$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa File: 33b10fc7-6c11-3e08-9337-3984e76df073.roa (raw, json) Hash identifier: llbh7gHsa1ARMoY5g8E07aLIAiAGxRZdhHsV80zWR5A= Subject key identifier: 18:C7:BC:D9:8D:86:DA:68:1D:7F:AB:AD:7F:9F:0A:85:75:D2:D5:47 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584B7DECA236CD4BE50DC3049C80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 140911 IP address blocks: 209.58.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a2:36:cd:4b:e5:0d:c3:04:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=426a5620-e9f0-4379-ad3e-bae0bbd776a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:b3:d9:dc:4a:4a:f3:7f:d6:25:0d:12:4d: d0:3a:49:6e:15:52:39:35:c3:ae:95:2c:d5:fc:06: 7b:ac:74:5c:3d:30:4c:f3:53:7f:a5:54:12:31:57: 41:64:bb:0a:58:9a:83:29:26:cf:a6:e4:31:a1:19: fc:c6:66:b8:ae:dd:30:fc:9e:02:d4:c2:2c:46:46: 5f:02:31:64:6a:31:cd:d3:ff:05:a7:ba:8c:1f:24: 55:01:1a:4f:85:83:2a:ae:aa:2a:92:d5:06:d9:bc: fe:fb:46:d1:f7:3c:01:7b:34:55:38:00:19:e9:3b: 37:05:81:5f:a4:39:37:73:3e:40:51:ca:5f:ff:5f: b9:80:ea:08:e3:9c:8e:46:6e:ac:e9:0b:59:cd:04: 20:d8:f4:2c:01:1c:89:c6:56:10:b2:b7:11:bc:af: 31:d2:a9:3f:76:10:39:30:d1:23:c0:c1:86:5d:67: d6:e6:91:39:22:a0:40:fc:6c:be:82:81:06:ce:32: a0:a3:0c:7c:ac:57:94:e5:4e:13:09:2d:7f:5c:15: ed:49:0d:27:3d:de:a8:57:93:61:d0:b9:ab:e4:ad: 54:f4:a9:56:e2:c8:99:c8:81:f8:f3:45:ae:9e:94: c1:90:62:9e:19:1b:b1:f3:3e:fa:52:a5:a5:e6:cd: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C7:BC:D9:8D:86:DA:68:1D:7F:AB:AD:7F:9F:0A:85:75:D2:D5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b8:9f:9d:e8:a9:0e:e2:e4:4c:54:2d:82:81:ad:bf:c3:77: 6f:fb:fb:15:60:3d:b0:03:a2:5a:ed:a4:11:67:e4:5e:56:af: 7c:f4:f0:11:9a:8e:31:81:50:aa:0f:ed:28:0a:cd:28:da:9d: a8:2c:c0:88:fc:27:25:31:b4:4f:ac:48:45:8a:58:95:98:0a: 53:b4:37:f7:37:d1:22:3a:76:56:51:cb:20:1f:63:a4:22:b4: ca:46:de:ec:04:3e:8c:c4:59:f1:c2:8a:14:16:44:bf:4e:fe: 0a:1f:89:3d:69:ac:c6:cb:76:23:b0:a0:f9:d1:ee:03:c5:35: b8:32:7b:55:21:72:8c:92:ec:7c:5c:17:74:79:c0:61:df:16: a8:94:3e:58:94:7c:9f:57:97:b8:d8:7e:5d:90:e5:2e:30:24: 72:57:ae:69:34:70:18:d5:66:92:7f:b9:91:73:a4:56:f0:3b: a4:f1:b3:35:0a:33:03:a2:7e:bc:fe:84:b4:90:82:12:77:92: b5:62:88:fb:0c:fd:4b:9a:6f:d1:71:be:1d:7d:cc:2b:6a:b4: 51:20:3d:99:23:72:6b:19:46:c2:a9:b0:a2:77:2c:fd:f9:7a: c3:39:ae:20:f5:25:84:fa:39:51:0d:6f:7f:af:5d:bd:09:25: 04:04:f9:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KI2zUvlDcMEnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NDI2YTU2MjAtZTlmMC00Mzc5LWFkM2UtYmFlMGJiZDc3NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDyz2dxKSvN/1iUNEk3QOkluFVI5NcOulSzV /AZ7rHRcPTBM81N/pVQSMVdBZLsKWJqDKSbPpuQxoRn8xma4rt0w/J4C1MIsRkZf AjFkajHN0/8Fp7qMHyRVARpPhYMqrqoqktUG2bz++0bR9zwBezRVOAAZ6Ts3BYFf pDk3cz5AUcpf/1+5gOoI45yORm6s6QtZzQQg2PQsARyJxlYQsrcRvK8x0qk/dhA5 MNEjwMGGXWfW5pE5IqBA/Gy+goEGzjKgowx8rFeU5U4TCS1/XBXtSQ0nPd6oV5Nh 0Lmr5K1U9KlW4siZyIH480WunpTBkGKeGRux8z76UqWl5s1PrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjHvNmNhtpoHX+rrX+fCoV10tVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMzNiMTBmYzctNmMxMS0z ZTA4LTkzMzctMzk4NGU3NmRmMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TpKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG4n53oqQ7i5ExULYKBrb/Dd2/7+xVgPbADolrtpBFn5F5Wr3z08BGa jjGBUKoP7SgKzSjanagswIj8JyUxtE+sSEWKWJWYClO0N/c30SI6dlZRyyAfY6Qi tMpG3uwEPozEWfHCihQWRL9O/gofiT1prMbLdiOwoPnR7gPFNbgye1UhcoyS7Hxc F3R5wGHfFqiUPliUfJ9Xl7jYfl2Q5S4wJHJXrmk0cBjVZpJ/uZFzpFbwO6TxszUK MwOifrz+hLSQghJ3krViiPsM/Uuab9Fxvh19zCtqtFEgPZkjcmsZRsKpsKJ3LP35 esM5riD1JYT6OVENb3+vXb0JJQQE+X8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:33 2025 by rpki-client