$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd01e7f2-4d16-3ef2-9db9-a5527fd9cd9f.roa File: bd01e7f2-4d16-3ef2-9db9-a5527fd9cd9f.roa (raw, json) Hash identifier: tKK3z47K14jg1jOZukJizv2fcaFMzQc6fLVHVcTxs4Q= Subject key identifier: 90:D9:55:61:1E:F9:21:EF:C7:5D:05:38:B0:28:DF:4A:B4:58:AF:76 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9703C62D50D06CE664A010A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd01e7f2-4d16-3ef2-9db9-a5527fd9cd9f.roa Signing time: Tue 21 Oct 2025 00:42:22 +0000 ROA not before: Tue 21 Oct 2025 00:42:22 +0000 ROA not after: Mon 19 Jan 2026 01:42:22 +0000 asID: 174 IP address blocks: 74.1.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:03:c6:2d:50:d0:6c:e6:64:a0:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 00:42:22 2025 GMT Not After : Jan 19 01:42:22 2026 GMT Subject: CN=97fd5e05-17a2-4842-803c-5d954f7f671a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:a2:68:81:2f:7d:18:29:0a:0b:39:85:30: 5a:68:33:a9:aa:68:10:d6:1b:fb:05:1e:62:ed:b0: 18:eb:05:d4:2f:a2:3c:bd:3e:f3:d6:f7:b4:59:17: 4f:fc:46:c9:90:af:1d:32:1c:4f:2a:bb:f7:4e:32: d4:06:62:01:e4:39:6e:94:90:56:ce:4b:95:20:8e: f3:41:a4:86:c9:97:b8:af:70:cd:8c:84:ac:bc:43: 3e:36:62:14:a3:fe:27:4e:73:64:14:e8:88:68:0c: 76:03:9e:6b:d6:7d:fd:b5:ba:c4:d5:6e:b3:36:23: 28:b2:45:63:74:f7:9d:06:02:65:93:56:1e:68:18: 88:fe:37:ff:6f:9a:65:90:9e:80:f6:9f:84:fd:a4: 94:7e:93:9b:a5:a5:38:71:83:2c:08:44:33:82:64: 3a:d6:99:ed:6a:c1:d0:f4:7b:c9:68:35:10:b2:a0: fc:5e:24:eb:0d:d5:59:83:cc:c6:47:b7:db:55:59: 69:50:2c:31:ec:e9:53:ec:fb:36:70:14:22:17:35: 92:d8:a1:4c:96:f2:0e:cb:1a:76:73:cd:e4:6d:54: 7d:f7:4b:cc:73:b1:c8:62:44:bd:64:87:b5:25:1a: 15:1b:a4:2a:f5:5d:4c:a2:1f:a2:d1:cd:fe:50:7b: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D9:55:61:1E:F9:21:EF:C7:5D:05:38:B0:28:DF:4A:B4:58:AF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd01e7f2-4d16-3ef2-9db9-a5527fd9cd9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c9:e0:c2:52:3e:41:a4:74:a4:6b:e0:4f:b5:51:51:6f:46: ad:d0:94:46:9b:e1:54:79:4e:b4:79:91:cc:76:2f:dd:9b:76: 99:b5:67:11:0d:37:27:d1:71:82:9f:ff:b9:b4:6e:f6:1d:a2: 7d:b6:01:f5:ec:8c:18:52:65:29:27:f0:8b:e1:db:df:e1:e6: 30:57:c2:82:81:80:29:31:26:b3:09:ea:82:ce:b7:2f:72:80: 5a:f8:84:1e:49:7f:29:13:c8:b1:4a:57:aa:16:86:b1:d2:dc: 95:b4:ba:98:eb:fe:ea:53:c3:31:57:de:22:9b:9a:5e:40:97: ee:f3:06:8d:52:8a:93:88:22:8d:8e:e1:1a:4f:21:aa:11:de: 96:b8:48:b8:65:d4:df:1b:15:c3:20:5b:9b:43:4c:8b:b4:20: 45:28:e0:c6:f3:30:bb:ab:53:fa:13:dd:c0:63:58:d5:fe:07: 7c:68:32:d5:a2:40:e5:a4:ae:77:15:3b:41:67:0e:81:06:f0: 14:6b:96:f2:1f:63:40:d2:4e:fc:19:5b:c3:83:5d:8d:d1:63: 00:f0:74:d0:72:60:b3:73:53:b5:9e:c1:34:9d:12:67:10:24: d7:84:c6:75:9d:89:69:99:69:34:be:d0:cd:b9:90:a0:c8:64: 42:87:48:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXA8YtUNBs5mSgEKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAwNDIyMloXDTI2MDExOTAxNDIyMlowLzEtMCsGA1UEAxMk OTdmZDVlMDUtMTdhMi00ODQyLTgwM2MtNWQ5NTRmN2Y2NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfeiaIEvfRgpCgs5hTBaaDOpqmgQ1hv7BR5i 7bAY6wXUL6I8vT7z1ve0WRdP/EbJkK8dMhxPKrv3TjLUBmIB5DlulJBWzkuVII7z QaSGyZe4r3DNjISsvEM+NmIUo/4nTnNkFOiIaAx2A55r1n39tbrE1W6zNiMoskVj dPedBgJlk1YeaBiI/jf/b5plkJ6A9p+E/aSUfpObpaU4cYMsCEQzgmQ61pntasHQ 9HvJaDUQsqD8XiTrDdVZg8zGR7fbVVlpUCwx7OlT7Ps2cBQiFzWS2KFMlvIOyxp2 c83kbVR990vMc7HIYkS9ZIe1JRoVG6Qq9V1Moh+i0c3+UHsl/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDZVWEe+SHvx10FOLAo30q0WK92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmQwMWU3ZjItNGQxNi0z ZWYyLTlkYjktYTU1MjdmZDljZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXJ4MJSPkGkdKRr4E+1UVFvRq3QlEab4VR5TrR5kcx2L92bdpm1ZxEN NyfRcYKf/7m0bvYdon22AfXsjBhSZSkn8Ivh29/h5jBXwoKBgCkxJrMJ6oLOty9y gFr4hB5JfykTyLFKV6oWhrHS3JW0upjr/upTwzFX3iKbml5Al+7zBo1SipOIIo2O 4RpPIaoR3pa4SLhl1N8bFcMgW5tDTIu0IEUo4MbzMLurU/oT3cBjWNX+B3xoMtWi QOWkrncVO0FnDoEG8BRrlvIfY0DSTvwZW8ODXY3RYwDwdNByYLNzU7WewTSdEmcQ JNeExnWdiWmZaTS+0M25kKDIZEKHSEc= -----END CERTIFICATE-----Generated at Wed Nov 5 21:38:02 2025 by rpki-client