:b5:20: 5a:45:b5:6a:74:3d:c8:7b:c9:69:72:5c:7a:17:72: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:97:18:98:C8:12:0A:FB:BF:D6:20:87:75:74:CD:45:2F:47:F0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5274feaa-7abb-3647-b6f3-bb0eb8aa3bd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bc:72:bd:d2:6a:76:87:23:d4:7f:f3:0e:6f:05:92:f5:01: c7:fd:79:2f:bd:51:4c:f3:e4:5a:b7:ea:47:fe:b8:00:c0:84: 27:75:45:44:25:d5:06:0d:0c:0e:d5:99:10:7e:91:ae:d2:99: b1:97:b8:4a:da:6a:60:09:fd:1a:ff:98:ce:e9:41:7f:56:9b: 4c:b0:d7:7d:24:b8:ee:b7:aa:58:b3:3e:e1:5f:2b:cd:37:d5: b3:34:4f:8c:b4:fc:99:08:7c:3b:f6:26:6c:12:b3:15:04:0d: d0:f9:2f:f2:4c:38:a0:88:e7:25:73:44:1b:39:bb:1e:26:44: 6c:33:47:ec:e7:dd:c5:c9:90:d1:a8:bd:5b:ee:12:01:f1:bd: 81:2b:c4:42:dd:73:95:dd:69:b6:09:31:90:1a:f1:05:4f:a5: 1a:96:92:02:b6:b8:f3:d3:57:f2:82:c8:07:10:33:5b:d8:7c: b9:38:7f:32:ab:bc:ff:7f:68:99:5f:fa:66:8f:c9:a9:3d:8d: 68:87:27:8f:39:d8:4e:b0:b2:ee:21:20:ca:3e:14:59:46:d2: 04:0a:e7:5f:8d:a4:d1:ca:77:ed:6b:0c:37:4c:f6:d8:0a:da: 1c:79:4e:21:f0:53:a4:50:b7:d7:5c:74:b4:47:80:8a:1a:6a: 29:aa:fe:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXAzumKEELaHDKwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAwNDExNloXDTI2MDExOTAxNDExNlowLzEtMCsGA1UEAxMk ZDcxMWJjZjQtM2FmYS00NTRhLWE2ODQtYWNhYTc5MDU5NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOBt+bsUFchmotv0tlCxJd4LRUiVg7K0Qljm 7Q7Q7JJSCebNoHiTpFGHUhdQT6QrNeXvuxnPaQgnrz+a31xqXJxS/iRzv1m6/T1X csAZWNU1Qsdz67mkIc5pJ72Mmk27z+CNoiPaxIl4alWIqAwMbqTklbRU2ybfL4Gd c8Eurf2KbjldhrGNEg71JSlzsA9EwgLFyIfPwZdb6j7AMVU5Pir6pqzUa3JD3fOc piVGyzv8bWLrSN9ObCOwytrGotLeCD+3PH6R6Vy9EnDaGxmCQBtCtHcMJhjiCb0Q wpE3W0+9gpPxZ0meUADtYvpMtSBaRbVqdD3Ie8lpclx6F3IVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuXGJjIEgr7v9Ygh3V0zUUvR/DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTI3NGZlYWEtN2FiYi0z NjQ3LWI2ZjMtYmIwZWI4YWEzYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO8cr3SanaHI9R/8w5vBZL1Acf9eS+9UUzz5Fq36kf+uADAhCd1RUQl 1QYNDA7VmRB+ka7SmbGXuEraamAJ/Rr/mM7pQX9Wm0yw130kuO63qlizPuFfK803 1bM0T4y0/JkIfDv2JmwSsxUEDdD5L/JMOKCI5yVzRBs5ux4mRGwzR+zn3cXJkNGo vVvuEgHxvYErxELdc5XdabYJMZAa8QVPpRqWkgK2uPPTV/KCyAcQM1vYfLk4fzKr vP9/aJlf+maPyak9jWiHJ4852E6wsu4hIMo+FFlG0gQK51+NpNHKd+1rDDdM9tgK 2hx5TiHwU6RQt9dcdLRHgIoaaimq/mk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:26 2025 by rpki-client