$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/a96f1064-db6c-3081-9dc3-235361d256cf.roa File: a96f1064-db6c-3081-9dc3-235361d256cf.roa (raw, json) Hash identifier: 8CbmtgRAgFvvtahz4KCq1zA2mGLJ3VaqC5TwPTWaizI= Subject key identifier: A2:BB:20:8F:C9:E6:7C:F5:7D:35:E9:E1:EA:A1:F7:23:69:13:70:18 Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584F46A7DADC407F000FDCDCA4C0 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/a96f1064-db6c-3081-9dc3-235361d256cf.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 19528 IP address blocks: 74.209.184.0/22 maxlen: 24 74.209.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:da:dc:40:7f:00:0f:dc:dc:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=0f85fb48-c47e-42a2-a227-222b332c2e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:83:30:37:00:c3:87:5b:b5:f8:6d:1d:00: ac:a7:9e:2e:de:a0:49:83:ac:47:8f:ee:7a:eb:3b: fc:e6:90:1f:19:4e:66:1f:4f:21:db:ba:63:22:47: 5f:83:e8:90:04:a4:d7:38:2e:25:8e:4c:a9:aa:ed: 0a:ee:9a:57:41:52:1c:0e:eb:35:97:1d:5e:e1:c8: c1:08:cd:92:9f:f6:ad:f0:8d:ee:21:de:15:1b:f9: 2d:f3:91:b6:cd:e1:61:f9:c9:d8:bd:a4:91:24:d8: d7:3e:48:90:11:02:df:42:a1:7f:b9:32:f4:bf:35: f6:6f:71:64:1d:4e:97:86:22:4b:a7:2f:8f:43:80: 7a:f2:e6:b9:f2:da:49:b4:1b:38:20:58:b2:53:0f: ac:ce:94:8c:04:5d:1d:b6:b8:d7:b0:f1:22:83:41: 9e:3d:e7:2d:09:42:13:af:c5:fb:cf:93:e8:32:fd: ff:3d:3e:34:5d:68:d0:9e:22:1d:bf:49:6a:d1:da: 07:60:20:dc:36:f8:9f:fa:fc:fa:45:13:f5:ab:82: 50:ab:9a:fc:fd:c8:33:88:46:c5:42:8e:1d:66:1f: 5c:52:ce:82:cd:63:66:8e:00:88:9f:df:0c:00:59: 5d:19:8c:58:8c:bd:40:34:1f:10:7c:9f:d1:1d:cb: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:20:8F:C9:E6:7C:F5:7D:35:E9:E1:EA:A1:F7:23:69:13:70:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/a96f1064-db6c-3081-9dc3-235361d256cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1d:23:e2:55:10:ac:d4:bb:17:34:8e:7d:cc:58:29:50:28: 23:c6:5d:29:ea:86:fd:72:94:96:ec:18:5e:9c:87:4d:4c:0c: 01:1f:d6:4f:c6:36:ea:72:f8:e6:51:aa:e3:2e:e3:81:47:de: 34:6d:71:86:e1:6b:38:04:40:07:87:e5:4d:2e:6a:8d:28:35: 99:fc:1b:a7:31:64:28:68:ce:53:1d:9a:53:08:cf:d8:85:54: 83:3c:58:74:2d:73:d8:b0:88:25:c8:49:28:db:38:45:e6:1b: a9:be:91:94:58:54:50:c5:3a:af:97:93:6b:02:08:1f:3f:29: d8:ec:e1:5a:7a:11:44:30:27:42:4e:31:38:48:83:be:a6:74: 6c:de:aa:ba:59:64:f1:cd:42:3b:d5:48:15:f2:ac:fe:10:f0: 7b:26:39:4e:b6:af:43:82:05:8d:cf:a9:df:90:2c:b9:dc:4c: 66:bc:d4:a1:3d:b1:7f:67:dd:b4:3c:42:74:cf:78:61:39:23: 88:19:4d:26:7d:aa:f5:49:33:a0:b0:ec:37:b2:ec:2f:77:11: 49:21:2f:3b:82:8e:68:1c:07:41:e3:2a:80:48:b7:ed:6c:ad: 33:b4:c2:cd:d8:c1:fb:6d:77:98:71:89:66:d3:a6:93:29:97: 15:c7:7f:32 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Gp9rcQH8AD9zcpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MGY4NWZiNDgtYzQ3ZS00MmEyLWEyMjctMjIyYjMzMmMyZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqDMDcAw4dbtfhtHQCsp54u3qBJg6xHj+56 6zv85pAfGU5mH08h27pjIkdfg+iQBKTXOC4ljkypqu0K7ppXQVIcDus1lx1e4cjB CM2Sn/at8I3uId4VG/kt85G2zeFh+cnYvaSRJNjXPkiQEQLfQqF/uTL0vzX2b3Fk HU6XhiJLpy+PQ4B68ua58tpJtBs4IFiyUw+szpSMBF0dtrjXsPEig0GePectCUIT r8X7z5PoMv3/PT40XWjQniIdv0lq0doHYCDcNvif+vz6RRP1q4JQq5r8/cgziEbF Qo4dZh9cUs6CzWNmjgCIn98MAFldGYxYjL1ANB8QfJ/RHcs1NwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKK7II/J5nz1fTXp4eqh9yNpE3AYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvYTk2ZjEwNjQtZGI2Yy0z MDgxLTlkYzMtMjM1MzYxZDI1NmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANK0bgD BABK0bwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGx0j4lUQrNS7FzSOfcxYKVAoI8ZdKeqG/XKUluwYXpyH TUwMAR/WT8Y26nL45lGq4y7jgUfeNG1xhuFrOARAB4flTS5qjSg1mfwbpzFkKGjO Ux2aUwjP2IVUgzxYdC1z2LCIJchJKNs4ReYbqb6RlFhUUMU6r5eTawIIHz8p2Ozh WnoRRDAnQk4xOEiDvqZ0bN6qullk8c1CO9VIFfKs/hDweyY5TravQ4IFjc+p35As udxMZrzUoT2xf2fdtDxCdM94YTkjiBlNJn2q9UkzoLDsN7LsL3cRSSEvO4KOaBwH QeMqgEi37WytM7TCzdjB+213mHGJZtOmkymXFcd/Mg== -----END CERTIFICATE-----Generated at Fri Sep 25 03:46:29 2026 by rpki-client