$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa File: 0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa (raw, json) Hash identifier: NvDL8BL2WGNkdCaFGaP9hXIlRwFVrYyVgm69VkgwAC4= Subject key identifier: 53:44:BD:19:7E:73:E9:D1:FC:62:64:E9:22:D5:29:58:04:78:5C:E6 Certificate issuer: /CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Certificate serial: 010D0C9F4328584FD3C149F84AB000415B88F480 Authority key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa Signing time: Fri 13 Nov 2026 14:00:14 +0000 ROA not before: Fri 13 Nov 2026 14:00:14 +0000 ROA not after: Thu 11 Feb 2027 14:00:14 +0000 asID: 394232 IP address blocks: 74.114.16.0/21 maxlen: 21 165.140.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:c1:49:f8:4a:b0:00:41:5b:88:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Validity Not Before: Nov 13 14:00:14 2026 GMT Not After : Feb 11 14:00:14 2027 GMT Subject: CN=61ef58e2-9350-4f27-9f89-baf4ca19c8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:b9:ce:4a:b2:fc:ce:07:97:81:0c:32:f0: a4:19:db:d9:26:89:45:fd:24:20:ab:29:f7:97:c3: 11:0f:77:d8:33:27:06:f0:56:d9:ff:e9:91:6b:53: f3:2b:99:eb:98:e7:c5:eb:31:ce:f0:b2:5b:53:69: 48:4e:b8:8f:54:2a:ed:8f:7d:4e:3a:9d:a4:f1:a6: 13:d2:c4:a9:21:a5:61:84:a1:e4:00:6b:f7:e7:72: cb:15:2e:b7:1d:c4:fa:93:7a:6f:aa:3d:a0:e9:7c: 11:23:dd:20:79:e4:b6:2d:49:5c:cf:2e:97:fd:b7: 11:b0:d1:96:57:a3:54:90:b7:68:5b:50:e6:7e:a6: 92:37:3b:e2:f5:6c:b3:50:d3:59:e2:de:7e:f7:c6: 78:74:cf:2d:ab:27:cd:33:b7:8e:f6:a1:97:c1:39: b5:f3:e9:5a:8e:39:d1:d2:ce:54:a0:37:43:8d:5b: 67:40:3c:e6:ba:6a:67:8b:ed:f4:88:4e:fe:5e:22: ca:7c:90:38:84:90:4a:97:5d:b3:b4:e2:0b:bf:9f: ee:36:5c:47:a9:36:d2:67:fe:37:c2:e6:ac:ce:9f: cf:a6:a3:27:da:5b:48:a6:0c:2b:7a:a5:d0:d5:24: c6:4e:6a:21:03:31:a4:a4:c2:b4:e5:22:be:37:43: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:BD:19:7E:73:E9:D1:FC:62:64:E9:22:D5:29:58:04:78:5C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/0d82ebbc-ac29-3456-9be7-2c6fc8b240af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl X509v3 Authority Key Identifier: keyid:EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer sbgp-ipAddrBlock: critical IPv4: 74.114.16.0/21 165.140.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e0:81:f7:3d:4c:1c:8f:d8:fd:cd:a2:5e:5e:13:0c:00:60: ba:a2:06:bf:1a:3f:31:26:a3:69:56:31:fa:e5:7a:39:fd:e3: 7c:6c:4f:79:94:35:ee:a3:9a:dd:d2:64:aa:11:1c:8e:fc:89: ef:df:4c:ed:08:e8:48:2b:a4:35:5d:11:8f:42:8f:45:1f:b7: 88:f7:59:d1:73:aa:85:24:83:a4:39:5b:c5:2a:a0:34:4a:f8: 27:ed:98:95:f7:9a:85:07:03:43:ab:60:b1:7b:3f:a9:63:22: b9:63:4e:dc:33:63:98:71:3d:86:28:f2:76:06:49:41:3c:6b: 25:f2:02:4b:b4:62:e4:16:90:6b:f4:cd:02:c1:22:86:cd:c1: 0a:0b:a7:18:a2:1e:ea:66:64:40:3a:3c:33:55:06:34:e0:ca: 59:32:0f:00:0d:de:04:b9:dc:1b:02:04:ae:40:10:d9:ad:59: 8c:78:13:b2:9f:af:5d:f4:2f:ec:8c:e3:e7:98:9a:2a:a8:02: cc:94:ee:48:e8:ef:f1:a4:02:48:f5:94:eb:46:59:cc:07:12: ba:16:71:ab:1c:62:53:ad:c0:89:25:74:ac:f5:57:59:e9:76: 60:0a:ca:17:b5:ba:20:84:16:38:e5:50:cd:b9:bf:1c:2b:ad: 62:0b:df:7f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE/TwUn4SrAAQVuI9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiNjIwZGMtOGEyZS00ZTk3LWIzY2QtZjk1ZjgzMTdi ZGVmMB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk NjFlZjU4ZTItOTM1MC00ZjI3LTlmODktYmFmNGNhMTljOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrO5zkqy/M4Hl4EMMvCkGdvZJolF/SQgqyn3 l8MRD3fYMycG8FbZ/+mRa1PzK5nrmOfF6zHO8LJbU2lITriPVCrtj31OOp2k8aYT 0sSpIaVhhKHkAGv353LLFS63HcT6k3pvqj2g6XwRI90geeS2LUlczy6X/bcRsNGW V6NUkLdoW1DmfqaSNzvi9WyzUNNZ4t5+98Z4dM8tqyfNM7eO9qGXwTm18+lajjnR 0s5UoDdDjVtnQDzmumpni+30iE7+XiLKfJA4hJBKl12ztOILv5/uNlxHqTbSZ/43 wuaszp/PpqMn2ltIpgwreqXQ1STGTmohAzGkpMK05SK+N0NQ8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFNEvRl+c+nR/GJk6SLVKVgEeFzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWI2 MjBkYy04YTJlLTRlOTctYjNjZC1mOTVmODMxN2JkZWYvMGQ4MmViYmMtYWMyOS0z NDU2LTliZTctMmM2ZmM4YjI0MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGFiNjIwZGMtOGEyZS00ZTk3LWIz Y2QtZjk1ZjgzMTdiZGVmLzRhYjYyMGRjLThhMmUtNGU5Ny1iM2NkLWY5NWY4MzE3 YmRlZi5jcmwwHwYDVR0jBBgwFoAU6uo04wo5tOnabHctXSweBmjmsPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80YWI2MjBkYy04YTJlLTRlOTctYjNjZC1mOTVm ODMxN2JkZWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSnIQAwQC pYysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG3ggfc9TByP2P3Nol5eEwwAYLqiBr8aPzEmo2lWMfrlejn9 43xsT3mUNe6jmt3SZKoRHI78ie/fTO0I6EgrpDVdEY9Cj0Uft4j3WdFzqoUkg6Q5 W8UqoDRK+CftmJX3moUHA0OrYLF7P6ljIrljTtwzY5hxPYYo8nYGSUE8ayXyAku0 YuQWkGv0zQLBIobNwQoLpxiiHupmZEA6PDNVBjTgylkyDwAN3gS53BsCBK5AENmt WYx4E7Kfr130L+yM4+eYmiqoAsyU7kjo7/GkAkj1lOtGWcwHEroWcascYlOtwIkl dKz1V1npdmAKyhe1uiCEFjjlUM25vxwrrWIL338= -----END CERTIFICATE-----Generated at Sun Nov 15 15:31:05 2026 by rpki-client