$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa File: a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa (raw, json) Hash identifier: oFX4HQVv+pYxz3ieiIuE6x4jdWIdMNgNfRLQDd+wRpc= Subject key identifier: C6:92:CA:20:2B:AC:1D:D3:5E:AA:48:E7:75:A2:E8:AF:E3:C9:00:BA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E1C04C100A05D7A29A6C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 40640 IP address blocks: 71.94.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1c:04:c1:00:a0:5d:7a:29:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=286fc8cd-587a-4d6d-9d1a-32de09f5d7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:00:cc:e1:f6:f4:99:2f:39:32:2d:4d:0e:0e: c4:db:99:1b:eb:c0:15:64:7f:65:85:af:e4:5c:3e: 20:46:11:82:4c:59:ac:a5:bd:09:bd:74:9d:a0:bb: 7d:23:67:c4:a8:ce:92:70:c8:74:69:0e:5e:13:da: 4a:40:ba:1f:bc:ae:05:ee:b2:72:e3:ed:9e:4f:38: ae:92:e5:ac:83:4f:25:fc:ac:e3:97:c0:95:18:ea: b6:41:bf:d7:12:29:ec:2d:ab:46:cc:50:42:c7:cb: 3d:6c:be:0b:ac:39:4e:df:80:32:3f:b4:df:ba:a1: 5c:67:a0:04:42:bb:f8:7d:fe:59:ee:eb:82:f8:a5: 23:d7:18:8d:84:54:e0:67:29:2f:94:05:57:e9:c0: b3:28:f7:cb:4e:9a:5b:93:f1:a2:5b:8c:8b:50:8d: 4e:6d:47:4b:e4:c2:e0:55:f1:25:0c:f7:cd:22:c5: 89:ce:62:b5:5c:4a:eb:66:f8:c0:da:c8:15:72:1e: dc:54:23:de:63:15:a1:99:35:8a:2b:2c:9d:ad:84: 0e:9b:fd:05:70:73:2a:a7:8f:2c:b9:66:41:e0:67: a5:d8:92:80:3b:c1:07:de:4e:b0:79:b0:aa:d9:d0: eb:81:51:b3:52:66:3d:bd:3c:44:3f:05:46:bd:7e: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:92:CA:20:2B:AC:1D:D3:5E:AA:48:E7:75:A2:E8:AF:E3:C9:00:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1ecb0c9-28e2-3d5f-a224-63f69c3a6b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.94.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:27:ed:28:ef:dd:db:b2:cf:2e:05:fb:40:7d:4c:b6:a4:6d: e5:d5:66:9b:1c:93:a5:06:81:9d:86:d1:07:d7:17:95:d7:ff: c0:d8:98:9b:02:2e:a4:37:ce:b9:dd:41:02:fb:71:af:43:a7: af:25:02:4e:53:e1:e4:21:b4:69:02:dc:ab:40:eb:ea:79:a5: 24:35:d6:d8:ad:e7:0d:50:23:12:31:05:3e:94:80:8e:6e:20: 5f:c5:20:78:3f:f5:1c:81:c7:f2:a6:9c:9c:d9:98:ea:bd:3a: ed:7f:95:e1:7b:12:57:d4:3c:0c:df:eb:84:77:6b:9f:60:55: b5:25:39:32:e4:cb:8a:ea:29:41:93:87:d6:d5:4d:a4:3e:bb: ad:ef:c2:38:c1:6a:d9:ec:13:23:e8:e7:64:37:8e:ad:ca:1e: 15:48:01:ab:fb:96:83:7d:b4:6a:3e:8b:aa:8f:31:9f:8e:e3: 69:f4:84:02:a8:07:7a:9f:af:7f:01:cc:62:07:4f:bd:10:14: 0a:8a:e3:03:6b:e0:bc:d2:35:7c:c2:ae:2b:de:92:22:c8:7d: eb:ac:ed:5c:eb:7d:a5:1e:4b:18:64:75:ce:75:5f:f1:a0:f1: d0:e2:c8:84:79:65:70:ba:c0:67:29:9d:ee:8c:fa:d6:e3:de: 36:72:e7:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHhwEwQCgXXoppsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Mjg2ZmM4Y2QtNTg3YS00ZDZkLTlkMWEtMzJkZTA5ZjVkN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwDM4fb0mS85Mi1NDg7E25kb68AVZH9lha/k XD4gRhGCTFmspb0JvXSdoLt9I2fEqM6ScMh0aQ5eE9pKQLofvK4F7rJy4+2eTziu kuWsg08l/Kzjl8CVGOq2Qb/XEinsLatGzFBCx8s9bL4LrDlO34AyP7TfuqFcZ6AE Qrv4ff5Z7uuC+KUj1xiNhFTgZykvlAVX6cCzKPfLTppbk/GiW4yLUI1ObUdL5MLg VfElDPfNIsWJzmK1XErrZvjA2sgVch7cVCPeYxWhmTWKKyydrYQOm/0FcHMqp48s uWZB4Gel2JKAO8EH3k6webCq2dDrgVGzUmY9vTxEPwVGvX7mjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaSyiArrB3TXqpI53Wi6K/jyQC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTFlY2IwYzktMjhlMi0z ZDVmLWEyMjQtNjNmNjljM2E2YjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR17UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4n7Sjv3duyzy4F+0B9TLakbeXVZpsck6UGgZ2G0QfXF5XX/8DYmJsC LqQ3zrndQQL7ca9Dp68lAk5T4eQhtGkC3KtA6+p5pSQ11tit5w1QIxIxBT6UgI5u IF/FIHg/9RyBx/KmnJzZmOq9Ou1/leF7ElfUPAzf64R3a59gVbUlOTLky4rqKUGT h9bVTaQ+u63vwjjBatnsEyPo52Q3jq3KHhVIAav7loN9tGo+i6qPMZ+O42n0hAKo B3qfr38BzGIHT70QFAqK4wNr4LzSNXzCrivekiLIfeus7VzrfaUeSxhkdc51X/Gg 8dDiyIR5ZXC6wGcpne6M+tbj3jZy574= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:57 2025 by rpki-client