$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa File: c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa (raw, json) Hash identifier: mxV26xsny9LcNMbh4k/K+G8P7s7Ynkr2JvURw5t8A08= Subject key identifier: C9:A7:BA:D8:DC:CA:70:1B:F7:45:35:E3:B7:09:8C:8F:20:35:F3:D5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA1198A730F364121CA7A0600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa Signing time: Fri 24 Oct 2025 15:24:18 +0000 ROA not before: Fri 24 Oct 2025 15:24:18 +0000 ROA not after: Thu 22 Jan 2026 16:24:18 +0000 asID: 5650 IP address blocks: 74.2.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:19:8a:73:0f:36:41:21:ca:7a:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 15:24:18 2025 GMT Not After : Jan 22 16:24:18 2026 GMT Subject: CN=1c291b46-7e72-405c-b2d8-215789f1f67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:83:ae:66:6c:14:66:98:eb:79:6d:3a:02: 23:cb:62:81:82:c6:af:3d:24:7c:5b:45:97:f8:9e: 20:33:22:4f:35:a4:aa:25:2d:24:ea:01:2b:e9:d8: e1:98:9e:3d:b3:7c:4e:fd:45:b1:ef:f6:ea:23:9e: cb:53:48:84:c4:46:57:f6:a9:16:d5:c5:e7:de:17: 55:73:7f:cc:bc:f0:7f:f6:2c:37:8d:9d:c3:bc:7d: 1f:24:7b:18:3e:2d:e4:4a:bb:6b:a7:79:dd:95:d6: 7e:e9:46:e6:37:08:37:35:e2:03:1f:4b:9b:b4:6a: e6:37:1c:4e:9b:2f:22:69:aa:1d:d2:68:27:6c:77: 30:85:5f:1e:83:2f:c9:c5:58:36:10:47:97:a5:b2: 84:31:d3:ba:e1:69:e0:50:4d:0a:c5:ac:d3:bc:1e: e6:36:a4:c6:6a:36:9e:d5:44:3d:b3:fd:7b:b8:84: 90:7c:b2:18:c4:5c:b1:7f:a9:1e:f5:6e:43:87:41: aa:b8:be:ea:80:30:3a:6a:d9:1c:b5:65:ba:9e:03: 08:7d:bb:c8:a1:8a:17:0e:bc:05:e9:b5:14:24:52: 90:33:f7:90:98:df:bd:40:27:2b:b0:89:9b:97:13: 41:90:f3:f0:18:c3:d0:1a:49:fb:16:3b:3f:89:bc: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:BA:D8:DC:CA:70:1B:F7:45:35:E3:B7:09:8C:8F:20:35:F3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c88967c9-c0d5-3fd0-8264-6a4c3912b3b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:41:94:e8:72:cc:89:75:61:f1:6c:52:e2:fa:cf:23:7a:90: 62:c1:f9:f1:df:d0:23:47:84:d8:d8:a1:6a:88:f2:db:df:22: 2b:fb:5a:a1:4e:b2:28:42:f6:17:8b:56:14:2d:c3:01:c0:6f: a3:2e:ee:87:2d:b7:d7:43:d7:81:76:44:d4:63:61:b6:c8:6b: 6f:d4:4e:8a:3a:75:37:5f:38:c5:33:72:3d:8f:b3:15:01:b9: e6:87:78:92:ab:bb:e3:13:e2:a7:d2:81:c9:e7:3b:a6:38:fc: 3a:8b:96:c2:bb:36:c4:16:ef:9e:e1:d5:76:74:c0:40:3e:5d: ef:5d:24:eb:61:5b:96:dc:04:fc:ac:3d:d7:4e:66:fe:ca:c6: 8e:b7:e6:6a:6b:6e:ae:53:e8:60:ab:1d:6b:c6:51:21:05:16: 7b:60:32:7b:36:8e:82:7d:9e:50:2d:9d:dd:5c:16:f4:35:c8: 54:96:c1:e2:2a:87:81:68:42:a1:6c:87:b2:4a:7c:f9:f7:09: 61:ae:09:34:9a:75:19:90:3c:02:8a:b4:85:1f:6d:d8:7f:26: d8:47:b2:95:08:06:58:21:43:0c:ff:36:a1:45:36:a2:9d:5b: 04:19:91:69:9e:2e:e1:4a:e1:cf:13:c3:67:f9:55:0d:3e:84: 00:4b:a3:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhGYpzDzZBIcp6BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNDE1MjQxOFoXDTI2MDEyMjE2MjQxOFowLzEtMCsGA1UEAxMk MWMyOTFiNDYtN2U3Mi00MDVjLWIyZDgtMjE1Nzg5ZjFmNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6aDrmZsFGaY63ltOgIjy2KBgsavPSR8W0WX +J4gMyJPNaSqJS0k6gEr6djhmJ49s3xO/UWx7/bqI57LU0iExEZX9qkW1cXn3hdV c3/MvPB/9iw3jZ3DvH0fJHsYPi3kSrtrp3ndldZ+6UbmNwg3NeIDH0ubtGrmNxxO my8iaaod0mgnbHcwhV8egy/JxVg2EEeXpbKEMdO64WngUE0KxazTvB7mNqTGajae 1UQ9s/17uISQfLIYxFyxf6ke9W5Dh0GquL7qgDA6atkctWW6ngMIfbvIoYoXDrwF 6bUUJFKQM/eQmN+9QCcrsImblxNBkPPwGMPQGkn7Fjs/ibzTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmnutjcynAb90U147cJjI8gNfPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzg4OTY3YzktYzBkNS0z ZmQwLTgyNjQtNmE0YzM5MTJiM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgLaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElBlOhyzIl1YfFsUuL6zyN6kGLB+fHf0CNHhNjYoWqI8tvfIiv7WqFO sihC9heLVhQtwwHAb6Mu7octt9dD14F2RNRjYbbIa2/UToo6dTdfOMUzcj2PsxUB ueaHeJKru+MT4qfSgcnnO6Y4/DqLlsK7NsQW757h1XZ0wEA+Xe9dJOthW5bcBPys PddOZv7Kxo635mprbq5T6GCrHWvGUSEFFntgMns2joJ9nlAtnd1cFvQ1yFSWweIq h4FoQqFsh7JKfPn3CWGuCTSadRmQPAKKtIUfbdh/JthHspUIBlghQwz/NqFFNqKd WwQZkWmeLuFK4c8Tw2f5VQ0+hABLo5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:56 2025 by rpki-client