$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa File: 119a8ee9-c67a-3c89-b56c-207a8120cc45.roa (raw, json) Hash identifier: 9O5osnTk/mAxejxLs8hcl8oAkjMc6D2lNUxOa3zU75k= Subject key identifier: C5:68:EA:FA:19:C4:74:17:98:C3:86:8A:F1:EE:51:6A:B5:1A:7B:C1 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584F497578EEE18F9F5330B27700 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396185 IP address blocks: 74.127.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:78:ee:e1:8f:9f:53:30:b2:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8fa7ddc9-bbfb-486e-bfc6-7ea4b1f5a999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:9d:89:14:20:c8:a9:9a:ab:b7:36:6f:12: 8b:11:87:ff:f3:a0:42:11:e8:f2:ef:07:c5:59:d3: 54:f5:3d:74:84:3a:55:f9:ea:55:8f:e4:01:b0:3b: e1:d9:2f:c7:73:e3:1e:ed:8e:b7:b3:f8:7f:1d:6e: ae:1a:e7:5b:6b:17:5b:66:4e:f9:3c:1f:96:d6:33: 79:50:84:1b:9b:82:9c:a4:dd:d8:76:60:2f:b3:1f: 87:2b:0c:60:3f:74:73:23:87:cf:44:6f:3a:1a:d6: 9f:cf:10:57:17:13:a4:36:1f:b3:16:be:56:6d:59: 29:99:f9:ca:f5:7b:ee:dd:19:d1:4b:28:df:fa:bf: 0a:47:34:88:87:a0:c7:36:df:19:ae:09:3f:a1:fb: bf:b3:61:6d:01:af:8b:34:33:c0:84:4f:d2:f2:43: f4:36:a5:2d:36:47:51:da:7b:b1:10:35:fc:20:87: ba:c3:75:d7:f1:5b:09:b8:36:49:e1:34:1e:58:b6: 86:58:52:c7:27:0e:b0:de:44:58:12:8f:65:dc:e7: 7f:ed:38:e6:0e:be:10:56:b2:a8:9e:e4:27:52:66: 02:87:87:1d:a7:56:a5:c7:11:f6:2b:12:69:99:38: 20:a8:bd:f0:6f:3b:d7:f6:c5:1a:5e:91:4d:4a:5a: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:EA:FA:19:C4:74:17:98:C3:86:8A:F1:EE:51:6A:B5:1A:7B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:76:0b:e9:b6:62:c0:06:f6:ea:32:9b:35:35:fd:7c:1e:49: 35:35:da:c7:a8:99:1a:18:0f:85:bc:29:14:db:74:12:7e:d4: 17:00:4b:f2:5b:cb:79:d9:61:ce:44:b2:8f:27:31:77:ad:75: 1c:28:b7:82:8c:84:b6:a3:cf:0b:1a:d9:1b:92:e2:73:0d:31: 94:78:46:28:81:3a:70:0b:21:d8:46:c4:a2:b5:0e:8a:78:b8: 84:6f:66:6f:0e:eb:e1:8c:00:2b:69:2b:6e:e5:c2:78:23:69: 9e:ea:ed:cc:c8:e0:3a:0d:a7:ac:2f:44:ae:1b:d7:ea:60:c0: 65:9d:89:d1:6f:d8:25:5c:64:8c:db:1a:ff:f1:da:ee:31:b5: f1:35:e6:2f:93:32:d6:72:ee:0b:a1:f3:8e:d7:59:01:23:2b: 78:58:46:68:7e:1e:c9:4b:7c:b0:26:53:8f:40:48:30:1e:15: 96:a6:70:4e:34:57:ae:ba:d8:c0:a3:49:81:5f:fc:55:e7:d8: fc:24:91:b4:69:cb:32:0f:ab:e7:5b:b0:ab:16:7e:d3:9a:ac: 20:db:5b:58:cf:48:d7:af:18:78:e4:3c:d8:5c:0e:9d:a9:83: d1:16:8d:e8:61:80:11:c3:7f:44:4b:d0:c3:f7:ae:e9:d7:fb: 56:e3:80:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXju4Y+fUzCydwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZhN2RkYzktYmJmYi00ODZlLWJmYzYtN2VhNGIxZjVhOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32WdiRQgyKmaq7c2bxKLEYf/86BCEejy7wfF WdNU9T10hDpV+epVj+QBsDvh2S/Hc+Me7Y63s/h/HW6uGudbaxdbZk75PB+W1jN5 UIQbm4KcpN3YdmAvsx+HKwxgP3RzI4fPRG86GtafzxBXFxOkNh+zFr5WbVkpmfnK 9Xvu3RnRSyjf+r8KRzSIh6DHNt8Zrgk/ofu/s2FtAa+LNDPAhE/S8kP0NqUtNkdR 2nuxEDX8IIe6w3XX8VsJuDZJ4TQeWLaGWFLHJw6w3kRYEo9l3Od/7TjmDr4QVrKo nuQnUmYCh4cdp1alxxH2KxJpmTggqL3wbzvX9sUaXpFNSlrS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVo6voZxHQXmMOGivHuUWq1GnvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTE5YThlZTktYzY3YS0z Yzg5LWI1NmMtMjA3YTgxMjBjYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA52C+m2YsAG9uoymzU1/XweSTU12seomRoYD4W8KRTbdBJ+1BcAS/Jb y3nZYc5Eso8nMXetdRwot4KMhLajzwsa2RuS4nMNMZR4RiiBOnALIdhGxKK1Dop4 uIRvZm8O6+GMACtpK27lwngjaZ7q7czI4DoNp6wvRK4b1+pgwGWdidFv2CVcZIzb Gv/x2u4xtfE15i+TMtZy7guh847XWQEjK3hYRmh+HslLfLAmU49ASDAeFZamcE40 V6662MCjSYFf/FXn2PwkkbRpyzIPq+dbsKsWftOarCDbW1jPSNevGHjkPNhcDp2p g9EWjehhgBHDf0RL0MP3runX+1bjgCc= -----END CERTIFICATE-----Generated at Sat Sep 26 17:05:57 2026 by rpki-client