$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa File: 4453567d-94a3-375d-9415-c8c1fdd02afd.roa (raw, json) Hash identifier: re5l/TDOOj6XCIsprPb67elnDQIINlF4ZLIokdYmDHQ= Subject key identifier: CB:27:40:F2:21:51:3E:61:EC:ED:58:49:FD:74:E9:46:1B:8E:76:CE Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584F49896E0484FFFCB048AFFBA0 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401416 IP address blocks: 74.123.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:6e:04:84:ff:fc:b0:48:af:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=280cf7c0-eb13-4ef1-853c-121b40d98d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:a0:91:65:0c:39:81:dd:b3:dc:6b:38:b9: 68:b4:5c:bb:7a:d3:aa:d4:e7:9f:c8:0c:55:f9:d2: db:bf:ed:5e:56:bc:67:3b:17:83:36:ab:46:4c:b1: 45:70:3c:82:61:fd:b3:4f:e7:6d:ee:81:48:b1:39: 90:30:0c:a7:8c:64:c6:b7:ca:45:d9:6a:82:bc:38: 29:ba:05:bb:35:a9:07:b7:52:31:12:e6:4b:7f:6e: 9e:96:6c:97:71:33:b3:dd:cc:d1:c6:49:16:a7:a1: fc:84:5a:22:fd:1f:97:e5:45:fc:5b:e2:c5:e4:07: d6:cd:68:b0:de:85:93:ed:47:0f:68:ea:27:4c:16: d2:17:48:53:29:e8:7c:89:5b:49:75:7c:b8:68:fc: 05:59:4e:70:0a:3a:60:a2:c6:4c:7f:4a:1b:43:ff: 76:cd:b6:8b:32:dd:c9:d0:18:7a:d1:0e:8c:16:66: c8:18:76:ec:2c:24:d8:5c:03:4a:5b:84:f7:5c:a3: 0c:a0:32:86:29:50:c4:98:e9:3e:70:8a:85:33:08: ce:e9:c6:60:60:49:ce:28:e1:a0:0b:f0:cb:1f:65: bd:66:0f:ce:d5:93:29:27:c4:d5:8a:b8:7d:65:3f: ce:99:c8:92:6e:4e:c8:ed:48:4d:b8:4a:a3:13:d9: b1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:27:40:F2:21:51:3E:61:EC:ED:58:49:FD:74:E9:46:1B:8E:76:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/4453567d-94a3-375d-9415-c8c1fdd02afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 74.123.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0b:81:7c:d4:7c:2f:c9:83:77:60:20:87:2f:ec:f5:ac:a6: bd:47:ef:c2:1a:ca:bf:2d:0a:f7:ee:85:62:7a:cb:b0:7c:6a: 27:8f:35:26:52:5d:fe:fc:51:5d:88:a3:08:e7:d4:e2:47:94: 9a:6d:f9:c9:16:c1:af:11:ab:a4:5f:31:c9:76:1d:fb:52:0e: c2:da:2c:f1:d3:ea:11:1f:79:c6:61:42:af:5e:f9:d1:68:c8: 3d:c0:10:9a:0e:f9:51:e7:6e:d4:f4:ce:26:74:3a:68:9f:d6: 60:1f:a8:bc:ef:1a:5e:20:14:c3:c6:4b:34:1c:20:d0:13:a8: 06:50:07:17:58:30:8b:48:b9:48:6a:c3:03:05:8f:fc:ae:1d: 25:a5:5b:c1:d0:2c:d6:a4:55:f9:cc:25:be:7b:7b:30:18:d6: 37:19:e1:22:b6:be:c4:26:d4:fe:ff:a2:49:d3:9e:47:1e:91: 62:5f:3d:f5:c6:f3:b2:c1:f3:55:0a:27:f4:cf:20:cd:47:2b: d6:e6:36:4b:91:52:bb:75:17:64:8b:d3:e4:5b:b5:da:c0:47: 10:93:2c:dc:3b:27:3a:93:8d:cb:06:8a:b5:f1:d3:6a:0d:23: 1b:ae:3a:58:22:d2:b1:90:a7:12:48:9d:9a:d2:45:0d:76:63: cb:46:08:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiW4EhP/8sEiv+6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjgwY2Y3YzAtZWIxMy00ZWYxLTg1M2MtMTIxYjQwZDk4ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV2gkWUMOYHds9xrOLlotFy7etOq1OefyAxV +dLbv+1eVrxnOxeDNqtGTLFFcDyCYf2zT+dt7oFIsTmQMAynjGTGt8pF2WqCvDgp ugW7NakHt1IxEuZLf26elmyXcTOz3czRxkkWp6H8hFoi/R+X5UX8W+LF5AfWzWiw 3oWT7UcPaOonTBbSF0hTKeh8iVtJdXy4aPwFWU5wCjpgosZMf0obQ/92zbaLMt3J 0Bh60Q6MFmbIGHbsLCTYXANKW4T3XKMMoDKGKVDEmOk+cIqFMwjO6cZgYEnOKOGg C/DLH2W9Zg/O1ZMpJ8TVirh9ZT/OmciSbk7I7UhNuEqjE9mxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsnQPIhUT5h7O1YSf106UYbjnbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNDQ1MzU2N2QtOTRhMy0z NzVkLTk0MTUtYzhjMWZkZDAyYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQLgXzUfC/Jg3dgIIcv7PWspr1H78Iayr8tCvfuhWJ6y7B8aiePNSZS Xf78UV2Iowjn1OJHlJpt+ckWwa8Rq6RfMcl2HftSDsLaLPHT6hEfecZhQq9e+dFo yD3AEJoO+VHnbtT0ziZ0Omif1mAfqLzvGl4gFMPGSzQcINATqAZQBxdYMItIuUhq wwMFj/yuHSWlW8HQLNakVfnMJb57ezAY1jcZ4SK2vsQm1P7/oknTnkcekWJfPfXG 87LB81UKJ/TPIM1HK9bmNkuRUrt1F2SL0+RbtdrARxCTLNw7JzqTjcsGirXx02oN IxuuOlgi0rGQpxJInZrSRQ12Y8tGCJM= -----END CERTIFICATE-----Generated at Fri Sep 25 08:38:48 2026 by rpki-client