$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35f00a27-0ae2-3d41-8ba8-56c7e4bc20e5.roa File: 35f00a27-0ae2-3d41-8ba8-56c7e4bc20e5.roa (raw, json) Hash identifier: jhwsz0M0r3L67WkIZaVErjPnq/9/gkpWBtEjnXC6shs= Subject key identifier: CF:C6:8D:60:62:E7:D4:B7:2E:04:66:99:C8:D5:B1:56:8F:34:0E:AD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584FC5CBFCC9F65BE27F97FBD1C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35f00a27-0ae2-3d41-8ba8-56c7e4bc20e5.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 30036 IP address blocks: 74.84.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:fc:c9:f6:5b:e2:7f:97:fb:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=968b4d78-b84d-410d-a378-5ed5701cdeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bd:45:55:3c:c0:ef:a3:f4:5f:b3:41:f8:7a: e3:7d:52:cc:75:2f:16:cf:d6:5d:29:6c:26:66:45: a7:8e:5e:de:d7:04:52:9e:31:89:50:53:ff:97:f8: 84:ff:f0:66:12:17:0a:87:ee:89:4e:52:7e:f1:c5: c4:cd:4a:9b:58:f2:88:99:f4:69:08:ae:13:e6:de: 48:c9:65:1f:fd:0a:81:c7:9b:fa:20:c5:53:e4:2d: 37:47:67:51:16:2c:dd:cd:20:00:72:db:ab:d1:f7: bd:e3:65:2a:a1:f1:64:9b:27:2c:5c:c2:56:d0:4d: 31:73:48:8b:49:39:60:3c:d8:a0:c8:89:77:a7:e6: 46:0f:34:70:96:33:bf:2b:4d:b5:c4:59:7d:65:12: 5f:be:f2:26:07:88:4a:cf:4d:31:08:d2:8d:64:61: 66:f9:6a:d8:b3:52:05:27:e5:5a:b3:16:dc:e2:dc: 1d:62:66:06:50:61:d7:34:8e:55:89:2f:39:47:91: 7e:2c:b2:40:cb:c8:03:39:19:4f:e8:54:69:fb:f8: ae:d9:2e:c3:7c:f1:4e:5a:f4:bb:4f:53:50:4c:a3: 28:de:32:2f:56:28:f8:91:3a:ce:f7:dd:63:56:9f: 86:95:5f:95:7e:e1:88:2a:c6:f3:5c:ae:4e:ba:f7: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C6:8D:60:62:E7:D4:B7:2E:04:66:99:C8:D5:B1:56:8F:34:0E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35f00a27-0ae2-3d41-8ba8-56c7e4bc20e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c4:99:0f:38:c7:ec:8b:84:74:42:77:52:55:11:d9:cd:47: b0:be:38:16:73:a2:b4:2a:31:9c:71:b3:aa:7b:e5:5b:88:02: d0:cd:d6:93:c4:dc:40:2e:45:b1:52:f3:73:75:57:7a:4a:1a: ea:57:0f:77:0b:5d:dd:cc:f0:47:e1:72:da:a1:43:9f:5f:bd: dc:9c:60:b8:86:13:10:42:87:4f:df:d6:c6:74:73:d7:7e:93: 10:db:0e:c4:e6:ba:55:da:f9:81:c6:6b:4a:3d:14:da:0f:6e: 2d:67:07:b2:06:02:90:9b:96:50:e7:15:28:02:16:b3:c0:05: 73:2c:95:eb:a2:2e:87:c0:39:7e:f2:26:d8:6f:a1:d3:aa:cc: 3b:0f:b8:4b:a5:18:3a:57:05:6a:33:ee:2a:f8:ae:c3:00:43: d8:57:ed:cf:73:b7:a9:c0:7e:8f:43:76:d1:02:22:0b:69:09: 30:4c:00:00:b8:a8:f6:eb:05:fa:ff:68:84:d0:cc:61:2a:06: 76:ca:11:fe:00:ce:5b:cd:60:09:6d:a1:6c:4d:a4:75:8a:3b: d5:e9:2b:e3:a5:4c:16:74:76:8b:7f:a2:b2:bb:a3:af:20:2b: c6:93:01:53:36:d9:fd:a5:bc:02:44:e4:c7:72:41:40:64:0c: 92:d5:9f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Fy/zJ9lvif5f70cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTY4YjRkNzgtYjg0ZC00MTBkLWEzNzgtNWVkNTcwMWNkZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr1FVTzA76P0X7NB+HrjfVLMdS8Wz9ZdKWwm ZkWnjl7e1wRSnjGJUFP/l/iE//BmEhcKh+6JTlJ+8cXEzUqbWPKImfRpCK4T5t5I yWUf/QqBx5v6IMVT5C03R2dRFizdzSAActur0fe942UqofFkmycsXMJW0E0xc0iL STlgPNigyIl3p+ZGDzRwljO/K021xFl9ZRJfvvImB4hKz00xCNKNZGFm+WrYs1IF J+Vasxbc4twdYmYGUGHXNI5ViS85R5F+LLJAy8gDORlP6FRp+/iu2S7DfPFOWvS7 T1NQTKMo3jIvVij4kTrO991jVp+GlV+VfuGIKsbzXK5OuvcNCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/GjWBi59S3LgRmmcjVsVaPNA6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzVmMDBhMjctMGFlMi0z ZDQxLThiYTgtNTZjN2U0YmMyMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSlRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPEmQ84x+yLhHRCd1JVEdnNR7C+OBZzorQqMZxxs6p75VuIAtDN1pPE 3EAuRbFS83N1V3pKGupXD3cLXd3M8EfhctqhQ59fvdycYLiGExBCh0/f1sZ0c9d+ kxDbDsTmulXa+YHGa0o9FNoPbi1nB7IGApCbllDnFSgCFrPABXMsleuiLofAOX7y JthvodOqzDsPuEulGDpXBWoz7ir4rsMAQ9hX7c9zt6nAfo9DdtECIgtpCTBMAAC4 qPbrBfr/aITQzGEqBnbKEf4AzlvNYAltoWxNpHWKO9XpK+OlTBZ0dot/orK7o68g K8aTAVM22f2lvAJE5MdyQUBkDJLVn/g= -----END CERTIFICATE-----Generated at Sun Nov 15 18:43:15 2026 by rpki-client