$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa File: 35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa (raw, json) Hash identifier: 45IuoSpxirPwcLkvBKo9goEY8KsuQKrO1shBG4PuI1I= Subject key identifier: 23:16:2B:8C:A6:89:DA:2C:D5:3B:DF:46:B8:5D:7D:25:36:34:41:D2 Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F4328584B434C5A1C45EFE048F6248B30 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 22926 IP address blocks: 74.118.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5a:1c:45:ef:e0:48:f6:24:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7e89995e-d374-4aec-8ad9-dcbb7bbd458a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4a:c3:31:67:2c:87:71:e4:5d:a6:e6:4a:87: 5d:b0:73:71:f8:36:95:0f:d9:61:bf:a3:6c:cd:a2: 67:c3:e8:ce:13:d5:65:9c:2c:60:94:95:6b:df:9b: 44:05:e7:a1:5f:f6:34:90:d2:c5:cf:ba:24:ef:94: 57:e3:6f:85:d0:a3:2f:95:83:d6:f5:0d:09:0e:11: fd:a1:d1:4d:9d:eb:6e:38:9a:f5:cd:c6:fd:50:5c: ca:8d:c5:ed:76:eb:d4:f0:46:61:8e:a5:e3:e0:a6: 2b:12:69:f2:f2:78:73:c9:8b:4c:f8:13:3f:b1:3c: 52:82:fd:0b:67:ae:26:c5:d3:2a:5c:21:f6:6f:19: be:47:39:f6:75:d1:d7:fd:1d:8d:44:6b:3b:bd:7b: 2f:85:62:d5:5a:da:12:74:3e:a7:ee:cc:f5:3b:c6: 3d:e0:86:39:1e:2c:e6:f0:3c:d8:cb:ea:4a:71:b2: a6:c6:05:ae:9c:70:0e:b1:9f:68:d4:5c:e7:fe:f9: 6a:f1:90:4c:49:34:bc:63:c8:4a:59:15:b2:9e:1b: 20:2c:66:bc:78:d9:99:23:c5:91:0a:b1:9c:4c:e9: 4a:2a:20:c9:ec:7e:9d:1d:d9:0c:99:47:10:94:83: 18:5d:60:b3:cd:a2:d8:79:42:78:95:b4:ed:9f:45: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:2B:8C:A6:89:DA:2C:D5:3B:DF:46:B8:5D:7D:25:36:34:41:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv4: 74.118.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:67:f5:e8:fe:20:bc:4e:a8:8a:f9:65:2d:a6:58:8d:46:90: 62:0f:5e:25:49:65:c3:25:0c:85:e3:d8:42:a3:c2:7d:40:5a: 23:a4:b5:ac:06:23:a7:c7:94:ab:14:4b:24:b7:2e:91:33:bf: 93:87:42:ab:fe:1f:a7:74:00:9b:c2:84:93:db:3b:17:c1:4b: 55:c8:06:c2:8a:1c:e2:64:6d:c4:e5:42:d2:7b:3a:7f:c9:0f: d9:74:9f:46:d0:c8:51:f3:c2:48:bf:1c:f4:b2:34:68:0a:fd: 67:11:16:c2:92:7e:e3:c5:36:a2:13:de:b1:89:8a:d3:39:a8: bd:2b:9f:31:09:8e:2d:c4:fc:be:7c:f7:bf:0a:6c:87:bb:d3: c6:f7:be:35:8a:94:bd:b6:d0:1a:df:4f:0c:16:13:52:ef:38: f4:98:09:46:29:7a:94:16:79:2c:0d:a5:5a:96:02:a7:44:6d: 50:7d:63:97:97:03:f4:ba:3a:9a:e0:d4:f6:7b:e3:7b:8a:61: 98:c5:85:f4:6f:24:e8:51:af:1b:e6:7f:95:08:78:7b:b5:b0: 6b:02:a9:2d:2e:ce:0c:8f:ac:6f:91:c9:c3:c3:5b:89:b1:dd: 03:b7:9c:f8:63:73:3f:ab:fb:52:d1:15:15:6f:ae:23:16:9e: 27:bf:c8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFocRe/gSPYkizAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk N2U4OTk5NWUtZDM3NC00YWVjLThhZDktZGNiYjdiYmQ0NThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjErDMWcsh3HkXabmSoddsHNx+DaVD9lhv6Ns zaJnw+jOE9VlnCxglJVr35tEBeehX/Y0kNLFz7ok75RX42+F0KMvlYPW9Q0JDhH9 odFNnetuOJr1zcb9UFzKjcXtduvU8EZhjqXj4KYrEmny8nhzyYtM+BM/sTxSgv0L Z64mxdMqXCH2bxm+Rzn2ddHX/R2NRGs7vXsvhWLVWtoSdD6n7sz1O8Y94IY5Hizm 8DzYy+pKcbKmxgWunHAOsZ9o1Fzn/vlq8ZBMSTS8Y8hKWRWynhsgLGa8eNmZI8WR CrGcTOlKKiDJ7H6dHdkMmUcQlIMYXWCzzaLYeUJ4lbTtn0XPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMWK4ymidos1TvfRrhdfSU2NEHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvMzVlMTQwZWMtNjZlYi0z M2YyLThlMDEtZDBmYzZjZTQwMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9n9ej+ILxOqIr5ZS2mWI1GkGIPXiVJZcMlDIXj2EKjwn1AWiOktawG I6fHlKsUSyS3LpEzv5OHQqv+H6d0AJvChJPbOxfBS1XIBsKKHOJkbcTlQtJ7On/J D9l0n0bQyFHzwki/HPSyNGgK/WcRFsKSfuPFNqIT3rGJitM5qL0rnzEJji3E/L58 978KbIe708b3vjWKlL220BrfTwwWE1LvOPSYCUYpepQWeSwNpVqWAqdEbVB9Y5eX A/S6Oprg1PZ743uKYZjFhfRvJOhRrxvmf5UIeHu1sGsCqS0uzgyPrG+RycPDW4mx 3QO3nPhjcz+r+1LRFRVvriMWnie/yPI= -----END CERTIFICATE-----Generated at Tue Oct 14 19:29:44 2025 by rpki-client