$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa File: 3873425f-0330-3da6-b372-5e44dd7a2deb.roa (raw, json) Hash identifier: l424eu3Yc2NYOlZ5z2KXUDe5DEdHRJqQQy1cr4MZT+E= Subject key identifier: CA:AC:7E:1D:BF:AC:B3:A8:A3:6C:DA:DF:92:93:12:D6:0F:65:EE:39 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584B84E77F4CA336F978CA54E8A0 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 35847 IP address blocks: 74.51.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7f:4c:a3:36:f9:78:ca:54:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5c0bdd6a-a7cc-4fb9-81ec-bbef746cf744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:83:ce:46:d7:5a:74:48:a8:ee:84:f5:d1: 7b:3d:9c:9a:7f:9d:17:50:50:e7:4c:09:f6:5d:a7: 87:bd:47:4b:4a:ab:73:fe:6b:7a:1b:76:d3:79:34: 1d:74:99:f3:0f:b9:16:04:67:d9:6e:38:90:13:eb: bc:a7:b4:3c:68:7e:19:49:66:81:85:ce:95:a9:e5: 68:a9:17:d6:a9:1f:ef:8e:62:39:be:9c:b4:55:c8: 1f:fe:26:50:87:8f:13:ab:53:53:fd:56:51:ee:aa: e9:87:e1:ff:d6:13:20:b1:0f:32:60:a3:c3:0b:d5: 2e:f4:cb:11:11:9f:b7:70:33:a1:b7:7d:77:b6:37: af:99:ba:80:d8:a3:56:19:96:fc:81:05:f3:67:02: 6b:17:9f:b2:e3:87:3d:c2:81:58:bf:1d:52:f6:20: 33:40:b4:f0:e7:b5:6e:64:b7:23:56:61:10:17:f3: 0f:0a:4f:3e:bb:86:29:7d:72:19:92:44:fa:09:62: c5:06:cf:a9:f0:0a:c3:4a:c1:20:fd:e0:54:54:46: 85:40:fe:c9:bd:0f:a2:4c:e8:98:01:9f:3a:fc:6d: be:51:cc:94:dc:ae:e9:d8:ed:59:32:44:f2:70:19: c2:da:cd:c9:34:42:da:e4:75:3b:5c:f5:fa:7e:fc: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:7E:1D:BF:AC:B3:A8:A3:6C:DA:DF:92:93:12:D6:0F:65:EE:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 74.51.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f7:e8:bb:10:24:06:ff:19:07:01:ea:ea:ee:e0:1c:04:11: e9:eb:25:f9:fb:bd:68:c4:1e:f6:a7:a1:22:54:10:76:e1:e0: a9:c2:b4:08:87:6b:d4:60:b7:00:21:8c:fd:fe:84:6f:df:bb: 30:79:a8:2f:ca:4b:e5:dd:33:9b:14:3e:ca:d5:96:51:3e:ae: d9:10:10:a7:58:ca:51:18:b8:73:04:2a:9b:cb:b4:0c:c7:00: cb:e5:65:77:44:5f:eb:a5:43:04:a5:6a:96:cd:f1:c2:2b:60: 10:1f:d2:f7:16:3c:0c:1f:cf:11:39:01:eb:28:45:b9:c7:6d: 1a:b5:6f:8e:eb:d6:c6:4e:74:29:7b:18:12:c9:17:f2:ff:b8: fb:3e:5b:eb:11:61:dd:8d:52:b6:d7:96:f7:ff:e4:0e:a2:56: ff:4f:b8:2c:54:3a:af:e4:1f:ad:af:bf:e1:f4:85:c6:b6:2b: c2:aa:c4:cf:95:36:81:e5:a6:41:51:f1:e8:a9:b5:8d:d7:eb: 3b:4b:62:26:53:99:c1:e7:94:5f:dd:ab:a2:6f:24:5b:de:62: 11:15:a7:62:71:fe:df:33:cc:b4:b4:83:95:df:1e:d4:26:90: f9:29:e2:02:4b:bf:b3:64:17:ef:26:06:0a:28:87:c9:6c:1d: df:4f:3a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE539Mozb5eMpU6KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWMwYmRkNmEtYTdjYy00ZmI5LTgxZWMtYmJlZjc0NmNmNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XODzkbXWnRIqO6E9dF7PZyaf50XUFDnTAn2 XaeHvUdLSqtz/mt6G3bTeTQddJnzD7kWBGfZbjiQE+u8p7Q8aH4ZSWaBhc6VqeVo qRfWqR/vjmI5vpy0Vcgf/iZQh48Tq1NT/VZR7qrph+H/1hMgsQ8yYKPDC9Uu9MsR EZ+3cDOht313tjevmbqA2KNWGZb8gQXzZwJrF5+y44c9woFYvx1S9iAzQLTw57Vu ZLcjVmEQF/MPCk8+u4YpfXIZkkT6CWLFBs+p8ArDSsEg/eBUVEaFQP7JvQ+iTOiY AZ86/G2+UcyU3K7p2O1ZMkTycBnC2s3JNELa5HU7XPX6fvyF5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqsfh2/rLOoo2za35KTEtYPZe45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMzg3MzQyNWYtMDMzMC0z ZGE2LWIzNzItNWU0NGRkN2EyZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP36LsQJAb/GQcB6uru4BwEEenrJfn7vWjEHvanoSJUEHbh4KnCtAiH a9RgtwAhjP3+hG/fuzB5qC/KS+XdM5sUPsrVllE+rtkQEKdYylEYuHMEKpvLtAzH AMvlZXdEX+ulQwSlapbN8cIrYBAf0vcWPAwfzxE5AesoRbnHbRq1b47r1sZOdCl7 GBLJF/L/uPs+W+sRYd2NUrbXlvf/5A6iVv9PuCxUOq/kH62vv+H0hca2K8KqxM+V NoHlpkFR8eiptY3X6ztLYiZTmcHnlF/dq6JvJFveYhEVp2Jx/t8zzLS0g5XfHtQm kPkp4gJLv7NkF+8mBgooh8lsHd9POuU= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:10 2025 by rpki-client