$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2d01ef3-eb48-3352-ba6a-85dc09f11bcb.roa File: c2d01ef3-eb48-3352-ba6a-85dc09f11bcb.roa (raw, json) Hash identifier: hATdS9bykTYBCV6YMHbSPppb0V0vu2p3V9KVhqW12h4= Subject key identifier: 7F:A9:C6:88:44:6C:05:E8:1A:87:9D:06:AA:1A:AD:B1:84:39:11:A6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB1376D3C22349DFC4CE13500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2d01ef3-eb48-3352-ba6a-85dc09f11bcb.roa Signing time: Thu 30 Oct 2025 09:57:27 +0000 ROA not before: Thu 30 Oct 2025 09:57:27 +0000 ROA not after: Wed 28 Jan 2026 10:57:27 +0000 asID: 141738 IP address blocks: 74.2.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:37:6d:3c:22:34:9d:fc:4c:e1:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 30 09:57:27 2025 GMT Not After : Jan 28 10:57:27 2026 GMT Subject: CN=5d227078-6bc2-4dd7-b0d6-2e3bc51d9fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:ac:f8:b6:1e:39:da:ed:5b:e5:c8:d1:fd: 4f:52:2d:73:8e:93:5f:c2:50:fa:87:40:f8:df:21: d7:76:00:6c:92:5e:b4:a2:77:45:ec:81:4c:15:28: d7:12:09:4a:70:70:5c:44:80:eb:85:9c:09:20:2b: e5:8e:d1:8a:7a:6c:c2:d5:4f:6f:db:19:7b:6e:35: 3e:ee:93:81:e9:94:56:76:ae:41:5c:4a:62:5a:6c: 2a:84:60:44:ec:6a:71:ca:00:bb:c7:d7:01:16:64: 77:04:24:48:38:f3:4a:bb:08:28:98:6b:fb:83:6e: 07:0a:ed:2c:5b:82:ed:25:fc:48:e2:93:56:f4:21: 41:05:1e:db:2c:24:41:e6:3e:1b:07:ba:25:28:4b: d0:f3:92:67:f4:aa:71:bb:56:c2:57:32:a8:81:d5: d2:eb:c2:be:26:71:8c:a2:40:4b:f5:56:11:2a:01: ef:0f:8a:88:f5:11:68:c0:04:01:c4:4d:cb:91:5f: 19:d5:7c:01:1c:80:24:e5:6b:68:3e:32:a9:fd:13: f5:ad:a9:9c:81:35:27:13:88:26:42:2a:5a:4d:c7: 37:57:12:75:51:b4:0d:74:7f:c3:da:aa:e8:6e:bb: 36:b7:70:a8:28:b0:29:d8:2a:88:f6:2d:cb:68:af: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A9:C6:88:44:6C:05:E8:1A:87:9D:06:AA:1A:AD:B1:84:39:11:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2d01ef3-eb48-3352-ba6a-85dc09f11bcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4b:4d:aa:72:f1:77:09:49:6c:4c:1b:f9:84:e4:4d:57:8f: e6:93:b4:9e:34:e1:52:3e:cc:fd:89:db:bc:24:f8:21:dd:46: b2:94:4e:1f:87:f3:c5:cb:17:31:37:04:ff:de:27:9d:c8:8d: 62:1a:8f:09:19:8f:12:6a:46:d3:4e:0c:13:39:5b:44:2c:a4: 9f:90:23:01:d5:ab:67:4c:5c:64:aa:92:de:18:df:69:9e:cd: 33:16:4b:c8:9e:44:70:6d:a4:fa:32:f7:59:ce:b1:01:e7:b1: 27:00:41:7b:35:bf:d3:91:6f:34:46:6e:7c:d4:db:c5:4d:04: 7e:e6:1c:d7:c4:34:12:92:5a:1e:e2:6c:fb:db:8b:03:e4:bb: bc:ac:80:b9:36:ac:0c:ac:83:e8:15:4d:48:6e:b8:8c:92:c4: 49:ec:0c:60:dc:25:69:3f:05:1c:3e:07:17:e5:47:70:74:73: 35:de:10:73:1c:ce:92:6d:f4:c3:11:6a:19:93:82:b6:a1:42: 38:77:28:7a:e8:0a:e8:6a:8c:60:87:a3:f1:a7:00:9c:90:a6: 0f:fa:5d:09:ce:8f:dd:92:e1:70:28:aa:4b:61:d5:10:8a:f5: 31:ee:5b:b1:df:4f:f5:f4:4f:42:88:33:2b:62:cb:33:73:38: 38:25:ca:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxN208IjSd/EzhNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAzMDA5NTcyN1oXDTI2MDEyODEwNTcyN1owLzEtMCsGA1UEAxMk NWQyMjcwNzgtNmJjMi00ZGQ3LWIwZDYtMmUzYmM1MWQ5ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWms+LYeOdrtW+XI0f1PUi1zjpNfwlD6h0D4 3yHXdgBskl60ondF7IFMFSjXEglKcHBcRIDrhZwJICvljtGKemzC1U9v2xl7bjU+ 7pOB6ZRWdq5BXEpiWmwqhGBE7GpxygC7x9cBFmR3BCRIOPNKuwgomGv7g24HCu0s W4LtJfxI4pNW9CFBBR7bLCRB5j4bB7olKEvQ85Jn9Kpxu1bCVzKogdXS68K+JnGM okBL9VYRKgHvD4qI9RFowAQBxE3LkV8Z1XwBHIAk5WtoPjKp/RP1ramcgTUnE4gm QipaTcc3VxJ1UbQNdH/D2qrobrs2t3CoKLAp2CqI9i3LaK/gcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+pxohEbAXoGoedBqoarbGEORGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzJkMDFlZjMtZWI0OC0z MzUyLWJhNmEtODVkYzA5ZjExYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9LTapy8XcJSWxMG/mE5E1Xj+aTtJ404VI+zP2J27wk+CHdRrKUTh+H 88XLFzE3BP/eJ53IjWIajwkZjxJqRtNODBM5W0QspJ+QIwHVq2dMXGSqkt4Y32me zTMWS8ieRHBtpPoy91nOsQHnsScAQXs1v9ORbzRGbnzU28VNBH7mHNfENBKSWh7i bPvbiwPku7ysgLk2rAysg+gVTUhuuIySxEnsDGDcJWk/BRw+BxflR3B0czXeEHMc zpJt9MMRahmTgrahQjh3KHroCuhqjGCHo/GnAJyQpg/6XQnOj92S4XAoqkth1RCK 9THuW7HfT/X0T0KIMytiyzNzODglyvY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:48:14 2025 by rpki-client