$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa File: 2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa (raw, json) Hash identifier: c4K99B2nN6MmW6pme0zAxw5fy2a4f+tVoeBoobqJrGI= Subject key identifier: AB:E7:A8:A7:BC:8B:D2:D3:7D:E2:22:8D:CF:4E:86:01:ED:F7:F6:76 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BBF3F1D2847D3D16BF4C0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 74.126.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:bf:3f:1d:28:47:d3:d1:6b:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=2592d72b-10a9-4da8-9e64-fcdbbbf98044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:b6:18:8a:32:37:a7:b6:b2:c1:d3:9a:e8:91: d6:6c:2c:69:d1:6a:9c:50:8f:41:fe:57:95:2b:41: 1f:df:40:2e:3c:c9:84:aa:0c:77:19:9a:c3:0b:15: ac:25:5c:9d:ee:99:84:57:71:77:39:e5:17:a4:18: 82:a1:08:58:8d:3c:1d:c3:82:c8:e5:59:42:21:ce: 07:e5:1d:45:85:8c:8f:ea:39:58:c2:ec:20:e6:d8: 3e:c9:7e:1f:22:c7:96:c3:4c:91:e7:24:dc:9d:22: 8c:87:c7:b3:28:f9:76:08:8a:a4:31:34:42:fd:b3: 69:63:4d:63:13:4b:81:a1:a8:01:5d:62:f6:e0:b5: 30:cf:d4:f1:5e:d8:f4:40:d3:fe:33:5f:87:12:ca: 90:e1:3c:fd:26:59:e4:2b:8a:83:50:ba:18:a8:4e: b4:cd:ac:a3:bb:07:e3:d2:43:fb:c0:00:f7:12:ae: 4c:40:1b:d8:9c:8f:26:43:49:e2:bd:df:54:67:9f: dc:da:48:91:52:f6:bb:18:ef:98:07:9e:f1:8c:f1: f2:f8:d4:2a:71:20:9e:0c:09:1c:19:f2:d5:3c:09: e1:18:a5:f9:42:03:d7:5d:89:94:12:f1:59:30:0f: 32:a3:36:ab:25:5c:c2:64:7f:db:b5:1b:ef:fa:85: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:A8:A7:BC:8B:D2:D3:7D:E2:22:8D:CF:4E:86:01:ED:F7:F6:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 74.126.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c7:c0:71:05:42:1f:b8:78:0c:40:12:5d:5f:95:c6:5f:9f: 7e:71:4e:46:e6:bd:79:52:a5:b4:68:96:b5:ff:1b:6a:67:45: 75:24:b5:9c:65:8c:a1:78:9f:7b:4b:6b:c3:e2:ac:1b:ba:12: 69:6f:5e:da:48:60:14:3f:fc:a8:a9:41:9d:9d:aa:26:e9:40: b7:53:27:8c:21:ec:b4:7f:c8:73:cf:08:ba:bd:ba:0f:3c:ae: 23:05:c4:8b:4a:da:ea:62:fa:58:4d:45:bd:21:b4:97:17:68: bc:d1:4d:29:67:a5:aa:6e:20:63:87:e7:15:b2:0f:f5:e1:bb: 20:8f:f4:43:7b:b0:50:f2:26:48:e6:03:a2:50:19:7d:3f:7b: 62:2f:2b:99:77:94:88:21:55:93:c8:cf:79:df:aa:e0:64:e8: c0:76:04:ef:cf:3e:ee:ce:f3:38:2f:c6:7c:c5:65:a0:24:ff: 07:c0:64:77:2a:57:38:e4:69:0b:1e:36:b0:ec:a0:14:7d:d5: f2:38:7d:61:0e:78:24:8a:02:c7:6d:cb:de:9d:da:44:0a:d4: 8d:79:6b:ac:b6:f9:24:dd:bb:9d:97:c7:fa:c2:a8:b5:7d:3c: 60:33:4c:dd:35:3d:68:45:99:96:cc:1a:17:f8:03:b1:5c:c2: 77:66:dd:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram78/HShH09Fr9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MjU5MmQ3MmItMTBhOS00ZGE4LTllNjQtZmNkYmJiZjk4MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/LYYijI3p7aywdOa6JHWbCxp0WqcUI9B/leV K0Ef30AuPMmEqgx3GZrDCxWsJVyd7pmEV3F3OeUXpBiCoQhYjTwdw4LI5VlCIc4H 5R1FhYyP6jlYwuwg5tg+yX4fIseWw0yR5yTcnSKMh8ezKPl2CIqkMTRC/bNpY01j E0uBoagBXWL24LUwz9TxXtj0QNP+M1+HEsqQ4Tz9JlnkK4qDULoYqE60zayjuwfj 0kP7wAD3Eq5MQBvYnI8mQ0nivd9UZ5/c2kiRUva7GO+YB57xjPHy+NQqcSCeDAkc GfLVPAnhGKX5QgPXXYmUEvFZMA8yozarJVzCZH/btRvv+oWp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvnqKe8i9LTfeIijc9OhgHt9/Z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMmIyNmFmZjQtNjdlZC0z NDIyLTlhNjYtZTE3ZWNkZjg2ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvHwHEFQh+4eAxAEl1flcZfn35xTkbmvXlSpbRolrX/G2pnRXUktZxl jKF4n3tLa8PirBu6EmlvXtpIYBQ//KipQZ2dqibpQLdTJ4wh7LR/yHPPCLq9ug88 riMFxItK2upi+lhNRb0htJcXaLzRTSlnpapuIGOH5xWyD/XhuyCP9EN7sFDyJkjm A6JQGX0/e2IvK5l3lIghVZPIz3nfquBk6MB2BO/PPu7O8zgvxnzFZaAk/wfAZHcq VzjkaQseNrDsoBR91fI4fWEOeCSKAsdty96d2kQK1I15a6y2+STdu52Xx/rCqLV9 PGAzTN01PWhFmZbMGhf4A7Fcwndm3cQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:16 2025 by rpki-client