$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa File: a07f8277-ce17-34be-955c-7cc356301d2e.roa (raw, json) Hash identifier: O9iEVwqpothkJF79V/Z6O61PYWYTuxdcl54cxmm2dKg= Subject key identifier: 27:3E:FF:C5:1F:25:51:24:8C:97:04:A1:E4:52:52:81:D1:8B:BF:1F Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584F4974EED4AFBAF915E6691300 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 74.123.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ee:d4:af:ba:f9:15:e6:69:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d28ba46-9129-49bc-9776-f675c587c601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:8e:d7:10:92:2d:79:18:48:69:00:22:29: 89:71:0d:bb:b7:47:5d:02:8e:4d:6e:8a:3d:5d:d3: f8:5e:e8:93:1b:61:f2:57:31:d6:f0:0e:9b:d0:f2: c5:e2:71:d1:13:fa:83:1c:d8:88:3f:2b:66:bf:d0: 7c:45:dd:f8:a8:4b:9e:3e:f1:d1:46:05:71:e8:a7: ac:ac:bb:69:ec:27:a6:2a:bd:c5:b8:dd:9c:60:ac: a1:ee:59:6a:5e:b4:39:48:c8:24:45:cb:41:6d:7f: 20:cd:f8:a1:20:91:4f:97:5c:a4:74:02:32:d4:09: ca:c3:21:19:ca:4b:ba:0e:58:b5:18:d1:09:ea:af: 25:2d:28:66:de:c9:9f:0d:e3:89:12:fd:c6:3a:75: 2c:c1:1a:dc:99:65:c9:c8:43:2f:7e:69:7d:fb:42: fd:6c:1d:68:58:0f:b7:65:90:72:af:5a:6c:58:6b: 91:0c:24:da:09:cf:b9:a9:29:d1:e7:2f:08:f7:c1: 14:1d:9f:42:9b:19:d3:d9:c5:9a:46:53:9f:69:ef: 58:73:ca:b1:05:9d:68:43:b9:0c:be:59:fe:06:20: a3:2b:ce:9a:f9:21:4d:6b:38:76:35:ef:35:6b:13: d8:3c:0f:0c:07:4a:28:e9:dc:e4:08:1a:e4:dc:8d: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3E:FF:C5:1F:25:51:24:8C:97:04:A1:E4:52:52:81:D1:8B:BF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv4: 74.123.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:cf:ad:cf:17:e9:27:ed:57:94:7a:78:9c:e5:cc:fb:fa:d5: 3f:6a:48:33:32:0d:34:65:2f:02:a6:4b:d1:89:0a:7f:69:28: 95:75:94:3c:1e:8f:bd:8f:73:d4:3a:af:7a:0d:97:da:41:b0: ba:08:de:85:1e:ab:90:3d:e8:af:e2:c5:5a:c1:1b:f0:d8:0c: 29:4e:a5:18:0f:1d:4b:be:ea:5b:39:b8:54:86:fa:64:87:56: 47:58:44:ee:21:76:f9:fd:d9:9b:9e:b9:b9:a5:eb:04:a2:ba: 14:f2:06:41:b8:50:a5:43:fc:3e:91:75:9f:33:5d:97:75:27: 6c:ff:23:b1:19:78:f1:ea:ba:74:5a:93:7b:b6:b6:b4:16:50: 2a:f9:38:17:e5:1f:bc:a6:bb:7f:e9:31:c8:0b:89:cf:0e:fb: 82:93:6e:bc:49:dd:13:1a:96:31:69:6b:6a:3e:a5:06:14:89: 13:68:4a:6c:c8:5c:bb:f7:f1:7e:d0:aa:d8:de:07:41:58:1b: 44:84:1e:80:56:dd:4c:eb:58:3e:16:02:bf:a0:61:95:ed:b7: 2e:3d:16:a1:d6:ca:a6:1a:83:c0:c7:fa:ce:2d:3b:97:c7:9b: 25:0b:5f:b1:0c:66:50:19:70:48:d6:07:df:07:85:37:79:5b: 6c:c2:f7:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdO7Ur7r5FeZpEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQyOGJhNDYtOTEyOS00OWJjLTk3NzYtZjY3NWM1ODdjNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3OO1xCSLXkYSGkAIimJcQ27t0ddAo5Nboo9 XdP4XuiTG2HyVzHW8A6b0PLF4nHRE/qDHNiIPytmv9B8Rd34qEuePvHRRgVx6Kes rLtp7CemKr3FuN2cYKyh7llqXrQ5SMgkRctBbX8gzfihIJFPl1ykdAIy1AnKwyEZ yku6Dli1GNEJ6q8lLShm3smfDeOJEv3GOnUswRrcmWXJyEMvfml9+0L9bB1oWA+3 ZZByr1psWGuRDCTaCc+5qSnR5y8I98EUHZ9CmxnT2cWaRlOfae9Yc8qxBZ1oQ7kM vln+BiCjK86a+SFNazh2Ne81axPYPA8MB0oo6dzkCBrk3I3kFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc+/8UfJVEkjJcEoeRSUoHRi78fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvYTA3ZjgyNzctY2UxNy0z NGJlLTk1NWMtN2NjMzU2MzAxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPPrc8X6SftV5R6eJzlzPv61T9qSDMyDTRlLwKmS9GJCn9pKJV1lDwe j72Pc9Q6r3oNl9pBsLoI3oUeq5A96K/ixVrBG/DYDClOpRgPHUu+6ls5uFSG+mSH VkdYRO4hdvn92Zueubml6wSiuhTyBkG4UKVD/D6RdZ8zXZd1J2z/I7EZePHqunRa k3u2trQWUCr5OBflH7ymu3/pMcgLic8O+4KTbrxJ3RMaljFpa2o+pQYUiRNoSmzI XLv38X7QqtjeB0FYG0SEHoBW3UzrWD4WAr+gYZXtty49FqHWyqYag8DH+s4tO5fH myULX7EMZlAZcEjWB98HhTd5W2zC93A= -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:03 2026 by rpki-client