$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b4940586-09b0-3ce6-ad63-9de4d7b5fd37.roa File: b4940586-09b0-3ce6-ad63-9de4d7b5fd37.roa (raw, json) Hash identifier: 4lt1glzseT+L1q711PhsCbUlmCM9Tu6wqrMfl1EOZOQ= Subject key identifier: B5:42:11:F1:41:47:BF:55:B6:0C:13:87:5C:5E:87:A4:C9:7D:F2:86 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BD0407C57132ECD7B38B64900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b4940586-09b0-3ce6-ad63-9de4d7b5fd37.roa Signing time: Mon 10 Nov 2025 12:45:46 +0000 ROA not before: Mon 10 Nov 2025 12:45:46 +0000 ROA not after: Sun 08 Feb 2026 12:45:46 +0000 asID: 174 IP address blocks: 74.2.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:40:7c:57:13:2e:cd:7b:38:b6:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 10 12:45:46 2025 GMT Not After : Feb 8 12:45:46 2026 GMT Subject: CN=eeecf1d7-7371-4cef-a035-cfbd81f059d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:80:34:05:9e:7a:f0:3b:57:26:cd:86:3c:a2: 79:85:47:f4:a6:11:26:7e:50:2e:4c:8a:c8:a6:ec: 47:23:88:b8:5e:d2:db:51:47:6e:67:3a:1e:50:a4: dc:f1:21:fd:39:30:e2:53:f6:61:27:07:c2:12:cc: ae:a3:3c:eb:b3:27:1b:d9:af:b8:90:25:13:36:fa: ba:cd:da:20:33:ee:7f:de:27:e2:b1:0a:18:45:2f: 86:f0:8a:23:fd:6a:34:46:3a:da:96:64:ef:5e:c7: 3b:bb:38:7f:f5:84:20:13:01:bd:af:56:4d:ee:2f: d1:1e:36:ce:5e:d0:5e:31:51:eb:91:28:da:e3:83: 77:f0:ff:b1:a6:fd:90:c3:89:07:1f:87:42:3c:62: 8a:65:3d:4a:58:8d:f3:7d:23:f1:ae:98:9f:b6:42: 01:33:c1:57:c7:a6:a3:8f:7e:64:96:16:47:14:8a: 6d:ed:66:dd:e1:01:dc:7c:2a:24:39:eb:87:55:63: 5a:58:c4:46:43:f4:a4:e5:30:cf:4e:82:2b:62:d4: bc:ac:f6:b8:48:c2:bf:5c:15:78:14:b0:bf:93:25: 74:cf:44:cf:e8:70:fb:31:3b:a5:43:13:cf:f7:f1: 37:2b:54:2c:7c:7f:9e:5f:c9:cc:8e:49:93:6c:61: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:11:F1:41:47:BF:55:B6:0C:13:87:5C:5E:87:A4:C9:7D:F2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b4940586-09b0-3ce6-ad63-9de4d7b5fd37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1c:b2:6c:11:22:a9:c3:d5:c9:5a:46:11:92:c5:23:a5:03: 65:d8:8e:5c:e3:73:c4:71:28:5f:12:c6:60:76:3b:88:75:8b: 4d:ca:56:db:05:39:ea:34:78:33:81:5d:85:1c:56:c9:66:92: b4:df:b0:bf:4a:dc:a7:90:de:a7:87:52:c4:bd:35:e7:bf:24: 5e:65:55:f2:0b:8d:87:e0:9e:6d:92:8f:4b:84:f9:5c:db:a1: ed:e6:6c:70:4f:ad:79:7d:e4:c1:8c:76:02:7f:f0:32:78:18: 3b:cf:e6:36:99:6a:58:26:b1:21:dd:87:5a:25:27:0d:be:d7: ad:10:fe:fd:f4:f2:c9:6a:e8:ca:9d:d5:3b:01:b6:a9:1e:42: dd:84:ed:27:6e:4a:3b:75:33:45:66:29:32:6d:51:76:ec:3e: a8:71:f6:c3:c7:00:96:0b:b3:0e:94:46:83:cb:e2:02:5f:a2: bc:7e:fa:10:99:2f:6a:c2:de:e2:c6:52:c6:7a:3f:f3:f3:74: de:25:32:55:e9:a9:f4:5c:21:a5:08:5c:ab:e1:ad:d3:e8:73: 53:42:f1:ef:52:85:4d:c2:45:22:30:50:e3:51:f6:bc:63:bd: 62:39:a9:05:15:e4:7a:02:d7:4a:a2:3e:89:a4:76:3c:5f:7f: 82:84:c1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQQHxXEy7Nezi2SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTExMDEyNDU0NloXDTI2MDIwODEyNDU0NlowLzEtMCsGA1UEAxMk ZWVlY2YxZDctNzM3MS00Y2VmLWEwMzUtY2ZiZDgxZjA1OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4A0BZ568DtXJs2GPKJ5hUf0phEmflAuTIrI puxHI4i4XtLbUUduZzoeUKTc8SH9OTDiU/ZhJwfCEsyuozzrsycb2a+4kCUTNvq6 zdogM+5/3ifisQoYRS+G8Ioj/Wo0RjralmTvXsc7uzh/9YQgEwG9r1ZN7i/RHjbO XtBeMVHrkSja44N38P+xpv2Qw4kHH4dCPGKKZT1KWI3zfSPxrpiftkIBM8FXx6aj j35klhZHFIpt7Wbd4QHcfCokOeuHVWNaWMRGQ/Sk5TDPToIrYtS8rPa4SMK/XBV4 FLC/kyV0z0TP6HD7MTulQxPP9/E3K1QsfH+eX8nMjkmTbGE8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVCEfFBR79VtgwTh1xeh6TJffKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjQ5NDA1ODYtMDliMC0z Y2U2LWFkNjMtOWRlNGQ3YjVmZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8csmwRIqnD1claRhGSxSOlA2XYjlzjc8RxKF8SxmB2O4h1i03KVtsF Oeo0eDOBXYUcVslmkrTfsL9K3KeQ3qeHUsS9Nee/JF5lVfILjYfgnm2Sj0uE+Vzb oe3mbHBPrXl95MGMdgJ/8DJ4GDvP5jaZalgmsSHdh1olJw2+160Q/v308slq6Mqd 1TsBtqkeQt2E7SduSjt1M0VmKTJtUXbsPqhx9sPHAJYLsw6URoPL4gJforx++hCZ L2rC3uLGUsZ6P/PzdN4lMlXpqfRcIaUIXKvhrdPoc1NC8e9ShU3CRSIwUONR9rxj vWI5qQUV5HoC10qiPomkdjxff4KEwTo= -----END CERTIFICATE-----Generated at Mon Nov 17 04:20:24 2025 by rpki-client