$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c428f053-f9a2-338a-b893-35fd47f217d4.roa File: c428f053-f9a2-338a-b893-35fd47f217d4.roa (raw, json) Hash identifier: 5UOgsor8m4CXgfVUFAHfLEcMZHfswHPqi+eEqGAMulE= Subject key identifier: 4E:14:B4:AE:84:DE:DB:11:67:BF:94:BC:9C:6B:5F:3F:82:E1:09:30 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9ABD9786BDDB36F451FE5AC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c428f053-f9a2-338a-b893-35fd47f217d4.roa Signing time: Wed 22 Oct 2025 08:44:11 +0000 ROA not before: Wed 22 Oct 2025 08:44:11 +0000 ROA not after: Tue 20 Jan 2026 09:44:11 +0000 asID: 137830 IP address blocks: 74.2.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:bd:97:86:bd:db:36:f4:51:fe:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 22 08:44:11 2025 GMT Not After : Jan 20 09:44:11 2026 GMT Subject: CN=6d1a104d-0af2-492e-929a-57466627a1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:ed:18:dd:82:5b:b9:d2:b5:c7:63:d2:67: 8d:76:46:4f:bf:6b:73:55:e8:64:80:ac:42:3b:52: 2a:3c:90:9f:98:53:f5:bc:21:33:05:ac:10:59:37: b1:70:1b:a8:79:9b:e6:fa:67:b8:36:29:a6:5f:cc: b9:b2:ce:db:23:c5:70:13:8b:5c:aa:37:39:6a:aa: 72:86:ee:d9:ed:09:67:16:15:79:c3:c0:f7:43:07: 26:a3:a6:63:f8:b3:f8:85:45:98:42:51:97:4c:78: 7b:f5:07:0d:a4:55:4b:7a:e7:36:46:f7:99:41:08: ed:11:ab:63:44:6c:5e:5f:3c:a9:8b:36:68:b3:a8: ad:ad:01:ef:f0:ed:9c:87:27:a8:c2:cd:df:64:23: f6:45:99:00:54:ab:e3:d3:24:84:a4:c1:a7:b9:74: 2d:dc:9f:c3:b1:0a:f2:16:a3:a2:fa:ca:b8:0d:d5: bd:01:34:ef:46:8b:27:0a:33:c7:84:e5:32:40:e0: 27:d6:4d:75:87:9b:7e:71:e0:69:5f:b2:7d:d5:cc: 64:6a:dc:4e:ab:f1:b6:f3:ad:1c:ab:1f:c4:31:ff: 16:c0:0e:d9:ca:e3:76:63:31:6e:7b:9a:1d:3e:d1: b5:52:36:b6:1e:df:15:fe:eb:4d:ae:37:1c:d4:fa: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:B4:AE:84:DE:DB:11:67:BF:94:BC:9C:6B:5F:3F:82:E1:09:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c428f053-f9a2-338a-b893-35fd47f217d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:bb:cb:20:a3:d4:f0:3c:1d:54:f4:0e:b9:5b:c6:70:7e:ec: 42:da:d6:e6:72:8d:96:1e:48:b7:3b:2a:f5:79:23:b4:e0:54: b6:5e:82:90:98:55:06:8b:84:14:e5:b6:02:ca:b3:a8:fb:73: 11:67:62:e4:f2:06:84:e1:71:a5:0d:b3:f1:94:bb:97:e1:d8: 64:dc:e9:af:12:f3:e0:25:16:e0:dc:d1:0c:cc:3f:f5:31:e2: 13:e6:f3:fc:3f:9a:8c:99:08:72:17:e0:6f:c7:b4:ea:bd:e7: 76:ee:95:e1:dc:e6:0d:34:84:21:1d:7d:e7:dd:2e:15:79:9e: 5f:eb:81:f8:be:fa:44:ec:15:7f:78:f9:7c:01:24:18:ef:dd: 95:4e:05:ad:e7:f1:ce:72:20:b6:c0:78:8c:ee:36:0d:b7:94: 52:3a:dc:7d:9a:59:e9:44:58:47:a4:05:bb:75:49:d8:f4:d1: e8:6a:91:8e:4c:fd:9b:47:a1:fa:60:96:50:21:68:52:e4:12: 9d:97:87:22:ed:29:da:20:19:fc:7a:6a:98:a9:3f:b6:66:51: 10:78:a8:97:6d:ec:d9:d2:ba:26:0d:18:8d:49:d7:6c:27:c9: c9:ed:46:12:b1:9a:83:67:6f:51:4f:39:37:77:eb:92:8d:7c: 06:59:74:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuavZeGvds29FH+WsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMjA4NDQxMVoXDTI2MDEyMDA5NDQxMVowLzEtMCsGA1UEAxMk NmQxYTEwNGQtMGFmMi00OTJlLTkyOWEtNTc0NjY2MjdhMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi3tGN2CW7nStcdj0meNdkZPv2tzVehkgKxC O1IqPJCfmFP1vCEzBawQWTexcBuoeZvm+me4NimmX8y5ss7bI8VwE4tcqjc5aqpy hu7Z7QlnFhV5w8D3Qwcmo6Zj+LP4hUWYQlGXTHh79QcNpFVLeuc2RveZQQjtEatj RGxeXzypizZos6itrQHv8O2chyeows3fZCP2RZkAVKvj0ySEpMGnuXQt3J/DsQry FqOi+sq4DdW9ATTvRosnCjPHhOUyQOAn1k11h5t+ceBpX7J91cxkatxOq/G2860c qx/EMf8WwA7ZyuN2YzFue5odPtG1Uja2Ht8V/utNrjcc1PqwcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4UtK6E3tsRZ7+UvJxrXz+C4QkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzQyOGYwNTMtZjlhMi0z MzhhLWI4OTMtMzVmZDQ3ZjIxN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe7yyCj1PA8HVT0DrlbxnB+7ELa1uZyjZYeSLc7KvV5I7TgVLZegpCY VQaLhBTltgLKs6j7cxFnYuTyBoThcaUNs/GUu5fh2GTc6a8S8+AlFuDc0QzMP/Ux 4hPm8/w/moyZCHIX4G/HtOq953buleHc5g00hCEdfefdLhV5nl/rgfi++kTsFX94 +XwBJBjv3ZVOBa3n8c5yILbAeIzuNg23lFI63H2aWelEWEekBbt1Sdj00ehqkY5M /ZtHofpgllAhaFLkEp2XhyLtKdogGfx6apipP7ZmURB4qJdt7NnSuiYNGI1J12wn ycntRhKxmoNnb1FPOTd365KNfAZZdKc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:58:58 2025 by rpki-client