$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b717bae2-7a30-310b-97b9-aa9e610a1004.roa File: b717bae2-7a30-310b-97b9-aa9e610a1004.roa (raw, json) Hash identifier: j6E4GjZ81oNF8CoLCJliHNWnDMGWE7HoXshrDs9wOfo= Subject key identifier: FC:A6:FF:F1:3D:5D:8F:A4:5B:D0:4E:17:5A:C4:93:9C:98:EC:21:76 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA38BF0D0982048A2C3346400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b717bae2-7a30-310b-97b9-aa9e610a1004.roa Signing time: Sat 25 Oct 2025 12:26:25 +0000 ROA not before: Sat 25 Oct 2025 12:26:25 +0000 ROA not after: Fri 23 Jan 2026 13:26:25 +0000 asID: 9304 IP address blocks: 74.2.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:8b:f0:d0:98:20:48:a2:c3:34:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 25 12:26:25 2025 GMT Not After : Jan 23 13:26:25 2026 GMT Subject: CN=1b7a4f02-4f96-48b2-b67a-b6bf24cd1fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:a2:d6:08:11:8c:82:47:65:f3:3d:a9:eb: 86:d1:22:17:bd:3c:73:f6:b7:92:f1:7f:2c:63:86: dc:1f:9d:69:9e:04:49:89:c6:bd:54:90:e0:d8:02: eb:54:98:88:e8:03:65:51:2e:84:a5:bd:f9:b2:cf: 0b:05:1f:88:1b:6c:97:ee:74:32:a7:0a:85:71:2e: 70:28:2e:c8:ca:d7:5f:36:59:aa:71:2f:86:0b:91: 36:47:d1:d2:a5:09:e4:d0:79:07:02:a1:2e:0d:74: c7:a4:3a:90:0f:1a:40:64:0a:7c:28:31:5c:3f:dc: 0d:2e:e2:b9:37:3d:06:b2:71:92:f6:69:27:97:57: d4:39:0b:39:ae:83:7a:e1:b9:d0:6b:14:5d:97:23: b1:9d:dd:ad:fc:36:b5:24:55:59:5d:4c:11:d0:27: cc:fa:b4:9a:73:a0:68:77:1c:7b:f2:ce:bd:18:bc: 8a:dc:45:5a:fb:2b:be:6f:34:80:b5:00:18:10:4c: b9:45:7b:fe:4d:c7:3d:66:0a:83:c8:45:1f:6e:e4: 8b:fd:66:e0:37:ef:a6:30:f0:a9:f7:e8:4b:9d:ae: 9e:66:35:aa:9d:21:a7:f5:e1:20:43:86:8b:9b:8d: ef:fc:54:ce:97:ac:49:89:a4:ff:3f:f9:e0:94:f7: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:FF:F1:3D:5D:8F:A4:5B:D0:4E:17:5A:C4:93:9C:98:EC:21:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b717bae2-7a30-310b-97b9-aa9e610a1004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1e:f1:e4:2c:3d:c7:16:fd:da:a9:29:65:fa:2d:e2:d8:c6: 36:70:69:5f:d8:27:28:59:00:2d:9e:d2:68:64:a0:e8:60:6a: 6b:7e:30:c6:3a:48:c1:6b:d9:87:64:cf:d8:e8:98:3a:6d:00: 8b:ce:3a:27:e9:23:e4:9c:e2:14:eb:ac:f7:85:15:15:da:59: 27:91:da:3c:c5:72:74:8f:2f:f2:17:88:cd:a7:67:82:8b:4f: 5d:fe:44:ef:61:02:b0:5f:56:66:29:81:58:12:a9:f6:aa:f9: da:77:6f:dd:63:40:00:87:72:f6:2d:8c:70:6e:7f:a4:35:e9: 55:fd:d5:cd:f0:b9:85:be:a3:6f:ca:24:8e:d1:47:12:81:eb: dc:3b:f5:93:70:f2:82:0e:cf:66:74:cb:06:2d:c5:40:67:91: 44:f3:09:c5:15:0a:44:f3:56:f9:13:b0:20:0b:29:de:54:0d: a3:28:b5:f3:0d:d0:cc:f1:9d:8c:2d:e6:2c:1e:61:ab:16:44: e2:e8:27:52:52:2e:d5:32:86:59:80:91:05:27:bc:f6:f8:fe: 6e:37:1b:6c:71:eb:c9:2f:3a:28:fc:c8:44:9c:0f:e8:1b:f9: 78:0c:bd:7d:ba:ed:d6:f6:6d:f6:43:83:c0:58:4e:da:48:53: 9a:43:71:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuji/DQmCBIosM0ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNTEyMjYyNVoXDTI2MDEyMzEzMjYyNVowLzEtMCsGA1UEAxMk MWI3YTRmMDItNGY5Ni00OGIyLWI2N2EtYjZiZjI0Y2QxZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFGi1ggRjIJHZfM9qeuG0SIXvTxz9reS8X8s Y4bcH51pngRJica9VJDg2ALrVJiI6ANlUS6Epb35ss8LBR+IG2yX7nQypwqFcS5w KC7IytdfNlmqcS+GC5E2R9HSpQnk0HkHAqEuDXTHpDqQDxpAZAp8KDFcP9wNLuK5 Nz0GsnGS9mknl1fUOQs5roN64bnQaxRdlyOxnd2t/Da1JFVZXUwR0CfM+rSac6Bo dxx78s69GLyK3EVa+yu+bzSAtQAYEEy5RXv+Tcc9ZgqDyEUfbuSL/WbgN++mMPCp 9+hLna6eZjWqnSGn9eEgQ4aLm43v/FTOl6xJiaT/P/nglPefZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPym//E9XY+kW9BOF1rEk5yY7CF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjcxN2JhZTItN2EzMC0z MTBiLTk3YjktYWE5ZTYxMGExMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACce8eQsPccW/dqpKWX6LeLYxjZwaV/YJyhZAC2e0mhkoOhgamt+MMY6 SMFr2Ydkz9jomDptAIvOOifpI+Sc4hTrrPeFFRXaWSeR2jzFcnSPL/IXiM2nZ4KL T13+RO9hArBfVmYpgVgSqfaq+dp3b91jQACHcvYtjHBuf6Q16VX91c3wuYW+o2/K JI7RRxKB69w79ZNw8oIOz2Z0ywYtxUBnkUTzCcUVCkTzVvkTsCALKd5UDaMotfMN 0MzxnYwt5iweYasWROLoJ1JSLtUyhlmAkQUnvPb4/m43G2xx68kvOij8yEScD+gb +XgMvX267db2bfZDg8BYTtpIU5pDcVw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:32 2025 by rpki-client