$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa File: 289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa (raw, json) Hash identifier: b87Lxak2NPGUx6eaxTUF/jRpAVgQAnEdrdYYUpcAiLg= Subject key identifier: 88:2D:CE:E0:1F:08:1C:94:1B:90:78:30:E5:2B:1E:9B:50:CD:B7:9B Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584B8BE20EA2BB87B54102201F80 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 42 IP address blocks: 204.14.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0e:a2:bb:87:b5:41:02:20:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=4fe2d280-9630-4108-a076-479b21df66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:b8:a6:ed:a8:96:08:0b:a4:37:22:fd:c2: 5c:79:27:5f:3c:28:31:dd:7f:d0:c1:be:96:a4:9e: 7c:20:1d:58:17:90:85:be:56:cd:b6:3e:1e:d4:8e: 85:d5:c6:71:65:a3:0a:c9:bb:59:c4:fa:7e:26:82: 66:ed:69:b2:cd:04:b3:04:24:e4:13:0a:62:92:41: 44:c5:09:09:5d:10:29:c3:e2:d7:0f:e9:1d:3a:a7: bb:04:1f:48:a4:d1:7a:a8:70:10:bb:72:74:a9:0a: e2:40:7d:78:b0:25:d1:2f:2d:24:a8:5b:8b:06:c9: 41:be:03:78:95:89:c5:96:62:d4:92:23:58:a6:36: 8f:ec:b0:00:84:38:ff:80:0e:63:21:2e:24:fd:54: b3:13:17:d9:88:bd:04:a1:c5:c6:c9:0b:e4:9b:58: 55:2c:c6:46:3b:6e:b6:4a:11:e5:65:4f:d6:ba:93: 4d:09:dc:5c:cc:2d:56:c7:61:25:02:bd:b8:e5:b3: e0:f7:ff:07:87:66:07:c3:24:00:50:c3:9d:17:7c: 45:d2:3a:ba:bd:35:9b:a1:de:13:ea:a6:49:e0:cc: f9:47:58:fb:1d:7f:52:12:37:78:b8:06:4f:de:a2: 7e:c2:bc:a6:f9:b5:e4:db:c6:5c:82:8a:5a:89:3d: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:CE:E0:1F:08:1C:94:1B:90:78:30:E5:2B:1E:9B:50:CD:B7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/289b4ee9-84ef-31cb-afff-8d2ded5a1af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 204.14.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4e:30:f8:ea:af:59:9c:c9:1b:93:75:d7:9d:d3:f9:33:35: 6c:3b:6d:9f:d2:2d:32:f9:8c:7c:9c:71:d3:7c:7e:d9:b9:3f: 1d:9a:d6:2e:ef:8e:61:28:0d:8c:67:ce:c6:07:71:fa:47:93: bd:78:15:3d:80:2e:b4:68:7e:9d:f8:38:e2:12:56:6f:12:af: 86:04:f5:c8:76:7f:33:90:38:ce:fc:15:12:8a:0c:ac:b5:fc: 62:cd:1d:91:25:67:11:53:26:3b:d3:fe:e1:48:43:15:80:c4: 3f:f4:2b:3b:66:4e:93:93:58:27:52:d3:f8:3a:d5:6b:fb:a8: fd:29:1f:9d:63:d1:4d:ef:5c:5e:3d:1a:04:e8:2e:3d:43:48: d5:21:3a:8d:be:fc:48:cf:3d:55:59:2f:a1:5d:d0:52:26:7c: e2:3b:01:df:24:09:2c:d0:50:c3:67:76:3e:4f:bc:c3:96:67: 2c:97:1d:3c:ad:e4:30:bd:f4:27:d2:a5:4c:83:10:70:cb:25: 7d:d5:ee:5a:60:3c:ff:f9:be:3f:e8:37:d3:da:3f:06:a7:69: 4c:b2:89:ec:b0:53:25:d6:24:97:3c:63:a5:cb:9b:2f:0f:12: 83:07:16:3a:58:e6:82:a7:d7:08:46:5e:b7:6a:5b:3e:1a:15: 80:b5:73:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g6iu4e1QQIgH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NGZlMmQyODAtOTYzMC00MTA4LWEwNzYtNDc5YjIxZGY2NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNi4pu2olggLpDci/cJceSdfPCgx3X/Qwb6W pJ58IB1YF5CFvlbNtj4e1I6F1cZxZaMKybtZxPp+JoJm7WmyzQSzBCTkEwpikkFE xQkJXRApw+LXD+kdOqe7BB9IpNF6qHAQu3J0qQriQH14sCXRLy0kqFuLBslBvgN4 lYnFlmLUkiNYpjaP7LAAhDj/gA5jIS4k/VSzExfZiL0EocXGyQvkm1hVLMZGO262 ShHlZU/WupNNCdxczC1Wx2ElAr245bPg9/8Hh2YHwyQAUMOdF3xF0jq6vTWbod4T 6qZJ4Mz5R1j7HX9SEjd4uAZP3qJ+wrym+bXk28ZcgopaiT3OowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgtzuAfCByUG5B4MOUrHptQzbebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMjg5YjRlZTktODRlZi0z MWNiLWFmZmYtOGQyZGVkNWExYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9OMPjqr1mcyRuTdded0/kzNWw7bZ/SLTL5jHyccdN8ftm5Px2a1i7v jmEoDYxnzsYHcfpHk714FT2ALrRofp34OOISVm8Sr4YE9ch2fzOQOM78FRKKDKy1 /GLNHZElZxFTJjvT/uFIQxWAxD/0KztmTpOTWCdS0/g61Wv7qP0pH51j0U3vXF49 GgToLj1DSNUhOo2+/EjPPVVZL6Fd0FImfOI7Ad8kCSzQUMNndj5PvMOWZyyXHTyt 5DC99CfSpUyDEHDLJX3V7lpgPP/5vj/oN9PaPwanaUyyieywUyXWJJc8Y6XLmy8P EoMHFjpY5oKn1whGXrdqWz4aFYC1c8U= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:41 2025 by rpki-client