$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: otGXrQaDG3gQYejvVxl2zj/jHgx5qKm4rM6XWoUV47g= Subject key identifier: 97:31:AC:2C:51:F9:BD:E3:B5:C8:F5:29:41:BD:F2:C4:47:F6:F3:D3 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584F4976D64774057DDE2C7EFB80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d6:47:74:05:7d:de:2c:7e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09feba88-0f44-41bf-b8ac-c7076ff0588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:7d:67:c5:58:e1:06:17:ff:47:b0:98:93: e1:a3:c7:a3:97:b1:b4:b3:01:3a:23:a0:1d:21:2a: eb:4a:7e:2a:ce:45:5f:b0:41:37:c2:6e:06:f3:9b: a9:d3:f9:fc:04:63:98:85:69:c0:5f:c2:89:07:07: b9:7f:a5:54:69:fe:e8:1d:cb:37:06:b8:a5:d4:b2: 11:12:b9:c4:b2:34:ee:ea:78:60:23:ce:81:8e:d6: fd:e1:e2:e5:6e:ba:d0:90:8a:88:21:4f:06:5b:d2: cb:22:c9:31:0b:fd:1a:6b:be:8e:9b:5e:09:76:c6: 4d:d0:3d:6a:25:32:56:64:2e:81:ff:b0:92:bf:c2: 63:6f:39:6c:f9:61:3c:ad:5f:5a:6b:69:c4:94:98: 8d:06:41:de:e4:81:2c:f0:3d:6b:95:1a:09:9b:f6: c6:6c:02:73:88:f6:92:df:0e:9d:4e:cb:7b:fc:b7: 3e:29:62:a6:e1:1c:45:10:64:07:59:e4:28:86:a0: 03:fd:8b:1c:fe:7a:ef:0d:07:fe:45:20:21:39:a2: d8:43:82:fb:0e:ea:96:7f:6b:f8:7a:de:98:dc:5e: 24:d9:a9:44:0f:b6:3f:72:07:fb:df:37:05:b6:f0: 78:a8:1c:91:0c:4a:a4:54:a2:12:40:de:90:1e:1d: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:AC:2C:51:F9:BD:E3:B5:C8:F5:29:41:BD:F2:C4:47:F6:F3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1b:4c:f4:6d:d8:1e:c4:af:a7:3a:c8:48:f8:29:c3:c9:4e: 05:6c:c5:25:05:36:d6:d9:e3:fd:3b:63:c7:86:89:dd:8a:c9: 2b:95:f8:f5:70:60:93:66:3c:f9:67:5b:59:9f:2f:b8:3d:f0: b1:45:e7:3c:eb:2d:cd:d3:06:5b:79:1f:a6:50:d3:88:86:e8: c9:55:d4:7b:b3:43:0f:60:f4:00:2e:db:9a:44:dd:98:d5:4c: 80:dd:9a:b8:03:6b:f3:0b:0b:f4:0c:fe:b1:a4:67:38:2a:78: 07:44:6c:41:ec:c1:7d:e5:bb:8f:0e:17:e3:0c:aa:2a:01:bc: 5f:f8:52:7c:05:d9:b2:39:56:fc:9c:e4:e7:e1:0f:79:f0:ef: d6:d3:fe:0f:16:3a:46:4c:ce:e2:11:71:7d:1c:2d:6e:9e:70: 2e:80:42:31:20:ac:04:fb:09:9d:6a:eb:05:7d:01:21:7a:31: 71:24:ec:fb:8b:c7:18:45:25:5a:75:ca:51:e0:22:37:af:d1: fa:07:43:aa:d7:9f:8e:92:0f:a3:e5:12:cf:b4:0d:b3:aa:e6: 9e:39:7c:07:8a:84:d9:c5:6a:5a:ce:22:b2:46:f6:5c:f8:e0: 48:7c:57:d9:ca:4c:a1:ff:81:af:59:29:74:75:46:4d:07:ba: 88:9a:1a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtZHdAV93ix++4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDlmZWJhODgtMGY0NC00MWJmLWI4YWMtYzcwNzZmZjA1ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicB9Z8VY4QYX/0ewmJPho8ejl7G0swE6I6Ad ISrrSn4qzkVfsEE3wm4G85up0/n8BGOYhWnAX8KJBwe5f6VUaf7oHcs3Bril1LIR ErnEsjTu6nhgI86Bjtb94eLlbrrQkIqIIU8GW9LLIskxC/0aa76Om14JdsZN0D1q JTJWZC6B/7CSv8Jjbzls+WE8rV9aa2nElJiNBkHe5IEs8D1rlRoJm/bGbAJziPaS 3w6dTst7/Lc+KWKm4RxFEGQHWeQohqAD/Ysc/nrvDQf+RSAhOaLYQ4L7DuqWf2v4 et6Y3F4k2alED7Y/cgf73zcFtvB4qByRDEqkVKISQN6QHh2Y3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcxrCxR+b3jtcj1KUG98sRH9vPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMbTPRt2B7Er6c6yEj4KcPJTgVsxSUFNtbZ4/07Y8eGid2KySuV+PVw YJNmPPlnW1mfL7g98LFF5zzrLc3TBlt5H6ZQ04iG6MlV1HuzQw9g9AAu25pE3ZjV TIDdmrgDa/MLC/QM/rGkZzgqeAdEbEHswX3lu48OF+MMqioBvF/4UnwF2bI5Vvyc 5OfhD3nw79bT/g8WOkZMzuIRcX0cLW6ecC6AQjEgrAT7CZ1q6wV9ASF6MXEk7PuL xxhFJVp1ylHgIjev0foHQ6rXn46SD6PlEs+0DbOq5p45fAeKhNnFalrOIrJG9lz4 4Eh8V9nKTKH/ga9ZKXR1Rk0HuoiaGqg= -----END CERTIFICATE-----Generated at Sun Oct 4 08:40:50 2026 by rpki-client