$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa File: 36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa (raw, json) Hash identifier: M82SC2qkaHKMoibJm5wpM0JgnHwophi9ZwV424c+Nf4= Subject key identifier: F0:2B:05:BE:D8:79:86:1D:5F:66:6C:2F:22:62:38:67:59:55:5C:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BD0405D0B5FCBD9F120F34B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa Signing time: Mon 10 Nov 2025 12:45:31 +0000 ROA not before: Mon 10 Nov 2025 12:45:31 +0000 ROA not after: Sun 08 Feb 2026 12:45:31 +0000 asID: 174 IP address blocks: 74.2.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:40:5d:0b:5f:cb:d9:f1:20:f3:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 10 12:45:31 2025 GMT Not After : Feb 8 12:45:31 2026 GMT Subject: CN=633b30cf-e2d8-45cf-bb68-7b536fd9689b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d0:95:82:31:29:b9:69:dc:7c:71:66:60:89: 4f:c7:7e:40:95:0e:c1:ab:f0:1d:35:de:a9:ee:dc: af:27:fe:e6:40:af:33:f8:35:00:46:3c:5f:fb:b0: 49:d4:6f:f4:d8:6c:fa:51:8a:40:7c:02:fb:90:11: 35:3c:17:a8:64:d1:0d:05:6f:7c:da:9f:09:ab:bd: ca:c2:ed:de:0f:5c:f7:c2:07:d6:bc:77:19:42:3e: b4:b3:4b:b7:dc:ae:8f:dd:75:27:b5:73:44:08:d4: 35:31:d1:26:3f:3a:ca:27:82:ff:bf:62:66:90:98: 86:22:a5:bd:13:bf:60:58:50:d8:b8:b6:0b:cc:15: 3a:e9:44:50:94:55:b6:4d:ba:a8:53:35:27:cc:df: c7:dc:e7:3d:bd:57:87:b2:88:64:db:4d:62:ff:8e: 30:5c:33:48:ed:bd:f5:98:d0:b8:e6:9e:db:af:41: 23:92:78:8f:7e:cc:b6:83:66:e8:52:33:47:5e:de: 58:95:85:f2:3d:2e:6a:16:1f:40:c3:f0:53:e6:35: dc:21:ff:eb:8e:c7:1d:b8:da:60:20:a3:e8:90:d6: f5:2f:38:94:5b:62:fe:c8:af:1a:39:19:3d:9c:6b: d4:8c:12:15:1a:d0:65:ed:ec:6f:03:02:9d:a1:91: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2B:05:BE:D8:79:86:1D:5F:66:6C:2F:22:62:38:67:59:55:5C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:87:a9:ae:c5:a8:65:15:ca:8c:34:31:50:e4:4c:64:33:4a: 7a:f2:cb:9a:34:64:31:31:a5:37:83:c9:27:ad:1d:71:53:8f: 0d:4c:5b:9e:71:04:30:51:d9:d1:d0:8f:8d:9e:2b:ad:af:24: d0:09:26:a3:de:b2:ad:8c:f1:86:b5:92:ee:70:54:45:ad:e6: 4c:68:ea:e9:0f:0b:01:d5:cf:f5:25:9d:c0:4b:54:44:76:13: 62:f6:46:b2:eb:8f:50:88:b5:96:39:9a:99:54:86:2a:f0:d5: 7f:3f:74:02:ee:6c:4c:48:9a:5e:4b:8b:72:87:08:67:a0:94: 30:93:40:f2:b2:27:85:c1:3b:4d:c5:84:3b:c9:f1:dd:ac:f6: c1:38:b5:12:c2:7a:24:25:d7:c5:85:62:ee:a9:f6:c9:f2:a4: c0:78:a3:12:6d:36:f8:eb:3e:1d:d8:41:ec:09:08:15:ce:39: f9:2a:e1:be:d1:79:ac:c2:7c:29:fe:ae:1c:c3:f9:a6:0d:f9: 03:19:f4:80:fd:ee:73:cb:74:60:34:bb:3b:8a:a9:ea:d2:a6: 45:e0:bc:1b:41:e7:49:c8:38:df:5b:6d:4c:3e:a9:08:1e:04: 4c:b7:43:ba:82:79:5b:57:73:86:69:80:cf:12:f9:5c:11:0f: c2:24:6d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQQF0LX8vZ8SDzSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTExMDEyNDUzMVoXDTI2MDIwODEyNDUzMVowLzEtMCsGA1UEAxMk NjMzYjMwY2YtZTJkOC00NWNmLWJiNjgtN2I1MzZmZDk2ODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdCVgjEpuWncfHFmYIlPx35AlQ7Bq/AdNd6p 7tyvJ/7mQK8z+DUARjxf+7BJ1G/02Gz6UYpAfAL7kBE1PBeoZNENBW982p8Jq73K wu3eD1z3wgfWvHcZQj60s0u33K6P3XUntXNECNQ1MdEmPzrKJ4L/v2JmkJiGIqW9 E79gWFDYuLYLzBU66URQlFW2TbqoUzUnzN/H3Oc9vVeHsohk201i/44wXDNI7b31 mNC45p7br0EjkniPfsy2g2boUjNHXt5YlYXyPS5qFh9Aw/BT5jXcIf/rjscduNpg IKPokNb1LziUW2L+yK8aORk9nGvUjBIVGtBl7exvAwKdoZEmNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPArBb7YeYYdX2ZsLyJiOGdZVVxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzZjMWRjNjAtNDhkMS0z NTU1LTljMDgtMGZhNGE2YTExNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyHqa7FqGUVyow0MVDkTGQzSnryy5o0ZDExpTeDySetHXFTjw1MW55x BDBR2dHQj42eK62vJNAJJqPesq2M8Ya1ku5wVEWt5kxo6ukPCwHVz/UlncBLVER2 E2L2RrLrj1CItZY5mplUhirw1X8/dALubExIml5Li3KHCGeglDCTQPKyJ4XBO03F hDvJ8d2s9sE4tRLCeiQl18WFYu6p9snypMB4oxJtNvjrPh3YQewJCBXOOfkq4b7R eazCfCn+rhzD+aYN+QMZ9ID97nPLdGA0uzuKqerSpkXgvBtB50nION9bbUw+qQge BEy3Q7qCeVtXc4ZpgM8S+VwRD8Ikbag= -----END CERTIFICATE-----Generated at Mon Nov 17 04:20:22 2025 by rpki-client