$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa File: 952be825-45a2-31b9-be3f-703b38227bd4.roa (raw, json) Hash identifier: J/xoYSDL16Qdv2r+WL6cfAGzOiRqYK6oKYr00rh93XU= Subject key identifier: 8B:0B:79:61:B2:86:27:D3:06:3C:6E:1F:E0:64:3A:49:FE:54:EB:5A Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584F4F0816E4F8BF66D20003A740 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 398420 IP address blocks: 74.126.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:16:e4:f8:bf:66:d2:00:03:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=d2e4e181-5038-41db-9b34-519da57c169d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:37:38:8b:ba:d7:39:7d:33:87:af:76:9d: a4:bb:4e:07:f2:2e:11:e6:e3:35:93:1c:2d:2e:30: 3a:6b:a1:a1:7c:6d:3f:07:aa:e1:6d:2f:2f:4b:7f: 80:58:c5:a2:05:f1:ea:06:c2:09:8a:68:55:a1:49: 24:ac:e9:c3:a5:f5:59:54:f2:b3:98:02:0b:af:3c: 87:c6:4d:f7:4f:42:c9:b5:d4:42:7b:62:c3:ea:75: 2c:a8:2e:e8:0c:a7:e7:b8:1c:ae:be:0e:36:69:9c: b3:83:7f:4c:37:15:95:ea:0b:0c:e3:73:f9:a1:ec: 12:80:db:36:be:09:db:37:e8:e3:bb:14:b5:8d:22: 94:01:74:82:6f:78:09:4e:2d:a0:bf:34:ea:73:4a: d1:9f:fd:6f:51:d1:75:c3:93:4d:fb:e6:02:03:a7: 8d:f9:ab:4b:fd:c9:89:0a:67:e7:81:62:c4:f2:95: 4d:48:44:9f:65:85:be:80:ec:14:98:e0:36:ad:3c: 6e:98:72:b2:9a:ee:e7:bc:86:ff:c5:b5:a3:07:45: bb:f8:ca:e8:02:e6:4b:a0:78:a3:4b:8c:42:d7:89: cc:8d:2e:69:09:81:36:6d:59:f1:80:a4:98:d8:4e: 7b:01:9d:32:b1:f1:50:c1:6b:f6:46:11:62:b1:75: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0B:79:61:B2:86:27:D3:06:3C:6E:1F:E0:64:3A:49:FE:54:EB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2d:3b:bf:10:44:83:9a:16:af:82:06:d9:e7:a4:be:df:3d: f9:16:b2:79:14:ed:a1:3b:f4:9b:b7:ea:0b:0d:1a:ee:a9:29: 21:2f:a9:4d:1b:be:e2:40:01:59:49:0c:9f:f8:b1:06:77:dc: c4:9c:eb:eb:0d:c7:8c:9f:7b:65:b5:22:9d:7c:a2:d0:ed:2d: 1b:94:b5:5e:43:47:0e:bc:fc:a2:fe:60:a0:00:0c:f5:e0:9d: fc:73:e7:1d:9e:ba:58:4f:b0:45:0b:58:c4:fe:53:c0:15:bc: 85:2c:90:76:8e:5a:ba:e3:3a:fe:2c:44:15:bf:ed:fa:9e:50: 31:55:3a:d2:c4:ae:2d:76:dd:9d:37:c2:e3:e7:64:ff:cc:11: 6a:8d:91:8b:b0:af:6e:01:bd:be:cd:d8:e9:06:f2:29:d9:bf: 21:0f:2e:43:ab:61:2b:4e:79:44:24:dc:9f:c8:08:bd:0e:c1: b5:dd:89:d5:9a:b7:38:01:79:61:ac:79:3c:5c:1d:31:8f:96: 7f:c0:09:41:22:84:9f:da:71:e2:e1:ab:94:a3:a8:99:af:4c: 6d:6c:4f:4c:e6:71:91:e2:c1:01:b4:c1:e4:f8:36:e5:a6:14: 02:56:37:2f:fc:c0:56:80:46:73:fe:38:7c:f0:bc:64:6a:5b: 9a:85:57:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBbk+L9m0gADp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZDJlNGUxODEtNTAzOC00MWRiLTliMzQtNTE5ZGE1N2MxNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQk3OIu61zl9M4evdp2ku04H8i4R5uM1kxwt LjA6a6GhfG0/B6rhbS8vS3+AWMWiBfHqBsIJimhVoUkkrOnDpfVZVPKzmAILrzyH xk33T0LJtdRCe2LD6nUsqC7oDKfnuByuvg42aZyzg39MNxWV6gsM43P5oewSgNs2 vgnbN+jjuxS1jSKUAXSCb3gJTi2gvzTqc0rRn/1vUdF1w5NN++YCA6eN+atL/cmJ CmfngWLE8pVNSESfZYW+gOwUmOA2rTxumHKymu7nvIb/xbWjB0W7+MroAuZLoHij S4xC14nMjS5pCYE2bVnxgKSY2E57AZ0ysfFQwWv2RhFisXXaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsLeWGyhifTBjxuH+BkOkn+VOtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvOTUyYmU4MjUtNDVhMi0z MWI5LWJlM2YtNzAzYjM4MjI3YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYtO78QRIOaFq+CBtnnpL7fPfkWsnkU7aE79Ju36gsNGu6pKSEvqU0b vuJAAVlJDJ/4sQZ33MSc6+sNx4yfe2W1Ip18otDtLRuUtV5DRw68/KL+YKAADPXg nfxz5x2eulhPsEULWMT+U8AVvIUskHaOWrrjOv4sRBW/7fqeUDFVOtLEri123Z03 wuPnZP/MEWqNkYuwr24Bvb7N2OkG8inZvyEPLkOrYStOeUQk3J/ICL0OwbXdidWa tzgBeWGseTxcHTGPln/ACUEihJ/aceLhq5SjqJmvTG1sT0zmcZHiwQG0weT4NuWm FAJWNy/8wFaARnP+OHzwvGRqW5qFV/g= -----END CERTIFICATE-----Generated at Sat Oct 3 12:56:59 2026 by rpki-client