$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa File: d489c930-352c-3f17-a5d2-b2cc806aff09.roa (raw, json) Hash identifier: u5YTlPmc3VO6TsXk9FLfjsy01YSBaCRetCjGzmKgwO4= Subject key identifier: C4:2B:75:D1:85:D2:BF:BC:A5:C6:FF:32:25:12:38:82:03:84:88:8A Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584F4976FE5C55ED5F286A871F80 Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11739 IP address blocks: 74.209.162.0/24 maxlen: 24 209.20.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:fe:5c:55:ed:5f:28:6a:87:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f3ecde1-1106-433f-90f3-52aa3740ca05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:35:c7:a4:cb:95:03:02:07:7a:f2:e3:2f: bd:91:ec:82:2a:18:7b:d1:47:34:7d:a8:65:70:9b: 9d:9b:6e:6e:14:9d:4a:58:74:f0:f8:d1:bd:67:c7: fe:9d:3d:6e:08:37:5e:02:18:f9:d3:ac:ed:28:1c: e3:e5:18:7c:25:ae:ba:4c:93:d1:87:1e:bb:bf:39: 7c:90:b1:c7:a4:ae:8a:6f:66:80:aa:81:60:5f:58: 5d:3b:09:e6:9b:62:7f:f8:3d:5c:86:09:b0:f9:57: 94:08:3f:69:d4:03:53:2e:9c:2d:5f:5b:42:fb:18: 03:18:c3:a1:97:58:5c:84:2c:90:86:aa:b6:a8:f9: 2e:65:9a:94:4f:97:ca:2a:b9:9e:87:20:85:7a:50: 8a:76:31:d2:01:9e:89:4e:12:21:ca:77:4f:e1:34: 3a:fa:63:68:54:8a:74:57:03:8e:4e:5e:93:f4:b8: 61:a3:49:b2:de:fc:42:44:42:af:ec:ca:46:1b:02: b2:a4:59:7e:e4:10:c7:82:0c:1f:4b:b2:61:c1:b6: ab:12:af:e0:90:4a:f3:e5:81:dd:23:8f:50:f1:7d: 9a:6d:ac:2c:02:eb:ea:8f:c1:e5:f5:fe:e9:c4:e5: 14:a9:46:cf:93:f3:21:c6:d4:7c:d8:1d:40:4e:ed: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:75:D1:85:D2:BF:BC:A5:C6:FF:32:25:12:38:82:03:84:88:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/d489c930-352c-3f17-a5d2-b2cc806aff09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: 74.209.162.0/24 209.20.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:33:ce:93:67:1d:0c:50:80:bd:9f:db:99:04:17:10:dd:27: c1:95:09:32:8b:0a:71:f6:e8:63:53:72:29:40:1d:01:74:d9: 7c:ed:ae:44:48:db:9f:5a:f5:1a:c0:f6:fd:2d:f1:0a:45:e5: df:c0:9d:f1:ee:3d:c6:46:30:93:5d:6f:7b:a3:ec:2d:30:a4: a7:46:3b:a7:49:b7:b1:6b:ff:3a:8d:86:61:50:d2:38:76:f9: 50:a7:b7:90:e2:0c:89:4b:57:fd:83:62:17:08:45:5e:c5:ed: d6:ee:c1:b9:4b:1e:0f:c3:f0:ec:31:d7:ea:a2:fa:17:d6:9a: 5b:c3:85:2e:18:2e:47:f9:ce:30:42:51:27:3a:d8:c2:0d:58: ea:48:c5:93:d7:04:e1:c7:e8:df:96:18:2f:a3:a1:92:2a:23: 95:7a:c9:6d:80:a4:9f:f3:05:28:bd:e3:29:cb:a4:63:68:16: 0f:8b:e9:86:05:b7:df:12:f7:b3:20:e1:a0:74:5a:21:71:fa: 4c:22:97:71:a6:ef:f4:be:4f:80:d0:98:cf:6b:66:e4:02:55: 37:16:5b:67:96:0e:08:36:d9:8d:61:83:45:a8:c3:75:75:6b: f8:62:56:71:3c:c0:6f:84:d4:cb:66:8d:fb:23:08:fc:0c:3f: 26:a8:61:be -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jdv5cVe1fKGqHH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGYzZWNkZTEtMTEwNi00MzNmLTkwZjMtNTJhYTM3NDBjYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp601x6TLlQMCB3ry4y+9keyCKhh70Uc0fahl cJudm25uFJ1KWHTw+NG9Z8f+nT1uCDdeAhj506ztKBzj5Rh8Ja66TJPRhx67vzl8 kLHHpK6Kb2aAqoFgX1hdOwnmm2J/+D1chgmw+VeUCD9p1ANTLpwtX1tC+xgDGMOh l1hchCyQhqq2qPkuZZqUT5fKKrmehyCFelCKdjHSAZ6JThIhyndP4TQ6+mNoVIp0 VwOOTl6T9Lhho0my3vxCREKv7MpGGwKypFl+5BDHggwfS7JhwbarEq/gkErz5YHd I49Q8X2abawsAuvqj8Hl9f7pxOUUqUbPk/MhxtR82B1ATu2hrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMQrddGF0r+8pcb/MiUSOIIDhIiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvZDQ4OWM5MzAtMzUyYy0z ZjE3LWE1ZDItYjJjYzgwNmFmZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAStGiAwQB 0RSYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADozzpNnHQxQgL2f25kEFxDdJ8GVCTKLCnH26GNTcilAHQF0 2XztrkRI259a9RrA9v0t8QpF5d/AnfHuPcZGMJNdb3uj7C0wpKdGO6dJt7Fr/zqN hmFQ0jh2+VCnt5DiDIlLV/2DYhcIRV7F7dbuwblLHg/D8Owx1+qi+hfWmlvDhS4Y Lkf5zjBCUSc62MINWOpIxZPXBOHH6N+WGC+joZIqI5V6yW2ApJ/zBSi94ynLpGNo Fg+L6YYFt98S97Mg4aB0WiFx+kwil3Gm7/S+T4DQmM9rZuQCVTcWW2eWDgg22Y1h g0Wow3V1a/hiVnE8wG+E1MtmjfsjCPwMPyaoYb4= -----END CERTIFICATE-----Generated at Fri Oct 2 14:16:34 2026 by rpki-client