$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2333fd5-8a36-3bde-acd7-02e9713cbf85.roa File: f2333fd5-8a36-3bde-acd7-02e9713cbf85.roa (raw, json) Hash identifier: p0G6pBkDVJSHnpK8TQLhenQYk+PO/MeHCJac6KOC/YQ= Subject key identifier: 62:CB:9E:97:96:EC:FA:4E:DB:32:3C:89:8E:56:31:A7:4E:B0:09:E0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA3E9852CA6246195178E4C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2333fd5-8a36-3bde-acd7-02e9713cbf85.roa Signing time: Sat 25 Oct 2025 15:34:59 +0000 ROA not before: Sat 25 Oct 2025 15:34:59 +0000 ROA not after: Fri 23 Jan 2026 16:34:59 +0000 asID: 9304 IP address blocks: 74.1.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:e9:85:2c:a6:24:61:95:17:8e:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 25 15:34:59 2025 GMT Not After : Jan 23 16:34:59 2026 GMT Subject: CN=9de6da71-8212-4b21-a111-97403f924865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:44:36:f5:2c:93:50:8d:45:45:8f:5d:a7: 58:6c:b8:30:cf:c1:68:ab:2b:f5:4e:90:09:be:17: 31:51:2c:f6:48:76:b6:dc:a0:9e:2a:76:dc:53:12: b6:77:06:80:61:d1:4c:de:4a:12:21:53:dc:be:b7: 3f:fd:74:f9:b8:85:50:7c:bf:aa:b0:a5:9a:c8:00: 51:35:c9:dd:67:cd:21:29:2d:2f:a1:d7:34:b5:3b: fe:64:7f:d4:b7:1f:20:08:73:15:05:45:d1:e7:d3: bb:0b:cc:1d:6e:ac:97:0e:e0:80:47:e2:7c:f8:3c: 14:e5:5f:43:e8:61:58:28:27:4e:4d:e8:35:42:b3: e9:94:52:7b:83:b5:57:77:0c:ca:46:d6:14:e8:df: de:34:df:fd:17:ad:66:ec:50:59:21:7e:73:ae:05: b9:61:36:64:1f:9d:aa:7c:d1:be:84:32:70:b5:c1: a9:b8:fe:86:02:78:5c:9d:41:fe:f2:79:21:15:09: 65:91:c4:c3:9e:fb:d6:53:11:82:a7:9d:32:4e:f3: e0:06:0a:86:2a:28:f1:2a:47:85:4d:2a:51:ec:4f: b2:78:27:3d:7c:d4:15:65:1d:70:d0:dd:de:75:b4: 00:46:4c:fe:0c:3b:54:c7:ab:75:f7:80:73:bd:7f: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CB:9E:97:96:EC:FA:4E:DB:32:3C:89:8E:56:31:A7:4E:B0:09:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2333fd5-8a36-3bde-acd7-02e9713cbf85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:74:4c:a9:14:1f:d4:57:3c:54:1a:bd:74:b1:f1:d0:f2:20: 60:d6:7c:65:d4:21:ea:7b:a8:92:83:ed:19:01:81:82:69:b5: 58:79:3c:76:e9:5c:5f:7e:70:9d:a1:9c:70:69:7f:e6:5b:27: 81:bf:fb:03:36:16:de:e7:76:33:2a:3f:a7:df:a3:e0:0b:dc: 74:d8:66:5a:97:8a:cd:7f:c3:af:5f:9c:df:59:e0:5e:9f:9b: 2c:94:45:e1:be:0b:ff:f8:a1:cf:12:f4:d0:17:16:50:e0:9f: 3b:c4:98:da:3a:47:f4:fd:97:39:35:a4:2f:8b:06:d8:58:86: c4:99:a8:7f:1f:ea:56:4d:d2:06:56:57:b5:30:15:2e:4d:9b: 3e:fd:08:81:cf:bd:2a:e1:61:a2:b5:b6:ba:84:29:0f:4f:dc: 5b:dd:03:40:45:e3:cd:27:a9:07:c2:a5:63:ba:3a:05:c1:5e: 9e:f6:0d:9c:45:99:4f:d6:db:a9:af:6c:80:c5:35:8b:5b:c3: 23:d4:e3:81:0d:27:07:af:ea:4c:ee:49:52:d5:a0:1c:3c:65: 6f:81:e9:20:67:fb:3a:72:d5:09:90:ce:18:15:46:c0:ac:06: 89:d9:38:b0:63:cb:fa:be:14:8a:4f:fc:44:f2:b5:17:3c:36: 44:02:44:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuj6YUspiRhlReOTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNTE1MzQ1OVoXDTI2MDEyMzE2MzQ1OVowLzEtMCsGA1UEAxMk OWRlNmRhNzEtODIxMi00YjIxLWExMTEtOTc0MDNmOTI0ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjThENvUsk1CNRUWPXadYbLgwz8Foqyv1TpAJ vhcxUSz2SHa23KCeKnbcUxK2dwaAYdFM3koSIVPcvrc//XT5uIVQfL+qsKWayABR NcndZ80hKS0vodc0tTv+ZH/Utx8gCHMVBUXR59O7C8wdbqyXDuCAR+J8+DwU5V9D 6GFYKCdOTeg1QrPplFJ7g7VXdwzKRtYU6N/eNN/9F61m7FBZIX5zrgW5YTZkH52q fNG+hDJwtcGpuP6GAnhcnUH+8nkhFQllkcTDnvvWUxGCp50yTvPgBgqGKijxKkeF TSpR7E+yeCc9fNQVZR1w0N3edbQARkz+DDtUx6t194BzvX9IUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLLnpeW7PpO2zI8iY5WMadOsAngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjIzMzNmZDUtOGEzNi0z YmRlLWFjZDctMDJlOTcxM2NiZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx0TKkUH9RXPFQavXSx8dDyIGDWfGXUIep7qJKD7RkBgYJptVh5PHbp XF9+cJ2hnHBpf+ZbJ4G/+wM2Ft7ndjMqP6ffo+AL3HTYZlqXis1/w69fnN9Z4F6f myyUReG+C//4oc8S9NAXFlDgnzvEmNo6R/T9lzk1pC+LBthYhsSZqH8f6lZN0gZW V7UwFS5Nmz79CIHPvSrhYaK1trqEKQ9P3FvdA0BF480nqQfCpWO6OgXBXp72DZxF mU/W26mvbIDFNYtbwyPU44ENJwev6kzuSVLVoBw8ZW+B6SBn+zpy1QmQzhgVRsCs BonZOLBjy/q+FIpP/ETytRc8NkQCROk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:39 2025 by rpki-client