$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa File: 86945b7c-04d9-3d21-af20-69e5bd13ba87.roa (raw, json) Hash identifier: zOtRcqDNUg57WAyyi4i5iZ69h+fSMMtKN33wUutEZXg= Subject key identifier: 8E:2E:6E:FA:5D:C2:04:76:2D:BA:7A:C4:F7:0D:85:C6:A5:90:7F:BA Certificate issuer: /CN=503450af-ac6f-4861-96c0-24f7e8724111 Certificate serial: 010D0C9F4328584B917784CB9DC18CAEE8B8A5A0 Authority key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 22961 IP address blocks: 74.122.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:84:cb:9d:c1:8c:ae:e8:b8:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503450af-ac6f-4861-96c0-24f7e8724111 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=e16b5ca1-dd7e-4a35-bfe3-e078e9179bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:a0:10:5e:9f:bf:8c:12:69:d6:8d:d8:e7: d9:1e:38:63:50:f6:26:02:36:15:17:86:4a:b1:ee: e4:21:ff:bd:e0:01:c6:1a:1d:a0:06:68:07:5e:4e: da:7b:8f:39:fb:0d:ec:a2:98:a4:0c:36:7b:c3:bc: 78:00:75:a0:3a:d6:9c:63:e9:7f:97:df:9c:f3:39: 43:18:d9:52:75:c7:3d:99:bf:23:72:80:cb:dd:f4: 3e:2a:72:9c:ba:64:fc:b3:d0:51:7b:32:f5:1f:32: 0a:c1:68:d8:8a:41:f0:cb:7f:92:36:07:91:5d:98: fc:9d:81:e6:fb:37:00:e7:68:65:57:52:f6:c0:7d: f3:df:47:f7:09:0c:13:29:91:e3:07:44:68:84:39: f0:41:e8:c7:9a:20:e4:e1:25:62:6b:d5:cd:d3:fd: bc:7f:51:d1:a0:3c:7f:38:17:2a:d6:b1:aa:e6:2a: 8c:2a:de:35:64:c7:76:d4:1a:81:b4:5a:1a:c9:22: 7d:e9:05:9f:9d:80:23:7c:9a:bc:fa:99:73:dd:60: a0:89:2a:8c:03:bd:db:c9:ae:bd:d4:03:2d:18:7c: 2a:cd:8f:aa:45:8e:c2:c1:9d:d3:62:53:72:88:a3: e7:51:57:07:d5:c2:a5:69:24:ea:b3:7e:59:4b:32: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2E:6E:FA:5D:C2:04:76:2D:BA:7A:C4:F7:0D:85:C6:A5:90:7F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl X509v3 Authority Key Identifier: keyid:F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer sbgp-ipAddrBlock: critical IPv4: 74.122.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b0:99:d9:5d:50:3e:60:d9:8c:47:63:16:a9:3e:4c:cd:c7: 2f:0f:2e:0e:26:e6:83:96:75:f2:0d:05:ff:d8:55:8e:85:85: b4:a0:b0:2b:a2:64:61:d8:04:9b:c9:11:64:3e:18:ed:87:da: 1c:1e:e6:12:b1:85:fc:f8:14:5c:74:da:d2:64:f3:6d:87:22: c7:72:1c:5c:47:f8:c9:20:6a:4b:51:45:25:19:f6:07:49:16: e4:56:28:97:89:b0:48:6a:3c:6a:6b:8d:84:94:a5:04:e0:18: 16:84:9c:d2:89:da:53:23:e6:e6:21:bd:ad:3f:72:c6:79:3f: 6d:23:c6:93:41:36:b3:fd:8c:8b:4e:35:f2:09:b2:80:c1:4d: b1:65:47:97:47:04:02:99:5a:7b:b7:33:79:4d:34:d9:c3:5e: 4f:9a:f5:c2:88:09:c0:e4:f3:ef:1a:9b:cb:0b:22:06:d0:fe: 08:d5:96:41:43:a5:93:30:20:f4:84:23:53:c5:b7:aa:7e:e0: 14:a8:9f:30:3f:0f:87:2a:cb:14:24:39:f5:6f:ba:dc:8e:c0: eb:7a:95:64:03:6d:23:f2:ac:e8:ad:3e:c4:32:e4:db:ca:7b: 92:d8:8d:3b:e8:31:34:57:d1:ba:2d:ec:a2:83:74:e7:6c:c1: e3:ea:bb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd4TLncGMrui4paAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzNDUwYWYtYWM2Zi00ODYxLTk2YzAtMjRmN2U4NzI0 MTExMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk ZTE2YjVjYTEtZGQ3ZS00YTM1LWJmZTMtZTA3OGU5MTc5YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2gEF6fv4wSadaN2OfZHjhjUPYmAjYVF4ZK se7kIf+94AHGGh2gBmgHXk7ae485+w3sopikDDZ7w7x4AHWgOtacY+l/l9+c8zlD GNlSdcc9mb8jcoDL3fQ+KnKcumT8s9BRezL1HzIKwWjYikHwy3+SNgeRXZj8nYHm +zcA52hlV1L2wH3z30f3CQwTKZHjB0RohDnwQejHmiDk4SVia9XN0/28f1HRoDx/ OBcq1rGq5iqMKt41ZMd21BqBtFoaySJ96QWfnYAjfJq8+plz3WCgiSqMA73bya69 1AMtGHwqzY+qRY7CwZ3TYlNyiKPnUVcH1cKlaSTqs35ZSzIO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4ubvpdwgR2Lbp6xPcNhcalkH+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MDM0 NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3MjQxMTEvODY5NDViN2MtMDRkOS0z ZDIxLWFmMjAtNjllNWJkMTNiYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTAzNDUwYWYtYWM2Zi00ODYxLTk2 YzAtMjRmN2U4NzI0MTExLzUwMzQ1MGFmLWFjNmYtNDg2MS05NmMwLTI0ZjdlODcy NDExMS5jcmwwHwYDVR0jBBgwFoAU+WMakSv3oGpdgjFADCHV/bvt+rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3 ZTg3MjQxMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGwmdldUD5g2YxHYxapPkzNxy8PLg4m5oOWdfINBf/YVY6FhbSgsCui ZGHYBJvJEWQ+GO2H2hwe5hKxhfz4FFx02tJk822HIsdyHFxH+MkgaktRRSUZ9gdJ FuRWKJeJsEhqPGprjYSUpQTgGBaEnNKJ2lMj5uYhva0/csZ5P20jxpNBNrP9jItO NfIJsoDBTbFlR5dHBAKZWnu3M3lNNNnDXk+a9cKICcDk8+8am8sLIgbQ/gjVlkFD pZMwIPSEI1PFt6p+4BSonzA/D4cqyxQkOfVvutyOwOt6lWQDbSPyrOitPsQy5NvK e5LYjTvoMTRX0bot7KKDdOdswePqu/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:16 2025 by rpki-client