$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa File: 4a94a50c-a556-39b0-83af-a1d6940051da.roa (raw, json) Hash identifier: noUKqYveRTM4v+4DRdooBV+cAPJVAFev5oGitkOijOs= Subject key identifier: B8:46:7A:D6:77:5C:33:01:CD:5F:03:87:2E:F1:D2:69:5F:F4:9A:60 Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Certificate serial: 010D0C9F4328584F6292CB78ADAD02056D207E00 Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 18491 IP address blocks: 74.220.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cb:78:ad:ad:02:05:6d:20:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ee5898bc-dfab-4f8f-b1fa-ee02ff060228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e6:52:be:9e:7e:11:65:31:79:e3:2e:f4:41: d0:e2:63:15:89:84:5b:8e:64:52:e1:2d:aa:0d:7f: fe:12:74:ac:73:e6:db:a7:a2:3e:c2:8c:6e:e9:6f: 57:9c:f3:f7:12:14:6b:52:e7:2c:28:4f:e5:28:de: d4:1d:34:9d:14:fe:8d:55:10:57:7a:6a:7d:f9:24: 20:f4:fa:33:52:79:ef:b1:c2:d8:ef:d9:ce:1c:42: 41:f6:8a:4b:2c:1d:22:d3:bf:2e:ab:71:7a:26:3a: 19:fe:4f:61:cf:bf:25:da:e3:50:27:30:14:9d:8d: 4b:80:32:c6:b0:66:db:d1:c9:15:6d:83:8c:d4:51: dd:a5:e5:75:8f:b3:24:ae:cd:1c:16:d6:ba:5a:0c: 12:6f:84:fa:bb:27:aa:84:0e:1e:92:14:50:29:0b: cd:88:eb:7c:5b:7f:93:74:47:ce:9b:a8:f1:e3:25: 5b:a0:05:64:0d:43:3a:a9:e9:a3:2c:b7:ef:97:a6: 2b:b1:92:03:ac:18:bb:6d:b8:6f:f4:95:81:95:a1: 47:5a:92:bf:e4:5d:81:20:02:02:5d:15:aa:72:f8: 0d:d2:a7:ba:b7:66:2c:6d:a1:d9:e2:5c:26:85:3d: 0d:ce:a0:f4:46:10:c3:aa:71:1d:dc:cc:61:6c:76: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:46:7A:D6:77:5C:33:01:CD:5F:03:87:2E:F1:D2:69:5F:F4:9A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl X509v3 Authority Key Identifier: keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer sbgp-ipAddrBlock: critical IPv4: 74.220.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:de:a3:76:d7:8e:39:88:6a:aa:0e:a3:aa:8f:5d:d6:75:3e: 25:aa:dd:a0:42:de:3f:16:a7:89:d4:d5:6c:d1:eb:1e:e0:7f: d1:fd:f9:d6:e9:cc:72:23:50:83:31:ab:7e:a3:28:5b:47:7f: c9:fb:2c:ae:da:05:19:29:71:a4:56:6b:92:80:96:d1:39:49: 4e:68:32:71:84:44:fa:1c:ea:68:81:36:e3:3c:31:f8:58:c3: 6e:22:b4:f0:06:87:7a:a1:c3:5b:58:8a:dc:f7:39:52:7f:08: aa:e6:8c:42:b4:c1:f5:80:fe:ce:be:61:0a:53:b2:01:bd:e3: 60:2c:a0:8c:ee:ef:64:70:f5:52:2e:40:1c:54:a2:b8:61:f5: cd:e5:93:82:74:88:10:f3:ac:b8:fc:d9:19:57:a3:e9:41:7d: 79:fa:12:ff:e5:4a:ba:83:2a:b4:9e:52:87:64:ba:db:3b:41: 7f:14:37:0b:a3:e7:a8:1a:d3:f4:07:12:fb:cd:f2:c5:d9:cd: 5e:e3:7f:ff:95:a2:a3:3d:8c:8b:ce:9f:4e:4a:ce:d9:5d:0c: af:92:d7:31:46:57:a6:40:63:16:01:04:c8:7b:5b:4b:2c:7d: 24:f2:f9:d4:e3:c7:dc:19:e6:d6:bb:49:13:8f:a2:97:ec:08: 21:4c:82:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikst4ra0CBW0gfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj MTZiMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWU1ODk4YmMtZGZhYi00ZjhmLWIxZmEtZWUwMmZmMDYwMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+ZSvp5+EWUxeeMu9EHQ4mMViYRbjmRS4S2q DX/+EnSsc+bbp6I+woxu6W9XnPP3EhRrUucsKE/lKN7UHTSdFP6NVRBXemp9+SQg 9PozUnnvscLY79nOHEJB9opLLB0i078uq3F6JjoZ/k9hz78l2uNQJzAUnY1LgDLG sGbb0ckVbYOM1FHdpeV1j7Mkrs0cFta6WgwSb4T6uyeqhA4ekhRQKQvNiOt8W3+T dEfOm6jx4yVboAVkDUM6qemjLLfvl6YrsZIDrBi7bbhv9JWBlaFHWpK/5F2BIAIC XRWqcvgN0qe6t2YsbaHZ4lwmhT0NzqD0RhDDqnEd3MxhbHZ2JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhGetZ3XDMBzV8Dhy7x0mlf9JpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvNGE5NGE1MGMtYTU1Ni0z OWIwLTgzYWYtYTFkNjk0MDA1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0 YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjeo3bXjjmIaqoOo6qPXdZ1PiWq3aBC3j8Wp4nU1WzR6x7gf9H9+dbp zHIjUIMxq36jKFtHf8n7LK7aBRkpcaRWa5KAltE5SU5oMnGERPoc6miBNuM8MfhY w24itPAGh3qhw1tYitz3OVJ/CKrmjEK0wfWA/s6+YQpTsgG942AsoIzu72Rw9VIu QBxUorhh9c3lk4J0iBDzrLj82RlXo+lBfXn6Ev/lSrqDKrSeUodkuts7QX8UNwuj 56ga0/QHEvvN8sXZzV7jf/+VoqM9jIvOn05KztldDK+S1zFGV6ZAYxYBBMh7W0ss fSTy+dTjx9wZ5ta7SROPopfsCCFMgvk= -----END CERTIFICATE-----Generated at Tue Oct 13 15:01:53 2026 by rpki-client