$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/1f03c68a-9b44-3f14-a82d-a8de26a9a4eb.roa File: 1f03c68a-9b44-3f14-a82d-a8de26a9a4eb.roa (raw, json) Hash identifier: WS8S1Y5zgqhOkKkWhh5cj0Kmp9gzZbpmyE3tNQxJuDk= Subject key identifier: 7E:44:2C:E9:9D:11:F4:B5:2B:30:EA:D8:BC:94:9A:82:A9:DD:AD:DA Certificate issuer: /CN=371ab6b7-8872-4856-a33d-61dbefb13d34 Certificate serial: 010D0C9F4328584F3B7D25720EC9A44C781B3C00 Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/1f03c68a-9b44-3f14-a82d-a8de26a9a4eb.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 11064 IP address blocks: 74.214.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:25:72:0e:c9:a4:4c:78:1b:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=4b443c43-e195-460a-8a5b-802703fe2587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:c3:2b:f7:ef:aa:28:05:20:a0:f0:ba:03: a1:8e:84:85:c3:ae:37:19:d8:66:ad:22:98:02:6f: c9:2f:c3:d5:94:06:72:09:98:68:d4:be:d9:3d:9f: c7:87:4d:e2:ef:5b:e0:f2:d1:fa:b0:f9:98:63:d2: 61:52:32:49:00:5a:de:50:0c:1c:80:b6:d4:6e:d0: b4:4a:7f:69:dc:83:ac:60:31:54:0a:ef:50:f4:b7: 1b:fb:53:5e:f1:53:1e:8f:0c:23:93:d2:49:0a:e5: 1a:0f:4a:24:8e:db:7e:d1:4d:c9:ae:f0:42:6d:f7: ad:9a:f5:98:4c:a5:14:2d:b5:5f:b4:df:bf:41:5b: e1:cd:bd:cf:e6:ed:98:f5:26:75:b9:d9:cd:e0:0f: 7d:00:65:70:c0:a3:17:60:75:7e:75:7d:20:bc:c3: 56:10:21:1c:5f:85:9a:67:5c:a2:28:3a:ed:1b:39: 02:f3:39:ba:18:15:74:d4:20:f7:15:a3:36:ce:86: cc:7a:5a:c6:64:36:78:c4:6a:8d:cd:25:f5:07:1d: a8:59:8a:b9:71:1a:4a:e1:f5:ad:a5:e3:3b:a4:fc: c9:ee:00:92:9c:b8:0b:af:79:21:c8:a3:f5:bd:01: 99:80:96:fe:b5:6f:72:29:be:4e:30:d2:a0:f1:e2: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:44:2C:E9:9D:11:F4:B5:2B:30:EA:D8:BC:94:9A:82:A9:DD:AD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/1f03c68a-9b44-3f14-a82d-a8de26a9a4eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl X509v3 Authority Key Identifier: keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer sbgp-ipAddrBlock: critical IPv4: 74.214.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:41:6f:93:14:b7:9a:7b:c3:13:bc:1f:c4:0b:cf:1a:71:b1: 99:c2:b3:df:2d:d9:b2:b7:ac:91:11:7f:66:1b:69:67:1c:d4: 76:93:dd:34:f7:c2:ef:bf:66:d4:bd:21:f7:b9:b4:1c:38:34: 55:92:3f:fd:ff:7c:f7:8b:87:48:f2:3a:3c:76:57:ea:c4:de: 4d:07:5c:a1:41:06:54:b5:db:d6:c9:ff:2b:e1:e3:5f:10:30: 62:6a:10:9c:ce:94:25:72:ba:5c:a9:56:67:73:8c:85:44:b1: ec:1a:2b:e8:38:a6:73:8e:fb:6d:a2:d0:67:01:ff:69:0a:30: 57:43:2d:be:e8:56:63:b5:51:04:73:86:43:3c:66:8e:a3:d5: 0d:dc:76:ec:5c:b4:fa:c8:86:2e:03:22:ed:c4:b1:0d:60:b9: 7f:6c:1a:9e:c5:04:58:b8:e8:92:77:1b:45:08:71:1f:2b:dc: 36:75:65:88:53:66:9a:71:d8:64:52:f5:e8:07:93:c3:b2:02: 5e:bd:e6:ed:7f:fe:70:08:43:d5:82:9d:07:d6:5b:c6:9c:47: 37:5e:14:2b:00:3d:d1:75:29:7a:c4:db:7b:14:5a:42:e7:17: 3d:4b:e1:be:12:61:d4:fd:8f:c3:9d:9e:3a:c9:dd:43:12:9d: 09:ba:eb:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSVyDsmkTHgbPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxYWI2YjctODg3Mi00ODU2LWEzM2QtNjFkYmVmYjEz ZDM0MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NGI0NDNjNDMtZTE5NS00NjBhLThhNWItODAyNzAzZmUyNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPvDK/fvqigFIKDwugOhjoSFw643GdhmrSKY Am/JL8PVlAZyCZho1L7ZPZ/Hh03i71vg8tH6sPmYY9JhUjJJAFreUAwcgLbUbtC0 Sn9p3IOsYDFUCu9Q9Lcb+1Ne8VMejwwjk9JJCuUaD0okjtt+0U3JrvBCbfetmvWY TKUULbVftN+/QVvhzb3P5u2Y9SZ1udnN4A99AGVwwKMXYHV+dX0gvMNWECEcX4Wa Z1yiKDrtGzkC8zm6GBV01CD3FaM2zobMelrGZDZ4xGqNzSX1Bx2oWYq5cRpK4fWt peM7pPzJ7gCSnLgLr3khyKP1vQGZgJb+tW9yKb5OMNKg8eJsdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5ELOmdEfS1KzDq2LyUmoKp3a3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNzFh YjZiNy04ODcyLTQ4NTYtYTMzZC02MWRiZWZiMTNkMzQvMWYwM2M2OGEtOWI0NC0z ZjE0LWE4MmQtYThkZTI2YTlhNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzcxYWI2YjctODg3Mi00ODU2LWEz M2QtNjFkYmVmYjEzZDM0LzM3MWFiNmI3LTg4NzItNDg1Ni1hMzNkLTYxZGJlZmIx M2QzNC5jcmwwHwYDVR0jBBgwFoAUeee7ly+qQBc/gnJlEMag4FmgjKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNzFhYjZiNy04ODcyLTQ4NTYtYTMzZC02MWRi ZWZiMTNkMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlBb5MUt5p7wxO8H8QLzxpxsZnCs98t2bK3rJERf2YbaWcc1HaT3TT3 wu+/ZtS9Ife5tBw4NFWSP/3/fPeLh0jyOjx2V+rE3k0HXKFBBlS129bJ/yvh418Q MGJqEJzOlCVyulypVmdzjIVEsewaK+g4pnOO+22i0GcB/2kKMFdDLb7oVmO1UQRz hkM8Zo6j1Q3cduxctPrIhi4DIu3EsQ1guX9sGp7FBFi46JJ3G0UIcR8r3DZ1ZYhT Zppx2GRS9egHk8OyAl695u1//nAIQ9WCnQfWW8acRzdeFCsAPdF1KXrE23sUWkLn Fz1L4b4SYdT9j8OdnjrJ3UMSnQm663A= -----END CERTIFICATE-----Generated at Wed Sep 30 05:42:20 2026 by rpki-client