$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4d2a075-50b6-3f85-bb4e-8e10ff7c6153.roa File: a4d2a075-50b6-3f85-bb4e-8e10ff7c6153.roa (raw, json) Hash identifier: XYBfuwJnbpNruSVqN3+qzYyhbhD9BNk69lkcN7BOyy4= Subject key identifier: 49:96:AA:F3:0B:97:86:49:EC:8B:46:DC:60:DF:6D:B0:62:A8:E3:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B822A5B548386551283FED500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4d2a075-50b6-3f85-bb4e-8e10ff7c6153.roa Signing time: Mon 13 Oct 2025 13:28:08 +0000 ROA not before: Mon 13 Oct 2025 13:28:08 +0000 ROA not after: Sun 11 Jan 2026 14:28:08 +0000 asID: 2914 IP address blocks: 74.2.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:2a:5b:54:83:86:55:12:83:fe:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 13 13:28:08 2025 GMT Not After : Jan 11 14:28:08 2026 GMT Subject: CN=afd153b6-c7ae-4fe2-b573-ad6c1b01a12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:99:83:2a:d3:50:9e:88:61:6a:28:45:10: 3f:39:a2:9c:18:03:b8:36:a7:b6:e8:8c:ee:5e:65: 5d:a8:eb:9c:d3:5e:90:d9:d2:70:94:fe:18:5d:fc: f1:2c:b9:05:2f:9c:19:69:7c:fb:3d:d1:bd:6f:df: da:e7:0d:61:73:ee:e9:8d:fd:4e:16:79:05:9e:5b: 2a:5f:1c:c3:54:23:07:0a:25:5f:7c:02:a7:ee:bf: 2e:ef:3d:03:67:2f:de:30:3a:20:e5:99:3b:ad:32: da:c8:85:67:bf:b6:66:c9:bc:ee:b7:e3:89:09:39: 96:32:72:0a:d8:d2:03:d1:1d:fc:49:22:88:14:92: 62:8c:9c:51:93:da:3b:b2:76:a1:7e:a2:03:2b:02: a1:6c:27:e1:b6:ec:5a:25:51:67:d0:17:12:29:07: 26:8f:97:24:c6:1d:e9:9e:d7:d2:b7:95:0e:05:61: 24:28:9a:b0:28:5b:87:18:13:96:54:d6:c5:0f:04: 4f:79:57:f8:a0:01:7a:be:e9:d4:67:23:76:4a:8b: 74:02:c7:a0:7f:43:fd:18:83:6f:ec:d4:b2:96:90: f3:e1:9a:7e:4f:51:1a:e0:6e:76:82:26:68:e0:45: 2d:ba:5a:ed:da:a1:4a:e3:ee:0b:e2:3e:19:07:9a: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:AA:F3:0B:97:86:49:EC:8B:46:DC:60:DF:6D:B0:62:A8:E3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4d2a075-50b6-3f85-bb4e-8e10ff7c6153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6b:4a:42:b0:97:ef:1f:14:c3:92:c6:48:71:08:c5:f7:1c: 08:d6:87:f6:d0:73:d6:a8:58:d9:df:8b:44:1a:3d:83:30:66: 86:a7:78:57:ea:b1:bd:d2:9b:08:77:d8:b4:b2:59:c8:18:33: 41:2d:24:90:f4:19:f6:c2:d8:80:38:04:90:ab:da:d0:73:e4: 43:26:12:0e:49:a4:ea:4e:d8:fe:2a:d5:c9:59:f6:28:55:8b: c1:41:b0:e2:4e:58:51:1e:d1:a2:d1:d8:a2:27:0d:40:a1:c7: 6f:ce:2e:be:fc:12:fd:fc:ab:7b:2b:c3:6b:0e:69:54:b1:9e: 48:84:01:7b:e3:09:1a:b5:33:67:90:27:3f:97:b4:ba:72:5b: b9:1e:0f:c0:58:8e:cd:6b:8e:80:c0:50:c6:8b:e7:8a:96:91: a2:44:78:6f:c2:93:c0:1e:87:47:94:e2:fa:15:e2:9d:f2:96: fb:ba:28:c9:54:2b:c8:54:6a:8d:ee:f8:42:99:03:fd:1e:12: 6b:a3:db:5a:8b:2f:62:f2:e5:b3:5b:d2:2a:3e:aa:b6:84:70: 69:72:6d:04:88:7e:4b:8d:fd:41:ce:7e:31:d3:52:b8:36:5d: 21:ef:23:0b:fc:a0:d8:be:d6:7a:87:01:53:17:f8:41:b4:9f: 15:1d:d2:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCKltUg4ZVEoP+1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxMzEzMjgwOFoXDTI2MDExMTE0MjgwOFowLzEtMCsGA1UEAxMk YWZkMTUzYjYtYzdhZS00ZmUyLWI1NzMtYWQ2YzFiMDFhMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjyZgyrTUJ6IYWooRRA/OaKcGAO4Nqe26Izu XmVdqOuc016Q2dJwlP4YXfzxLLkFL5wZaXz7PdG9b9/a5w1hc+7pjf1OFnkFnlsq XxzDVCMHCiVffAKn7r8u7z0DZy/eMDog5Zk7rTLayIVnv7Zmybzut+OJCTmWMnIK 2NID0R38SSKIFJJijJxRk9o7snahfqIDKwKhbCfhtuxaJVFn0BcSKQcmj5ckxh3p ntfSt5UOBWEkKJqwKFuHGBOWVNbFDwRPeVf4oAF6vunUZyN2Sot0Asegf0P9GINv 7NSylpDz4Zp+T1Ea4G52giZo4EUtulrt2qFK4+4L4j4ZB5qonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmWqvMLl4ZJ7ItG3GDfbbBiqOPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTRkMmEwNzUtNTBiNi0z Zjg1LWJiNGUtOGUxMGZmN2M2MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgLmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5rSkKwl+8fFMOSxkhxCMX3HAjWh/bQc9aoWNnfi0QaPYMwZoaneFfq sb3Smwh32LSyWcgYM0EtJJD0GfbC2IA4BJCr2tBz5EMmEg5JpOpO2P4q1clZ9ihV i8FBsOJOWFEe0aLR2KInDUChx2/OLr78Ev38q3srw2sOaVSxnkiEAXvjCRq1M2eQ Jz+XtLpyW7keD8BYjs1rjoDAUMaL54qWkaJEeG/Ck8Aeh0eU4voV4p3ylvu6KMlU K8hUao3u+EKZA/0eEmuj21qLL2Ly5bNb0io+qraEcGlybQSIfkuN/UHOfjHTUrg2 XSHvIwv8oNi+1nqHAVMX+EG0nxUd0nk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:28 2025 by rpki-client