$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json) Hash identifier: m305x6KyrvglLLhby4d3Z8l4xUUmKgkxqCcnHZexl5A= Subject key identifier: DD:D0:9A:2A:93:F1:33:05:B2:3C:51:BD:4B:CE:E3:80:1B:3D:EB:F7 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F4328584EF87CBBDBB856CC110316AE00 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30500 IP address blocks: 74.123.68.0/22 maxlen: 24 198.134.28.0/22 maxlen: 24 208.77.196.0/22 maxlen: 24 208.123.208.0/24 maxlen: 24 208.123.210.0/23 maxlen: 24 208.123.212.0/22 maxlen: 24 208.123.216.0/22 maxlen: 24 2605:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bb:db:b8:56:cc:11:03:16:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=1203606b-abf0-4b32-ad0f-b5638a5eb2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:48:45:76:99:ae:b1:40:51:4c:6c:6c:99: cf:8a:86:36:8d:9e:17:16:b6:f2:7b:62:86:9e:fc: 0d:c8:98:d8:b7:a5:80:0a:b9:67:ff:04:6a:e9:00: 36:87:b4:88:f1:46:e6:d0:de:be:1c:3e:ec:26:eb: cf:b3:1b:3a:70:e7:ea:6a:e5:6e:45:6d:d6:0f:f3: a8:fe:6c:9d:0f:2a:6a:49:b7:fc:67:f0:99:ed:ab: 24:f9:0e:3e:d7:61:1e:d8:e5:82:0e:43:fa:7a:cd: c2:b9:ed:42:ab:3d:93:63:6d:08:2e:8e:da:52:50: d6:6b:9e:b2:46:19:c7:22:b7:aa:78:32:c0:fe:19: db:78:e1:f4:0f:ea:95:a1:76:5c:00:84:e6:7c:54: 22:c6:71:9c:87:e5:8b:05:6c:4f:76:72:4f:97:ff: 8b:04:36:01:35:94:bc:b9:43:5d:7f:ea:5d:db:02: 42:b0:5d:d9:3b:35:22:00:0e:4d:77:c4:d2:4a:7c: 8e:f6:d5:46:0b:9b:41:ed:ed:d5:da:82:64:d6:04: 53:33:54:f8:ff:df:33:64:03:bd:f6:50:fd:a9:a2: 0e:3d:9e:24:37:04:ee:e8:a1:ac:95:4a:86:69:a7: d6:7f:ea:e4:00:e6:d5:a8:db:63:a2:b2:e2:fa:3a: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:9A:2A:93:F1:33:05:B2:3C:51:BD:4B:CE:E3:80:1B:3D:EB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 74.123.68.0/22 198.134.28.0/22 208.77.196.0/22 208.123.208.0/24 208.123.210.0-208.123.219.255 IPv6: 2605:e680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:92:c2:b0:b8:0d:79:20:3b:f0:55:df:31:47:e5:68:a0:fd: 0e:1d:a5:ea:ea:90:8b:db:b6:59:ac:df:64:65:3b:c0:c4:da: 99:07:81:4a:99:9e:2a:08:1c:3e:72:85:d3:d3:f1:cb:c7:c6: b4:d1:fb:b0:07:25:4d:b1:ca:c1:21:99:8f:50:d8:44:30:ca: 5c:28:50:8c:8a:c4:87:38:cb:d3:22:d4:8a:1e:d9:be:a8:f1: d8:66:44:66:c9:db:de:bc:b4:54:4f:11:69:b6:c3:60:9a:c5: ae:08:7f:cc:9d:12:74:71:5d:ad:92:41:20:52:02:fc:6a:1c: 13:89:75:65:2e:c5:6e:0b:a4:c3:2c:92:2e:2e:a7:9d:bf:24: 31:03:76:72:58:cd:42:0b:e5:3a:e2:28:d8:12:54:f2:41:ac: e3:c9:d0:c4:c3:63:38:3e:fc:43:3a:a1:fb:b1:12:2f:34:9a: e6:5f:ee:0f:d7:2a:ed:dc:eb:71:5c:c3:05:32:50:7c:d1:75: 8b:70:e7:f8:c9:71:02:15:0d:c4:5a:10:8f:ec:11:ba:bf:c8: 66:9d:ea:ae:e2:24:69:c9:fd:87:fe:92:5b:da:a0:e5:72:71: d5:d1:e3:d4:ed:ed:35:1b:0d:2f:39:f0:8b:35:49:aa:16:84: 7e:a2:4f:e7 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWE74fLvbuFbMEQMWrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MTIwMzYwNmItYWJmMC00YjMyLWFkMGYtYjU2MzhhNWViMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorFIRXaZrrFAUUxsbJnPioY2jZ4XFrbye2KG nvwNyJjYt6WACrln/wRq6QA2h7SI8Ubm0N6+HD7sJuvPsxs6cOfqauVuRW3WD/Oo /mydDypqSbf8Z/CZ7ask+Q4+12Ee2OWCDkP6es3Cue1Cqz2TY20ILo7aUlDWa56y RhnHIreqeDLA/hnbeOH0D+qVoXZcAITmfFQixnGch+WLBWxPdnJPl/+LBDYBNZS8 uUNdf+pd2wJCsF3ZOzUiAA5Nd8TSSnyO9tVGC5tB7e3V2oJk1gRTM1T4/98zZAO9 9lD9qaIOPZ4kNwTu6KGslUqGaafWf+rkAObVqNtjorLi+jq59QIDAQABo4IDhDCC A4AwHQYDVR0OBBYEFN3QmiqT8TMFsjxRvUvO44AbPev3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvZDQ3NDg5NmItOGYxOS0z YjY0LWE3N2QtMTMxY2Y2NTI0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCSntEAwQC xoYcAwQC0E3EAwQA0HvQMAwDBAHQe9IDBALQe9gwDQQCAAIwBwMFACYF5oAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgJLCsLgNeSA78FXfMUflaKD9Dh2l6uqQi9u2WazfZGU7wMTamQeBSpme KggcPnKF09Pxy8fGtNH7sAclTbHKwSGZj1DYRDDKXChQjIrEhzjL0yLUih7Zvqjx 2GZEZsnb3ry0VE8RabbDYJrFrgh/zJ0SdHFdrZJBIFIC/GocE4l1ZS7FbgukwyyS Li6nnb8kMQN2cljNQgvlOuIo2BJU8kGs48nQxMNjOD78Qzqh+7ESLzSa5l/uD9cq 7dzrcVzDBTJQfNF1i3Dn+MlxAhUNxFoQj+wRur/IZp3qruIkacn9h/6SW9qg5XJx 1dHj1O3tNRsNLznwizVJqhaEfqJP5w== -----END CERTIFICATE-----Generated at Sun Oct 4 15:25:25 2026 by rpki-client