$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/ea5a503d-c3c8-38ca-8f7e-81c187d12d6a.roa File: ea5a503d-c3c8-38ca-8f7e-81c187d12d6a.roa (raw, json) Hash identifier: 4/E4RCAtlEZVC15pY2CPBte6j3T1pw0U8JflLVPPkV4= Subject key identifier: E3:D9:99:37:C7:14:24:4E:73:AD:93:68:2D:C5:34:07:46:94:36:2D Certificate issuer: /CN=e04b8478-e14b-4dff-ae0c-707f31960618 Certificate serial: 010D0C9F4328584B7DECC7D422EEC8469FBBE4C0 Authority key identifier: 96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/ea5a503d-c3c8-38ca-8f7e-81c187d12d6a.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 74.118.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c7:d4:22:ee:c8:46:9f:bb:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04b8478-e14b-4dff-ae0c-707f31960618 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=f256d779-0240-4fb6-ad2e-bbe6ea773cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:21:18:85:07:9c:d0:7d:b5:df:5a:40:8a: d6:d7:67:fd:dc:24:46:34:95:a6:9d:e0:38:ea:99: 1d:66:41:2e:91:16:1b:95:2d:88:af:50:eb:1e:c9: 39:5b:df:98:18:ee:44:16:f7:1e:a0:e8:e7:4a:3e: 49:51:48:5a:bd:d9:65:0d:2a:bd:c8:a0:8a:c7:77: f4:a3:89:29:ad:42:08:03:14:54:11:f6:7b:f4:37: 07:c4:e9:20:c7:9f:d5:cf:a7:af:0a:6b:09:ba:59: e3:f7:5f:24:4b:03:56:d3:ae:31:47:81:46:ef:93: 68:75:9e:a7:60:75:59:77:36:08:80:c3:e5:e3:54: 28:3a:ab:45:28:47:37:ed:fe:0a:ab:be:43:53:7a: 87:76:cb:33:03:f0:55:96:56:47:ed:bd:a9:4d:c8: e4:e1:d5:42:0a:9b:6b:19:68:d7:43:31:77:ef:16: 31:f9:0a:af:43:d5:47:a6:b2:18:66:de:86:01:a3: c3:af:d5:4c:76:d8:cd:45:c7:c3:86:1f:cf:67:12: d1:1b:06:85:80:4a:6a:72:8c:8d:90:e5:71:9a:bf: df:a0:d3:df:53:0a:3a:c2:3f:1a:6b:4b:1d:ed:81: 38:d2:82:82:b8:fa:a9:76:27:33:8f:f8:c7:67:e6: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:99:37:C7:14:24:4E:73:AD:93:68:2D:C5:34:07:46:94:36:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/ea5a503d-c3c8-38ca-8f7e-81c187d12d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl X509v3 Authority Key Identifier: keyid:96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer sbgp-ipAddrBlock: critical IPv4: 74.118.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:78:65:27:0e:74:6b:c7:89:5a:e2:8c:fc:10:3f:1e:91:18: cb:20:89:4a:04:01:4e:09:51:2a:43:b6:e9:6c:2b:05:08:ec: 10:d3:84:e2:66:db:44:40:a1:49:27:7a:4d:00:a8:91:40:2b: fc:c2:04:15:85:7f:4f:59:00:70:df:cf:b1:02:ed:fa:ff:36: 1c:67:aa:e9:61:04:d6:be:37:1d:86:73:02:db:52:be:e8:ac: ab:6b:77:b6:f5:e4:8d:97:5b:fa:33:01:94:6a:ab:47:05:65: fb:93:e3:24:82:21:21:51:4c:0b:13:1c:16:42:2e:ef:fb:a5: f5:72:4d:06:85:c9:1f:ae:76:ef:b0:53:58:e7:d7:41:11:ae: 6d:c3:b9:3b:0d:2d:bf:9b:5d:2a:bd:0f:b1:5c:3a:ca:4f:96: 32:39:fa:6e:05:86:d9:05:58:4d:de:74:77:83:aa:a8:07:ae: b0:46:51:69:2e:89:69:d4:90:af:72:80:ba:cb:56:05:e3:e8: a7:d8:1a:82:82:2b:c6:03:ae:d3:18:81:f6:5f:56:8b:5b:51: 8d:7d:08:88:98:99:d4:6d:e2:f9:19:0c:5c:c3:ce:3e:8d:ba: 92:2e:2b:1c:a5:43:e7:fd:e7:82:61:e2:6c:79:b0:00:30:c6: d6:22:f6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MfUIu7IRp+75MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0Yjg0NzgtZTE0Yi00ZGZmLWFlMGMtNzA3ZjMxOTYw NjE4MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjI1NmQ3NzktMDI0MC00ZmI2LWFkMmUtYmJlNmVhNzczY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoAhGIUHnNB9td9aQIrW12f93CRGNJWmneA4 6pkdZkEukRYblS2Ir1DrHsk5W9+YGO5EFvceoOjnSj5JUUhavdllDSq9yKCKx3f0 o4kprUIIAxRUEfZ79DcHxOkgx5/Vz6evCmsJulnj918kSwNW064xR4FG75NodZ6n YHVZdzYIgMPl41QoOqtFKEc37f4Kq75DU3qHdsszA/BVllZH7b2pTcjk4dVCCptr GWjXQzF37xYx+QqvQ9VHprIYZt6GAaPDr9VMdtjNRcfDhh/PZxLRGwaFgEpqcoyN kOVxmr/foNPfUwo6wj8aa0sd7YE40oKCuPqpdiczj/jHZ+btUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPZmTfHFCROc62TaC3FNAdGlDYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDRi ODQ3OC1lMTRiLTRkZmYtYWUwYy03MDdmMzE5NjA2MTgvZWE1YTUwM2QtYzNjOC0z OGNhLThmN2UtODFjMTg3ZDEyZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA0Yjg0NzgtZTE0Yi00ZGZmLWFl MGMtNzA3ZjMxOTYwNjE4L2UwNGI4NDc4LWUxNGItNGRmZi1hZTBjLTcwN2YzMTk2 MDYxOC5jcmwwHwYDVR0jBBgwFoAUlh3I4+WcqWtr0j3YBMBMK3JTfpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDRiODQ3OC1lMTRiLTRkZmYtYWUwYy03MDdm MzE5NjA2MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD54ZScOdGvHiVrijPwQPx6RGMsgiUoEAU4JUSpDtulsKwUI7BDThOJm 20RAoUknek0AqJFAK/zCBBWFf09ZAHDfz7EC7fr/NhxnqulhBNa+Nx2GcwLbUr7o rKtrd7b15I2XW/ozAZRqq0cFZfuT4ySCISFRTAsTHBZCLu/7pfVyTQaFyR+udu+w U1jn10ERrm3DuTsNLb+bXSq9D7FcOspPljI5+m4FhtkFWE3edHeDqqgHrrBGUWku iWnUkK9ygLrLVgXj6KfYGoKCK8YDrtMYgfZfVotbUY19CIiYmdRt4vkZDFzDzj6N upIuKxylQ+f954Jh4mx5sAAwxtYi9o0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:17 2025 by rpki-client