$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa File: d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa (raw, json) Hash identifier: 3MAp9bdNKF7uPBqNNh8CkZfoDdjdITgVLd1IXekbYhY= Subject key identifier: 55:42:A1:81:AA:ED:84:85:B7:4A:28:4F:56:71:D6:C7:94:36:15:72 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F49773FAF0FBAF12A8BA39F40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 74.49.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:3f:af:0f:ba:f1:2a:8b:a3:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=abb10d39-2cdd-43a2-8449-a397315348c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:5f:d3:f6:a0:61:ae:64:56:8c:bf:dc:f2: c5:79:25:18:c7:89:fd:ad:18:65:72:ac:7c:5a:de: 8b:85:22:1e:47:cf:e6:26:35:4b:5a:ed:fd:40:8d: 8a:9c:0c:de:68:51:fe:be:c0:94:aa:db:50:6b:74: 5e:e4:a4:31:ff:13:41:78:5f:8b:49:5d:a8:34:5d: a3:25:5e:c3:4b:58:d1:22:7a:b4:10:94:a5:4b:e1: 37:c6:c4:5c:08:2e:96:23:89:e4:29:88:2c:54:36: c2:9b:b4:a9:9c:5b:a4:50:e9:26:4f:4b:82:55:27: 35:af:f3:87:9e:42:cf:aa:89:b7:dd:e3:c1:67:e4: ce:69:35:a2:bc:ca:41:3b:9f:7e:36:34:18:1c:28: a4:e3:33:1c:d8:a3:6f:bc:d9:48:9d:e2:2e:4b:52: 3f:13:7d:3b:e8:47:3c:03:37:74:60:de:20:b0:f4: b6:ca:a9:87:bf:57:50:ab:6f:2c:d5:18:55:1e:9b: 57:d8:da:61:8c:1e:04:00:46:e6:7f:2b:70:dd:3b: db:8c:de:a9:43:67:9d:ef:f1:67:9d:e1:81:9d:ab: e4:7e:14:23:bf:97:7d:58:5d:d4:c1:a8:da:d6:a4: 16:fb:1f:04:d9:cf:00:ef:38:fb:d0:50:79:47:18: 0c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:42:A1:81:AA:ED:84:85:B7:4A:28:4F:56:71:D6:C7:94:36:15:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:df:7e:7b:c7:fe:0c:75:33:39:ee:16:94:f3:08:50:8c:ac: 8b:fd:54:35:36:47:4f:8b:97:3b:23:35:25:81:c1:c3:b4:ab: 54:3e:75:dc:0e:32:5a:0b:f9:d1:f8:6a:ff:da:04:da:70:46: c2:70:46:a2:2d:a1:bb:a8:a6:89:9f:e6:a8:73:ef:b7:d9:b8: 79:0a:67:a8:77:bd:37:bc:a9:b8:af:cd:4b:3b:02:84:7b:02: 28:eb:9b:b5:66:45:5a:2b:22:11:ad:c6:f2:5c:b8:a2:84:34: c0:96:94:70:3a:ae:c8:a6:e1:ea:84:85:27:6a:d7:e2:22:21: 6f:62:c4:76:72:00:ec:f1:88:54:3a:b7:78:73:af:4e:f4:bd: 94:19:29:2f:51:b5:b3:33:7b:72:94:1f:33:45:0b:2e:bd:ab: 9f:f4:4a:90:09:fe:62:43:26:2a:49:66:a1:cc:38:0a:cf:95: 9b:25:7a:a0:0f:68:32:ff:8a:f1:21:e6:e5:f1:c5:fc:a0:a6: 2b:44:ec:a9:1b:42:de:8c:cb:9f:8a:93:fc:d2:a4:23:f8:de: 35:9d:c5:99:d6:27:af:7b:99:48:1a:a6:65:fa:3b:69:14:98: 4c:09:6c:4b:6e:d1:a3:21:dc:1b:6a:7b:7c:7a:f1:81:3f:99: 17:4c:13:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdz+vD7rxKoujn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWJiMTBkMzktMmNkZC00M2EyLTg0NDktYTM5NzMxNTM0OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovJf0/agYa5kVoy/3PLFeSUYx4n9rRhlcqx8 Wt6LhSIeR8/mJjVLWu39QI2KnAzeaFH+vsCUqttQa3Re5KQx/xNBeF+LSV2oNF2j JV7DS1jRInq0EJSlS+E3xsRcCC6WI4nkKYgsVDbCm7SpnFukUOkmT0uCVSc1r/OH nkLPqom33ePBZ+TOaTWivMpBO59+NjQYHCik4zMc2KNvvNlIneIuS1I/E3076Ec8 Azd0YN4gsPS2yqmHv1dQq28s1RhVHptX2NphjB4EAEbmfytw3TvbjN6pQ2ed7/Fn neGBnavkfhQjv5d9WF3Uwaja1qQW+x8E2c8A7zj70FB5RxgMowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVCoYGq7YSFt0ooT1Zx1seUNhVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDI1NWE2OTAtZjFkYS0z YjVjLTlhNzgtNmUxZTViYzBiMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOHffnvH/gx1MznuFpTzCFCMrIv9VDU2R0+LlzsjNSWBwcO0q1Q+ddwO MloL+dH4av/aBNpwRsJwRqItobuopomf5qhz77fZuHkKZ6h3vTe8qbivzUs7AoR7 Aijrm7VmRVorIhGtxvJcuKKENMCWlHA6rsim4eqEhSdq1+IiIW9ixHZyAOzxiFQ6 t3hzr070vZQZKS9RtbMze3KUHzNFCy69q5/0SpAJ/mJDJipJZqHMOArPlZsleqAP aDL/ivEh5uXxxfygpitE7KkbQt6My5+Kk/zSpCP43jWdxZnWJ697mUgapmX6O2kU mEwJbEtu0aMh3Btqe3x68YE/mRdME+o= -----END CERTIFICATE-----Generated at Sun Oct 4 08:28:51 2026 by rpki-client