$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa File: 6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (raw, json) Hash identifier: N6CrChFq4Qk+o2qiTI4KjdAssNd1zdJiJirFxgiQaDY= Subject key identifier: 48:35:43:24:4C:B4:CF:03:C3:1B:C5:BE:70:8C:A7:04:DA:3E:1A:33 Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584D9325476214205F0B43285C98 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 19528 IP address blocks: 74.209.184.0/22 maxlen: 24 74.209.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:47:62:14:20:5f:0b:43:28:5c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=3c01ec2a-e0f8-4087-9b21-9f9c7d9dafed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:cf:8e:32:67:b9:ad:de:71:f8:a2:99:ec: 53:65:7f:00:58:47:d2:4c:99:81:19:5d:71:f4:a9: d9:25:bd:44:99:da:f3:d2:b1:8e:a1:45:ae:b1:03: c9:0f:c1:79:79:b3:00:6e:f0:a5:69:27:e1:41:3a: 14:d7:25:70:9e:81:30:24:ec:bd:96:06:55:92:1e: 30:24:89:c3:e0:a1:6b:2c:1d:d2:e5:e2:98:7e:15: 8b:c5:ca:e2:00:45:30:11:b1:0b:3f:dd:3f:39:aa: 20:01:1b:41:80:19:45:da:d8:88:9b:b2:19:32:51: c0:4e:c1:7c:48:d1:72:45:c3:0e:75:6d:01:72:90: 7c:31:7e:1d:3e:01:89:05:74:f2:a1:48:30:a2:93: 18:f7:bd:ec:c8:b4:2d:5a:0f:00:ab:d1:f1:26:ab: ee:55:12:a7:6b:3e:48:09:02:73:7a:31:6c:38:14: 3f:d3:9f:c4:2d:de:1a:92:fc:83:6c:73:66:22:58: 93:f1:9e:57:cd:68:f0:30:54:c7:31:61:81:ee:65: a3:98:4f:1f:c7:fc:4f:fa:dc:66:a8:1e:79:df:92: 6f:7e:33:a4:94:8a:7e:23:fb:39:ef:ba:6e:8d:17: cc:f1:14:74:e2:6e:b2:75:f8:59:46:e9:71:2f:a0: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:35:43:24:4C:B4:CF:03:C3:1B:C5:BE:70:8C:A7:04:DA:3E:1A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:85:89:b2:7b:b6:a8:f1:52:ef:ac:f3:80:32:54:98:fd:db: 9d:f4:f4:9d:29:61:bf:93:39:02:b4:6e:93:c8:fe:f9:19:9b: 48:98:88:1d:b5:35:ad:07:64:07:0d:5c:b0:ca:d9:46:41:3d: 4c:a7:5c:28:d7:1e:75:0e:d4:3c:7e:2d:21:cb:7f:d0:b0:c2: 5f:20:b7:07:ea:d3:83:4b:33:8b:b5:99:80:e4:1c:33:4e:ff: f2:24:1a:16:1a:e6:17:06:3e:61:d6:f6:e3:da:e1:3b:28:a1: 75:0a:7f:fb:67:b8:b8:ca:3a:58:cb:3a:8d:09:8b:79:3f:97: 3f:29:ed:fc:ee:1a:94:be:a8:f0:fe:db:2b:b4:66:aa:60:cc: 71:f5:8a:9a:19:7c:98:1e:4b:8a:d5:a9:67:d1:26:75:d8:ee: 72:b3:0a:2b:9b:0e:e1:20:0f:51:6b:55:69:65:55:3f:de:9d: e6:63:7d:b8:bb:6a:c5:be:49:e2:da:ae:e4:69:ec:ca:97:e6: 86:d7:b7:59:80:63:f6:46:84:3f:b1:7c:52:bd:1b:ae:03:90: dd:f7:d6:52:d7:fa:54:26:58:53:8d:c0:ac:fb:b8:a4:30:ae: e1:2a:e4:97:4d:3c:85:5f:c5:f4:10:d2:4c:e8:9c:b8:f0:77: 03:d5:f0:19 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2TJUdiFCBfC0MoXJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk M2MwMWVjMmEtZTBmOC00MDg3LTliMjEtOWY5YzdkOWRhZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPnPjjJnua3ecfiimexTZX8AWEfSTJmBGV1x 9KnZJb1Emdrz0rGOoUWusQPJD8F5ebMAbvClaSfhQToU1yVwnoEwJOy9lgZVkh4w JInD4KFrLB3S5eKYfhWLxcriAEUwEbELP90/OaogARtBgBlF2tiIm7IZMlHATsF8 SNFyRcMOdW0BcpB8MX4dPgGJBXTyoUgwopMY973syLQtWg8Aq9HxJqvuVRKnaz5I CQJzejFsOBQ/05/ELd4akvyDbHNmIliT8Z5XzWjwMFTHMWGB7mWjmE8fx/xP+txm qB5535JvfjOklIp+I/s577pujRfM8RR04m6ydfhZRulxL6AFdwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEg1QyRMtM8DwxvFvnCMpwTaPhozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvNmQ0NWIzYjctMjNhMC0z YzU1LWE2NzYtNGIyNmJkYTkzOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANK0bgD BABK0bwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAb4WJsnu2qPFS76zzgDJUmP3bnfT0nSlhv5M5ArRuk8j+ +RmbSJiIHbU1rQdkBw1csMrZRkE9TKdcKNcedQ7UPH4tIct/0LDCXyC3B+rTg0sz i7WZgOQcM07/8iQaFhrmFwY+Ydb249rhOyihdQp/+2e4uMo6WMs6jQmLeT+XPynt /O4alL6o8P7bK7RmqmDMcfWKmhl8mB5LitWpZ9EmddjucrMKK5sO4SAPUWtVaWVV P96d5mN9uLtqxb5J4tqu5Gnsypfmhte3WYBj9kaEP7F8Ur0brgOQ3ffWUtf6VCZY U43ArPu4pDCu4Srkl008hV/F9BDSTOicuPB3A9XwGQ== -----END CERTIFICATE-----Generated at Wed May 13 07:59:14 2026 by rpki-client