$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3dd2ee5-bade-38d7-a9a6-c692378aaba9.roa File: a3dd2ee5-bade-38d7-a9a6-c692378aaba9.roa (raw, json) Hash identifier: 3S0NDUKlnqydB4TzX+7PC+kUJJ9bzVhROhNbgyIlbdI= Subject key identifier: B4:55:C9:C4:A4:FA:E3:33:5D:3F:6D:08:0A:69:19:C9:4D:B6:78:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B97D15A3889905EFD437CFB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3dd2ee5-bade-38d7-a9a6-c692378aaba9.roa Signing time: Tue 21 Oct 2025 07:36:35 +0000 ROA not before: Tue 21 Oct 2025 07:36:35 +0000 ROA not after: Mon 19 Jan 2026 08:36:35 +0000 asID: 63199 IP address blocks: 74.2.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:d1:5a:38:89:90:5e:fd:43:7c:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 07:36:35 2025 GMT Not After : Jan 19 08:36:35 2026 GMT Subject: CN=5da2ce54-3c19-4acf-ad67-67281edfe9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:9c:1a:0b:15:a8:d3:f2:e2:9d:61:f5:ab: 2b:d9:6a:e0:b9:83:23:74:b5:00:7b:0c:23:8b:a6: ca:f1:4d:12:f9:93:4d:42:41:e2:d6:45:8b:1d:f8: bd:ef:48:79:d0:cf:5b:9d:c9:6c:da:93:ec:ea:92: 73:b0:bf:31:62:0c:ed:0f:7c:d9:84:ed:ff:38:96: 40:6c:be:93:a6:d9:aa:52:a3:0e:fa:82:90:3b:db: ae:0b:e3:10:9d:c9:f8:a4:8d:ae:84:3f:0b:d0:b2: fc:8f:07:d0:ef:2d:a9:59:ad:71:4a:c2:09:c7:f6: bf:c7:44:d3:22:ae:1e:dd:c6:0d:c9:06:7b:ce:7e: b9:63:2a:65:89:61:b4:64:e6:5f:82:59:df:48:df: 40:19:b6:46:26:04:1c:35:25:b5:84:d7:a5:5b:90: 6b:3c:1d:bc:9d:07:01:3e:6e:39:33:67:41:da:33: 1c:cd:dd:33:7b:79:09:9d:58:1e:13:85:93:4a:43: 75:f6:0d:f1:b7:b3:d3:0b:2a:1f:92:5f:da:e9:f5: db:74:7a:77:78:c4:6e:9a:30:a9:e7:0f:ea:d1:e7: 5c:f8:d7:45:fa:3b:82:0d:ca:40:2a:b3:a7:b7:a9: c5:37:19:29:0a:2d:a7:09:4a:a2:b0:d8:2e:94:8e: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:C9:C4:A4:FA:E3:33:5D:3F:6D:08:0A:69:19:C9:4D:B6:78:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3dd2ee5-bade-38d7-a9a6-c692378aaba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:77:d4:65:c3:ce:d9:a8:4c:09:c9:3b:54:89:89:db:91:52: 1a:20:b3:07:a7:fa:13:ff:51:d4:28:9c:63:9d:d1:c0:9d:36: bd:b5:fa:a9:6a:41:f2:4d:c6:d9:2f:ee:23:b1:93:3e:f4:6d: e9:be:a2:12:83:d6:97:5b:59:fb:fb:cc:ef:fd:f2:f9:64:5e: 58:e6:a6:92:c4:72:62:d2:b6:5b:f0:0f:b9:43:8d:44:5e:0c: cf:ec:fa:9f:15:22:b5:f2:a8:85:77:45:4b:e1:d2:27:1a:67: 08:13:2c:96:a4:c7:fd:56:61:ee:2b:f1:76:59:80:52:73:e9: f2:7a:cd:2b:4b:62:fa:1c:bc:4d:e7:76:a4:dc:41:c0:93:89: 2a:c8:25:82:22:c3:04:01:f5:fe:6a:bf:15:79:52:01:6c:1c: 17:93:63:37:ca:a9:70:39:e6:0a:73:df:1f:7e:21:fd:af:b0: 1e:a9:1b:a3:cb:74:5c:36:0e:13:0b:ae:cc:e7:56:8c:e4:74: c0:74:8a:ea:4f:68:18:e4:60:b9:a2:a6:79:1c:a9:f2:03:57: b8:7e:20:56:a6:56:a4:20:4c:f1:7c:f9:a8:da:9a:d4:12:e6: 8d:0d:94:e8:9c:37:0a:d0:52:65:9e:e2:cf:62:ea:82:ec:e8: 1b:dc:4e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuX0Vo4iZBe/UN8+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTA3MzYzNVoXDTI2MDExOTA4MzYzNVowLzEtMCsGA1UEAxMk NWRhMmNlNTQtM2MxOS00YWNmLWFkNjctNjcyODFlZGZlOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFKcGgsVqNPy4p1h9asr2WrguYMjdLUAewwj i6bK8U0S+ZNNQkHi1kWLHfi970h50M9bncls2pPs6pJzsL8xYgztD3zZhO3/OJZA bL6TptmqUqMO+oKQO9uuC+MQncn4pI2uhD8L0LL8jwfQ7y2pWa1xSsIJx/a/x0TT Iq4e3cYNyQZ7zn65YypliWG0ZOZfglnfSN9AGbZGJgQcNSW1hNelW5BrPB28nQcB Pm45M2dB2jMczd0ze3kJnVgeE4WTSkN19g3xt7PTCyofkl/a6fXbdHp3eMRumjCp 5w/q0edc+NdF+juCDcpAKrOnt6nFNxkpCi2nCUqisNgulI7q1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRVycSk+uMzXT9tCAppGclNtnjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTNkZDJlZTUtYmFkZS0z OGQ3LWE5YTYtYzY5MjM3OGFhYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgLiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB31GXDztmoTAnJO1SJiduRUhogswen+hP/UdQonGOd0cCdNr21+qlq QfJNxtkv7iOxkz70bem+ohKD1pdbWfv7zO/98vlkXljmppLEcmLStlvwD7lDjURe DM/s+p8VIrXyqIV3RUvh0icaZwgTLJakx/1WYe4r8XZZgFJz6fJ6zStLYvocvE3n dqTcQcCTiSrIJYIiwwQB9f5qvxV5UgFsHBeTYzfKqXA55gpz3x9+If2vsB6pG6PL dFw2DhMLrsznVozkdMB0iupPaBjkYLmipnkcqfIDV7h+IFamVqQgTPF8+ajamtQS 5o0NlOicNwrQUmWe4s9i6oLs6BvcTng= -----END CERTIFICATE-----Generated at Wed Nov 5 15:30:06 2025 by rpki-client