$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa File: 43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa (raw, json) Hash identifier: q3k93OElYrnB5Aq5UedTh9rBR+yt0qxTnv5aXPjUVjk= Subject key identifier: 28:08:BE:37:CD:7A:F9:A1:C3:7D:76:FB:33:B0:4A:80:BC:1D:C1:19 Certificate issuer: /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015 Certificate serial: 010D0C9F4328584ED9C7479C6CB07068C7FF9E00 Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 14618 IP address blocks: 74.123.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:47:9c:6c:b0:70:68:c7:ff:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=1f54004e-181c-4cd0-9278-e5e2ef4ed507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:ec:a6:b1:12:53:a5:9d:a0:6f:db:91:0a: 6a:a8:80:d6:ef:1a:18:a8:28:96:04:ee:af:bd:2f: 3b:0d:7e:30:44:64:e9:23:8e:9a:8f:c1:13:75:53: 18:ad:f2:74:44:c1:92:31:ac:3b:a5:3a:d1:12:bd: dc:11:5d:c9:e8:f9:f3:fe:c3:7b:fa:b6:3a:87:ef: 28:52:58:4f:cd:25:de:81:86:93:87:e7:40:df:9a: e2:10:0b:4f:c7:f3:16:61:d8:e1:ed:15:39:e3:60: 4c:69:aa:71:68:ec:e1:4f:eb:73:7c:70:bf:44:0e: 92:df:6a:c1:4b:b5:da:9f:12:62:a4:81:0b:f3:ae: 23:7e:83:17:9d:0a:5b:00:9a:72:7c:e2:68:54:dd: 5e:61:e3:8c:4d:d4:91:5f:ce:95:74:6b:26:69:30: 91:fe:9a:fe:31:f6:76:ee:b0:07:7a:46:aa:8e:5f: d8:c9:bf:9a:7e:97:d4:b3:9e:53:7c:0b:1b:b0:89: f2:47:fe:3f:b6:bf:0e:ea:00:e5:76:60:74:a8:a9: d5:7f:f8:08:49:c4:6f:0f:a4:d8:d7:11:fb:79:f7: 27:c4:d3:30:3b:56:54:27:b4:6b:ed:9f:f5:14:8f: e3:27:b3:b0:b6:bc:b2:d5:ee:c7:46:f2:89:1c:06: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:BE:37:CD:7A:F9:A1:C3:7D:76:FB:33:B0:4A:80:BC:1D:C1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl X509v3 Authority Key Identifier: keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer sbgp-ipAddrBlock: critical IPv4: 74.123.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:77:8e:c6:e8:f1:cf:96:20:cd:f6:b3:a5:11:2b:df:5c:48: 66:d9:a6:78:b3:0f:7e:8c:80:a3:84:01:ba:b3:5c:0c:e2:84: 11:b0:cb:f9:db:fe:e3:5e:8c:77:2f:19:7a:a5:a2:91:e5:95: 0c:c3:67:78:de:65:29:08:50:98:b7:ea:99:14:5f:61:37:36: c1:69:b6:c4:d0:21:fe:e1:83:56:63:e9:a9:fd:84:c5:1c:91: 53:08:d9:d9:76:61:10:6a:0a:60:cb:f9:ea:e4:de:9d:c4:10: 9c:88:5b:29:50:a4:e5:49:f0:ad:4b:38:f3:a1:dc:0c:0a:63: 2a:e7:79:8d:ae:5c:31:7a:b0:a0:89:dd:f4:f8:13:f7:cb:36: 07:6c:49:a8:48:0e:78:43:b0:09:b1:0e:d4:42:63:ae:46:e4: 5b:b8:f2:95:07:69:72:1f:12:3d:e2:80:d7:5c:0d:a9:f7:bc: 71:cd:21:b9:2b:35:c0:92:40:15:9e:a1:5c:70:d2:67:89:81: 78:8a:68:a5:f9:2d:6e:db:ec:3c:37:86:dc:ed:02:cf:a6:49: c3:45:55:08:ed:d1:62:0f:7a:60:d3:92:12:13:ee:64:b8:23: 91:fa:04:8a:a4:ad:1f:02:4c:d2:b2:9d:4e:b1:be:10:7b:75: 90:5e:48:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx0ecbLBwaMf/ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRkZmIyYzItNmIwZS00ZjJjLTk1NmQtNDk3ZGYwODgx MDE1MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MWY1NDAwNGUtMTgxYy00Y2QwLTkyNzgtZTVlMmVmNGVkNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2LsprESU6WdoG/bkQpqqIDW7xoYqCiWBO6v vS87DX4wRGTpI46aj8ETdVMYrfJ0RMGSMaw7pTrREr3cEV3J6Pnz/sN7+rY6h+8o UlhPzSXegYaTh+dA35riEAtPx/MWYdjh7RU542BMaapxaOzhT+tzfHC/RA6S32rB S7XanxJipIEL864jfoMXnQpbAJpyfOJoVN1eYeOMTdSRX86VdGsmaTCR/pr+MfZ2 7rAHekaqjl/Yyb+afpfUs55TfAsbsInyR/4/tr8O6gDldmB0qKnVf/gIScRvD6TY 1xH7efcnxNMwO1ZUJ7Rr7Z/1FI/jJ7Owtryy1e7HRvKJHAaE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgIvjfNevmhw312+zOwSoC8HcEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NGRm YjJjMi02YjBlLTRmMmMtOTU2ZC00OTdkZjA4ODEwMTUvNDNlN2I1M2YtZDVhOS0z ZDI5LWFiNzMtYWQwZDZhMzc3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDRkZmIyYzItNmIwZS00ZjJjLTk1 NmQtNDk3ZGYwODgxMDE1LzQ0ZGZiMmMyLTZiMGUtNGYyYy05NTZkLTQ5N2RmMDg4 MTAxNS5jcmwwHwYDVR0jBBgwFoAUrKjCp3aNxrzYtX8M8Pq6iUOo2DUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NGRmYjJjMi02YjBlLTRmMmMtOTU2ZC00OTdk ZjA4ODEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnuRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF3jsbo8c+WIM32s6URK99cSGbZpnizD36MgKOEAbqzXAzihBGwy/nb /uNejHcvGXqlopHllQzDZ3jeZSkIUJi36pkUX2E3NsFptsTQIf7hg1Zj6an9hMUc kVMI2dl2YRBqCmDL+erk3p3EEJyIWylQpOVJ8K1LOPOh3AwKYyrneY2uXDF6sKCJ 3fT4E/fLNgdsSahIDnhDsAmxDtRCY65G5Fu48pUHaXIfEj3igNdcDan3vHHNIbkr NcCSQBWeoVxw0meJgXiKaKX5LW7b7Dw3htztAs+mScNFVQjt0WIPemDTkhIT7mS4 I5H6BIqkrR8CTNKynU6xvhB7dZBeSEc= -----END CERTIFICATE-----Generated at Sun Sep 27 11:31:02 2026 by rpki-client