$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa File: 423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa (raw, json) Hash identifier: bHzPj/+2dzQGtaw70kYUtSMj1hnguUj7sQm6XiIrNfU= Subject key identifier: 4E:73:33:A5:4C:45:7C:DB:7F:44:67:71:81:DC:86:F7:82:76:6D:35 Certificate issuer: /CN=b3f5323f-8bea-48c6-aa03-949255dd1997 Certificate serial: 010D0C9F4328584B3F1C5E2830210E87F0B44480 Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 46474 IP address blocks: 74.205.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:5e:28:30:21:0e:87:f0:b4:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=2c3b8caa-98fd-4fb1-b510-fd55c32f01f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:8c:af:42:81:02:5e:15:76:9e:2a:c2:45: a2:13:fe:14:52:81:ad:e7:5c:66:3f:cd:53:02:ba: b1:2d:11:f2:1a:d9:ea:40:5a:9e:40:65:6b:9c:2b: 6a:35:4f:42:bc:5a:3b:c3:b9:72:0c:6b:27:81:72: c6:fc:0d:b1:6a:cd:56:20:97:54:23:84:86:65:a9: b6:68:a6:0c:24:72:bf:7f:5f:fa:9a:de:5f:7f:cd: 16:02:ee:6a:2e:41:76:fc:5d:6e:eb:89:de:99:f8: 7b:8a:82:6c:01:c2:61:c5:d0:2c:02:e0:7b:5a:e1: 81:75:0a:6d:82:ee:8a:c3:09:26:63:84:83:f8:9b: c8:d2:ed:bc:7b:7e:f2:a4:10:11:38:03:91:99:da: f1:1e:0e:e4:1e:10:d9:8a:6e:fe:19:6c:6c:c0:29: 5c:9f:61:c8:92:be:91:ba:64:28:3d:01:e1:1a:7b: bd:dd:78:06:6c:ac:4d:5d:76:cd:52:22:ca:09:fb: 1d:42:05:09:c3:cf:f4:5f:bc:0d:96:2f:90:ad:6e: e7:18:08:3b:5f:ee:e1:8f:e3:49:98:4a:bb:07:a4: c4:91:b2:af:f5:dc:6a:5f:a5:b1:8b:eb:c0:bf:39: 49:b5:de:9a:72:d8:4a:1c:ca:d6:98:13:17:9b:08: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:33:A5:4C:45:7C:DB:7F:44:67:71:81:DC:86:F7:82:76:6D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl X509v3 Authority Key Identifier: keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer sbgp-ipAddrBlock: critical IPv4: 74.205.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e9:52:a0:7f:42:dc:01:36:09:22:28:9a:2c:27:0e:ca:5a: 1c:f9:a4:0c:8b:e7:de:15:4c:02:e9:7c:dd:35:c5:52:71:b5: 63:b7:59:58:2c:18:d3:4a:d3:54:4c:f8:3c:cf:b0:cd:c3:32: 9e:22:f3:38:c1:ac:b9:97:e2:f8:bf:55:6e:e9:e0:ef:6b:e3: 88:d9:fe:c8:58:15:8d:01:c2:a5:83:b5:be:cd:b1:17:ff:3a: d1:63:73:cb:96:c3:ee:7b:9c:dc:9c:5c:dc:f0:c0:c8:12:7f: 5b:b7:a7:30:46:c5:22:67:7f:37:15:12:b6:4b:fa:c3:cd:31: 06:8a:09:33:e3:2e:1f:dd:15:68:7f:af:16:d0:9b:41:34:2f: 71:e7:50:bd:91:33:19:ce:36:6a:20:8e:0e:19:f0:d0:08:f1: 91:7e:45:b1:5c:0f:2a:c1:28:0a:16:f5:8b:13:4f:0d:ac:8e: 9e:e4:74:b4:98:e1:c8:09:60:71:60:09:12:04:c5:aa:26:76: 40:10:ea:45:28:15:3f:61:32:1d:bf:b5:c9:10:53:87:da:cb: cb:28:d9:71:4d:3a:6a:b8:8a:93:95:9a:fa:6f:be:7f:30:7c: f9:96:90:c5:a1:7c:20:a2:7f:59:6a:99:13:8d:a5:0f:bf:0e: 36:38:a9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HF4oMCEOh/C0RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx OTk3MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MmMzYjhjYWEtOThmZC00ZmIxLWI1MTAtZmQ1NWMzMmYwMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9GMr0KBAl4Vdp4qwkWiE/4UUoGt51xmP81T ArqxLRHyGtnqQFqeQGVrnCtqNU9CvFo7w7lyDGsngXLG/A2xas1WIJdUI4SGZam2 aKYMJHK/f1/6mt5ff80WAu5qLkF2/F1u64nemfh7ioJsAcJhxdAsAuB7WuGBdQpt gu6KwwkmY4SD+JvI0u28e37ypBAROAORmdrxHg7kHhDZim7+GWxswClcn2HIkr6R umQoPQHhGnu93XgGbKxNXXbNUiLKCfsdQgUJw8/0X7wNli+QrW7nGAg7X+7hj+NJ mEq7B6TEkbKv9dxqX6Wxi+vAvzlJtd6acthKHMrWmBMXmwjcCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5zM6VMRXzbf0RncYHchveCdm01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1 MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvNDIzZjQ2M2YtYmQ2Ny0z NjUwLWFjMGMtYTJjMGE4MzRjNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky NTVkZDE5OTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASs3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfpUqB/QtwBNgkiKJosJw7KWhz5pAyL594VTALpfN01xVJxtWO3WVgs GNNK01RM+DzPsM3DMp4i8zjBrLmX4vi/VW7p4O9r44jZ/shYFY0BwqWDtb7NsRf/ OtFjc8uWw+57nNycXNzwwMgSf1u3pzBGxSJnfzcVErZL+sPNMQaKCTPjLh/dFWh/ rxbQm0E0L3HnUL2RMxnONmogjg4Z8NAI8ZF+RbFcDyrBKAoW9YsTTw2sjp7kdLSY 4cgJYHFgCRIExaomdkAQ6kUoFT9hMh2/tckQU4fay8so2XFNOmq4ipOVmvpvvn8w fPmWkMWhfCCif1lqmRONpQ+/DjY4qdM= -----END CERTIFICATE-----Generated at Fri Oct 10 22:24:17 2025 by rpki-client