$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0438619a-a186-3ec2-9911-68fe67942948.roa File: 0438619a-a186-3ec2-9911-68fe67942948.roa (raw, json) Hash identifier: K+ECOi4+0ea7b9qob6ZvBAMP+qrpZHfkWEApP9iCM7Q= Subject key identifier: 96:A9:D8:30:79:BB:96:C2:D6:68:AB:5D:57:3B:67:53:AD:40:E6:A2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BC2194C80BC0951B73CAAD380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0438619a-a186-3ec2-9911-68fe67942948.roa Signing time: Wed 05 Nov 2025 11:05:30 +0000 ROA not before: Wed 05 Nov 2025 11:05:30 +0000 ROA not after: Tue 03 Feb 2026 11:05:30 +0000 asID: 174 IP address blocks: 74.1.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:19:4c:80:bc:09:51:b7:3c:aa:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 5 11:05:30 2025 GMT Not After : Feb 3 11:05:30 2026 GMT Subject: CN=3035d0a4-8609-4c80-9c46-f08c0989afda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:2e:46:3b:bf:59:99:70:26:8c:e8:c1:86: 4d:83:5e:d1:7c:37:3a:cb:a3:da:f2:df:01:7a:fb: a8:18:1c:2d:f4:2c:2e:8a:74:95:2a:cc:dd:5c:d3: 0a:87:89:4d:ce:a2:7b:d2:ea:fd:f5:7c:d0:12:f5: f3:08:88:1d:49:c4:fc:00:65:1b:ee:f8:a2:fe:5f: 08:af:30:eb:22:87:a1:28:0e:10:57:8c:b9:ee:aa: ec:cd:bb:8b:9e:ff:6e:20:a5:b2:b8:5c:14:4e:56: a0:66:19:06:e7:fa:fe:cc:d0:ca:91:b7:40:54:b0: b6:68:86:38:bf:78:62:6a:e7:31:55:7b:db:d3:42: 74:f9:b1:38:02:26:7c:70:e3:6b:fc:7c:28:87:4b: 3c:63:d2:18:64:79:2d:fc:5c:05:13:b3:3d:6b:4c: 20:88:bf:25:d8:e0:54:f9:d8:18:6f:cd:5d:26:0e: 30:e8:09:47:0e:a3:64:f5:7f:76:06:1f:5a:9d:ca: 6f:d3:76:70:40:ed:a2:b3:a3:f4:e4:43:ff:b1:3e: df:96:b0:58:32:7e:0e:47:3e:1a:b1:2d:a0:36:b1: e2:a3:ac:8f:86:e8:99:ca:ab:9c:22:3e:cb:65:5f: 1f:c0:b3:4e:dc:7f:78:a7:0e:df:af:43:95:4e:08: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:D8:30:79:BB:96:C2:D6:68:AB:5D:57:3B:67:53:AD:40:E6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0438619a-a186-3ec2-9911-68fe67942948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:36:87:7d:b7:fd:6b:9b:41:d2:95:2f:56:c6:dc:c9:40:38: 45:8c:4b:c2:8d:99:af:7c:9c:f8:f3:96:ca:9b:3f:d0:9a:b5: e6:45:67:90:0f:02:44:15:d2:bc:57:cd:03:7c:65:f8:9a:a6: 37:80:75:c7:76:15:a6:a0:01:16:ef:73:6a:79:1c:d9:7c:52: 40:31:17:00:8b:e1:72:3f:01:c9:c0:7a:5a:d9:92:f8:02:a9: ea:b0:d2:0e:2b:fc:f6:86:27:18:42:d2:79:02:a8:cc:de:0a: 5a:29:36:0e:05:63:a1:c6:e5:44:45:a9:c7:8c:be:aa:48:2c: 49:da:c6:68:1c:0f:17:80:7e:c7:36:e9:c6:c5:d5:15:f2:b0: 63:7d:08:19:28:a8:6b:92:18:75:13:36:30:00:06:38:b3:14: bc:29:ff:26:43:b3:96:dd:3e:da:c6:d3:46:ad:c2:9a:6d:08: ae:39:55:b9:b5:c2:8a:d5:10:77:6e:d7:10:10:a0:ec:c3:9f: 69:44:69:ab:cd:4a:4e:ad:8e:7a:24:c9:0d:ff:bf:52:22:dc: b2:dd:f1:9a:ea:57:fe:c4:81:31:2c:a6:61:43:eb:b2:77:04: 60:65:a5:2c:16:9f:26:b8:36:9b:58:12:14:bd:97:07:1c:66: 79:b3:fe:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCGUyAvAlRtzyq04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNTExMDUzMFoXDTI2MDIwMzExMDUzMFowLzEtMCsGA1UEAxMk MzAzNWQwYTQtODYwOS00YzgwLTljNDYtZjA4YzA5ODlhZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvUuRju/WZlwJozowYZNg17RfDc6y6Pa8t8B evuoGBwt9CwuinSVKszdXNMKh4lNzqJ70ur99XzQEvXzCIgdScT8AGUb7vii/l8I rzDrIoehKA4QV4y57qrszbuLnv9uIKWyuFwUTlagZhkG5/r+zNDKkbdAVLC2aIY4 v3hiaucxVXvb00J0+bE4AiZ8cONr/Hwoh0s8Y9IYZHkt/FwFE7M9a0wgiL8l2OBU +dgYb81dJg4w6AlHDqNk9X92Bh9ancpv03ZwQO2is6P05EP/sT7flrBYMn4ORz4a sS2gNrHio6yPhuiZyqucIj7LZV8fwLNO3H94pw7fr0OVTgh6aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJap2DB5u5bC1mirXVc7Z1OtQOaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDQzODYxOWEtYTE4Ni0z ZWMyLTk5MTEtNjhmZTY3OTQyOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE2h323/WubQdKVL1bG3MlAOEWMS8KNma98nPjzlsqbP9CateZFZ5AP AkQV0rxXzQN8ZfiapjeAdcd2FaagARbvc2p5HNl8UkAxFwCL4XI/AcnAelrZkvgC qeqw0g4r/PaGJxhC0nkCqMzeClopNg4FY6HG5URFqceMvqpILEnaxmgcDxeAfsc2 6cbF1RXysGN9CBkoqGuSGHUTNjAABjizFLwp/yZDs5bdPtrG00atwpptCK45Vbm1 worVEHdu1xAQoOzDn2lEaavNSk6tjnokyQ3/v1Ii3LLd8ZrqV/7EgTEspmFD67J3 BGBlpSwWnya4NptYEhS9lwccZnmz/sk= -----END CERTIFICATE-----Generated at Mon Nov 17 04:26:36 2025 by rpki-client