$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa File: d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa (raw, json) Hash identifier: VNfM2W+sz6i5dBWDmfl1tbzbTBV3q/mW+OKBtefjpnk= Subject key identifier: 8C:66:A1:1A:A2:40:CB:95:CA:BA:8E:F4:A8:35:D1:FC:7C:01:F4:D5 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584B8A7CD4C2748DE23836C05D00 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 12208 IP address blocks: 74.209.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d4:c2:74:8d:e2:38:36:c0:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=cea8df30-05ba-40fc-bdcc-57d6037497b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:d0:9d:b1:8b:da:ed:cc:5e:a6:5b:40:11: 1a:08:fc:59:c3:ca:90:14:40:5c:ec:aa:05:c3:ad: 4c:9d:fb:22:6f:94:48:09:90:63:5e:13:33:35:51: e0:32:1a:bf:02:d3:27:80:a7:d2:5e:ab:34:33:ec: cd:40:dc:49:71:9f:38:c5:c9:27:c3:8a:0b:f0:f6: 6b:3b:eb:1e:ba:03:19:69:e1:f2:f6:a5:89:ea:e8: b2:00:89:2e:9f:3e:51:51:21:5c:37:eb:9c:c7:58: 38:db:a9:7d:0f:60:93:ac:16:a1:d3:71:6d:34:4a: dd:46:22:be:8e:de:24:24:6b:0f:70:9b:0e:b1:1d: d3:d2:0f:ee:39:08:d5:5d:b3:42:51:c2:ed:a6:d8: 45:ef:51:75:36:49:2c:e7:7c:8d:69:a2:0e:57:25: 7a:28:c5:6f:f7:09:8d:f3:68:99:3c:97:f8:f3:c0: 1a:f6:80:a4:99:b8:3b:41:03:4a:d7:23:e5:c3:54: a2:a5:e1:d9:83:18:68:b3:fd:72:1b:7a:36:6e:b5: 9d:68:fb:e0:7f:e6:11:ee:8f:33:39:d2:41:83:c3: 5b:24:64:d2:33:4d:12:9c:1c:6d:35:b1:2d:c6:92: ab:bb:86:dc:02:bd:bd:d4:eb:ae:07:eb:b4:72:c9: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:A1:1A:A2:40:CB:95:CA:BA:8E:F4:A8:35:D1:FC:7C:01:F4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 74.209.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:64:32:a8:6b:34:aa:a5:70:56:0e:d3:50:60:d7:35:42:a7: a9:e5:f1:32:6d:3b:c6:8b:d8:9f:73:06:79:3d:de:93:95:38: d7:a6:a6:cd:59:85:9c:36:85:cf:dc:8b:d8:4f:7c:1b:56:68: 60:da:68:92:e7:20:ab:ad:e0:83:1a:a1:94:53:ba:c5:f1:1e: 0c:85:6b:18:7a:3d:9e:e5:a6:7e:8a:f8:21:1f:f2:69:ed:4e: e0:0b:34:a1:97:35:a9:44:0a:48:ac:88:4d:67:9e:90:a7:4e: b1:78:58:d6:8f:d3:e4:8d:19:6a:c9:c8:76:32:f4:d5:a1:ed: 7e:23:1e:7e:2c:09:22:b3:b4:f6:f4:65:01:f2:dd:54:bc:00: da:50:dc:a7:d7:86:7d:d3:64:5a:ba:8b:40:99:5e:e3:fa:d5: 88:6f:69:df:19:66:10:bc:f1:9c:52:1e:8d:2e:78:87:2c:7d: fc:5f:94:1a:62:13:00:97:9c:e7:fb:36:2c:68:7c:10:f2:e2: 45:82:0b:2d:e2:92:53:69:85:4a:3f:b7:dc:2b:c5:7e:af:3d: 46:bd:58:37:72:66:88:2b:47:3d:01:84:c9:64:58:e7:cb:30: 9e:68:c9:e0:17:53:73:0a:77:b6:4d:7f:8c:02:8a:9d:33:da: bf:81:1f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNTCdI3iODbAXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk Y2VhOGRmMzAtMDViYS00MGZjLWJkY2MtNTdkNjAzNzQ5N2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSjQnbGL2u3MXqZbQBEaCPxZw8qQFEBc7KoF w61Mnfsib5RICZBjXhMzNVHgMhq/AtMngKfSXqs0M+zNQNxJcZ84xcknw4oL8PZr O+seugMZaeHy9qWJ6uiyAIkunz5RUSFcN+ucx1g426l9D2CTrBah03FtNErdRiK+ jt4kJGsPcJsOsR3T0g/uOQjVXbNCUcLtpthF71F1Nkks53yNaaIOVyV6KMVv9wmN 82iZPJf488Aa9oCkmbg7QQNK1yPlw1SipeHZgxhos/1yG3o2brWdaPvgf+YR7o8z OdJBg8NbJGTSM00SnBxtNbEtxpKru4bcAr291OuuB+u0cslQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxmoRqiQMuVyrqO9Kg10fx8AfTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvZDI4YzBkOTEtMzlhOS0z ZGEyLThmYWQtZDFjYmQwOWY4MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpkMqhrNKqlcFYO01Bg1zVCp6nl8TJtO8aL2J9zBnk93pOVONemps1Z hZw2hc/ci9hPfBtWaGDaaJLnIKut4IMaoZRTusXxHgyFaxh6PZ7lpn6K+CEf8mnt TuALNKGXNalECkisiE1nnpCnTrF4WNaP0+SNGWrJyHYy9NWh7X4jHn4sCSKztPb0 ZQHy3VS8ANpQ3KfXhn3TZFq6i0CZXuP61Yhvad8ZZhC88ZxSHo0ueIcsffxflBpi EwCXnOf7NixofBDy4kWCCy3iklNphUo/t9wrxX6vPUa9WDdyZogrRz0BhMlkWOfL MJ5oyeAXU3MKd7ZNf4wCip0z2r+BH0I= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:42 2025 by rpki-client