$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd598aca-3a06-30ad-a16d-3ecb122e7131.roa File: cd598aca-3a06-30ad-a16d-3ecb122e7131.roa (raw, json) Hash identifier: 0svZO/RN2TVv4RAEqfciR6tqwiPG3VWtq0feqfYJXa4= Subject key identifier: F9:26:B5:F7:60:EF:25:AA:8A:10:66:EE:DC:53:BB:BC:84:17:03:F2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B84E788798E2F3D962DF06830 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd598aca-3a06-30ad-a16d-3ecb122e7131.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7922 IP address blocks: 74.49.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:88:79:8e:2f:3d:96:2d:f0:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6b63fe11-83fa-4fae-8040-fcf073a5c94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:94:ee:8c:d9:fe:46:d0:48:da:bd:f1:cc:e6: 2b:96:94:31:fa:ae:6a:ce:5d:87:e6:da:36:c1:33: 99:17:b9:cc:84:82:a9:8e:6c:4b:0f:23:ec:16:4b: 08:5a:bf:22:1e:9d:a8:34:0d:e5:77:81:45:91:87: cf:62:34:8f:27:ab:13:c6:45:73:f4:a3:fb:ed:b8: 9b:33:12:32:76:f8:3f:c0:90:5f:4f:44:ed:4a:fa: 8f:3b:a4:9e:85:0e:83:6f:35:6b:97:ff:a0:30:5d: 58:a8:cc:df:b9:c0:6f:d7:ee:cd:a2:bd:c0:09:b2: dc:f0:82:eb:93:5e:3c:e5:07:59:76:db:69:53:64: d2:db:93:78:24:3d:07:1f:73:9d:41:05:39:36:83: 5f:c4:0d:a3:f0:89:67:ee:08:98:a7:30:04:10:60: ce:10:49:39:d6:e1:91:41:40:b3:d9:1d:6f:69:df: 5e:67:1a:df:14:77:c3:9f:66:fe:b4:91:60:3a:61: 73:f5:d4:d6:c1:a7:76:99:8a:15:7b:83:d6:aa:b9: ce:2a:fc:6e:9f:e7:36:90:ee:06:5b:bd:52:8a:1c: a1:34:69:4a:f0:12:32:fa:b0:3f:e2:c5:57:f7:05: 1b:1d:64:a6:e2:21:ff:e8:84:b6:e1:7e:92:3d:e7: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:B5:F7:60:EF:25:AA:8A:10:66:EE:DC:53:BB:BC:84:17:03:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd598aca-3a06-30ad-a16d-3ecb122e7131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:55:b0:56:4d:61:fa:46:d8:35:e0:34:57:71:df:82:04:b0: 28:94:1c:24:50:36:53:3a:f0:86:5c:49:28:c1:b6:b4:a9:9f: 09:01:1c:42:9e:76:0a:30:71:bd:9c:74:b1:0c:4f:b5:40:5f: 4a:ce:ac:2b:52:b1:dc:47:2a:ff:75:f9:75:f8:df:75:f1:5a: 5a:d5:c8:c9:da:ad:99:f4:38:cb:aa:75:3c:c4:08:ef:e1:ab: e3:c2:c1:ff:7a:e5:a1:a5:b7:b0:41:a3:4f:31:ac:97:82:e8: f3:85:a1:0c:46:4b:9f:cf:35:57:36:2f:5c:46:1e:02:9d:4a: 48:90:28:26:58:9f:2f:2d:cb:ac:af:63:42:e9:c3:1a:5d:e1: 15:e6:f6:31:c6:66:dc:b0:ef:b4:2b:8a:84:b0:0e:a6:9e:8b: 38:ce:4b:d7:50:15:86:6e:ed:87:d8:a0:23:94:d1:5f:7e:ff: 14:ec:7f:8a:54:38:97:3c:ac:c3:e5:85:6d:d3:a4:c1:ee:34: e0:c4:d7:d3:71:b9:4a:2a:94:10:af:3f:ca:6c:7a:0d:6d:ec: 84:5f:14:0b:e2:8f:ba:f5:ae:9b:ea:6f:3f:bc:be:58:e5:85: 46:24:be:37:44:f1:67:30:05:77:f2:5d:2f:5f:8a:c2:14:b1: 68:32:10:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54h5ji89li3waDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NmI2M2ZlMTEtODNmYS00ZmFlLTgwNDAtZmNmMDczYTVjOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJTujNn+RtBI2r3xzOYrlpQx+q5qzl2H5to2 wTOZF7nMhIKpjmxLDyPsFksIWr8iHp2oNA3ld4FFkYfPYjSPJ6sTxkVz9KP77bib MxIydvg/wJBfT0TtSvqPO6SehQ6DbzVrl/+gMF1YqMzfucBv1+7Nor3ACbLc8ILr k1485QdZdttpU2TS25N4JD0HH3OdQQU5NoNfxA2j8Iln7giYpzAEEGDOEEk51uGR QUCz2R1vad9eZxrfFHfDn2b+tJFgOmFz9dTWwad2mYoVe4PWqrnOKvxun+c2kO4G W71SihyhNGlK8BIy+rA/4sVX9wUbHWSm4iH/6IS24X6SPefg5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkmtfdg7yWqihBm7txTu7yEFwPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1OThhY2EtM2EwNi0z MGFkLWExNmQtM2VjYjEyMmU3MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJVsFZNYfpG2DXgNFdx34IEsCiUHCRQNlM68IZcSSjBtrSpnwkBHEKe dgowcb2cdLEMT7VAX0rOrCtSsdxHKv91+XX433XxWlrVyMnarZn0OMuqdTzECO/h q+PCwf965aGlt7BBo08xrJeC6POFoQxGS5/PNVc2L1xGHgKdSkiQKCZYny8ty6yv Y0Lpwxpd4RXm9jHGZtyw77QrioSwDqaeizjOS9dQFYZu7YfYoCOU0V9+/xTsf4pU OJc8rMPlhW3TpMHuNODE19NxuUoqlBCvP8pseg1t7IRfFAvij7r1rpvqbz+8vljl hUYkvjdE8WcwBXfyXS9fisIUsWgyEKo= -----END CERTIFICATE-----Generated at Sun Oct 19 22:49:26 2025 by rpki-client