$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afca754d-8392-3b65-b4a3-bab2c8841b45.roa File: afca754d-8392-3b65-b4a3-bab2c8841b45.roa (raw, json) Hash identifier: K5c+kF6aks6xLvAQr3Fq2QLrF/M8SZs9TfAdU8ofd2k= Subject key identifier: CF:9A:5A:B7:02:8A:54:92:2F:CE:70:C8:99:03:97:DF:E9:84:45:78 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B97034312BEEBE48682DA61E8 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afca754d-8392-3b65-b4a3-bab2c8841b45.roa Signing time: Tue 21 Oct 2025 00:41:20 +0000 ROA not before: Tue 21 Oct 2025 00:41:20 +0000 ROA not after: Mon 19 Jan 2026 01:41:20 +0000 asID: 174 IP address blocks: 74.1.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:03:43:12:be:eb:e4:86:82:da:61:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 00:41:20 2025 GMT Not After : Jan 19 01:41:20 2026 GMT Subject: CN=84615d43-b601-4da5-9d6e-b0ac4130bfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:44:f6:21:ad:d9:22:92:53:99:1b:cb:9d:c9: f0:a6:7f:30:93:5b:3f:81:ae:c4:2e:68:d2:84:5c: bf:b0:d8:6d:78:dc:f9:c9:ca:37:8e:2f:04:9b:51: a6:2a:2b:b0:b8:76:f6:df:46:e1:01:43:49:f6:b8: d6:25:05:3f:88:ad:95:8a:3f:17:2a:59:a9:4e:0e: 48:7e:a6:e8:6a:d3:a3:bf:27:c4:83:37:af:a7:87: a0:8b:75:5e:58:f4:c9:a8:59:6d:ca:bc:49:d1:61: 50:34:eb:19:ba:4f:b3:e5:0e:36:e0:de:31:ae:eb: 94:22:ea:8f:ea:d1:65:a8:c4:84:00:77:73:e3:5e: 3e:62:b4:1f:09:a6:92:6e:b5:73:e5:44:39:03:d3: b0:e8:de:e4:d0:42:1a:db:2f:29:50:c8:d0:1a:91: 78:c7:b1:d2:6d:16:1d:60:4f:36:7a:fa:99:4b:90: 31:54:65:09:0c:f6:c9:2b:31:3a:dc:ec:2f:ce:d6: 35:5b:06:a4:a1:ef:25:42:ee:5f:2f:8e:4c:51:f7: 98:06:bb:62:9b:01:75:89:d6:ef:b3:cd:9f:3c:d1: 06:9e:d9:12:53:d7:0e:cd:97:b7:ce:75:28:7b:33: 76:1d:e8:9f:30:5f:a2:31:ef:05:a4:ac:4d:31:74: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:5A:B7:02:8A:54:92:2F:CE:70:C8:99:03:97:DF:E9:84:45:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afca754d-8392-3b65-b4a3-bab2c8841b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:30:d2:9c:48:c9:7d:2e:62:61:ff:15:7b:63:d6:b1:58:38: 68:78:7a:d2:71:ab:04:8d:48:f7:e8:20:a7:0a:43:9e:7a:78: 4e:ed:5a:be:3d:4a:a4:48:21:55:45:f7:8c:d3:89:9d:85:e0: d8:b9:c8:c3:67:d0:c1:15:15:7a:6a:be:6d:bb:e6:40:a6:6e: 87:76:c0:47:2d:41:58:e5:c4:67:d0:9a:34:5b:73:44:4e:bc: 3b:68:19:bb:0a:cd:7f:70:d7:f6:12:c2:26:9c:18:cc:23:ab: 52:66:cc:b6:23:1b:1f:fc:e8:ad:08:c6:be:07:a3:a1:b4:a0: 76:be:73:5b:a3:d8:bd:7b:87:4d:b8:81:3a:1f:8c:0e:7f:a6: 21:fc:ff:9a:3a:fa:5a:85:1b:cf:93:64:ca:b7:5c:04:94:4b: b3:3e:ce:9d:67:fe:24:24:46:3d:40:36:2d:65:4d:08:de:84: ec:31:aa:85:53:a5:4e:13:c5:f6:77:7f:33:a1:ba:dd:20:cc: bc:0c:ec:07:3f:6a:19:cb:ca:b6:d5:8b:a7:82:e6:a3:f4:20: c1:84:4d:8d:df:ac:8a:82:3a:0f:dc:56:fa:1c:07:be:09:32: f5:5f:6a:f4:c6:82:33:f3:64:24:ad:7a:bb:c4:ba:4b:76:8d: 37:9e:91:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXA0MSvuvkhoLaYegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAwNDEyMFoXDTI2MDExOTAxNDEyMFowLzEtMCsGA1UEAxMk ODQ2MTVkNDMtYjYwMS00ZGE1LTlkNmUtYjBhYzQxMzBiZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhET2Ia3ZIpJTmRvLncnwpn8wk1s/ga7ELmjS hFy/sNhteNz5yco3ji8Em1GmKiuwuHb230bhAUNJ9rjWJQU/iK2Vij8XKlmpTg5I fqboatOjvyfEgzevp4egi3VeWPTJqFltyrxJ0WFQNOsZuk+z5Q424N4xruuUIuqP 6tFlqMSEAHdz414+YrQfCaaSbrVz5UQ5A9Ow6N7k0EIa2y8pUMjQGpF4x7HSbRYd YE82evqZS5AxVGUJDPbJKzE63OwvztY1Wwakoe8lQu5fL45MUfeYBrtimwF1idbv s82fPNEGntkSU9cOzZe3znUoezN2HeifMF+iMe8FpKxNMXRVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+aWrcCilSSL85wyJkDl9/phEV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWZjYTc1NGQtODM5Mi0z YjY1LWI0YTMtYmFiMmM4ODQxYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgw0pxIyX0uYmH/FXtj1rFYOGh4etJxqwSNSPfoIKcKQ556eE7tWr49 SqRIIVVF94zTiZ2F4Ni5yMNn0MEVFXpqvm275kCmbod2wEctQVjlxGfQmjRbc0RO vDtoGbsKzX9w1/YSwiacGMwjq1JmzLYjGx/86K0Ixr4Ho6G0oHa+c1uj2L17h024 gTofjA5/piH8/5o6+lqFG8+TZMq3XASUS7M+zp1n/iQkRj1ANi1lTQjehOwxqoVT pU4TxfZ3fzOhut0gzLwM7Ac/ahnLyrbVi6eC5qP0IMGETY3frIqCOg/cVvocB74J MvVfavTGgjPzZCStervEukt2jTeekVI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:01:38 2025 by rpki-client