$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa File: 0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa (raw, json) Hash identifier: +Xtj/wohQj7uRO0dRmmeTR1k62lDgwYpGZJWTmJpKv8= Subject key identifier: DA:75:75:D2:0A:6B:82:D9:08:3F:2C:A5:6A:0A:88:A8:F1:29:33:20 Certificate issuer: /CN=77fda34c-14d4-40e5-b350-895a343d3b87 Certificate serial: 010D0C9F4328584E9A7FB3BD084577AD41AA0EE0 Authority key identifier: 61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 60707 IP address blocks: 74.122.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:b3:bd:08:45:77:ad:41:aa:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77fda34c-14d4-40e5-b350-895a343d3b87 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=8c153d5e-aafa-43f0-85f8-84455f011c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:0c:48:49:37:f9:fb:5f:63:b3:97:f2:9a: 14:e0:e4:e7:b1:07:fe:a8:bc:ab:f6:c5:c2:c8:e1: 0a:18:48:11:85:93:7f:92:94:58:a0:c4:5a:ed:b3: 3a:97:9a:aa:d7:4c:93:6d:e4:d7:53:f6:c8:d8:69: 18:71:d8:bd:03:0d:20:de:3e:a7:a5:a3:2f:aa:42: 0b:b8:0d:da:7a:bb:24:d4:63:96:3f:95:5e:65:95: ed:45:64:5f:6d:10:9f:91:e8:38:4d:b7:b6:35:5a: af:ba:de:b6:a5:4a:11:e7:ea:2c:03:d5:44:79:b9: 56:0e:00:7e:1f:8c:c1:d3:3a:5e:0d:62:58:26:bd: 5b:fa:ea:03:7a:f1:b6:c2:2e:85:e4:2d:e2:dc:f7: c5:5b:93:25:09:6f:c0:ec:6f:7d:10:ce:e7:21:14: 6e:a1:08:3e:e0:17:17:c1:1a:e2:d2:bc:30:a7:bd: dd:99:95:27:f1:a5:12:26:1b:42:0f:9d:87:41:60: 93:fb:e1:a9:07:ee:14:3d:33:a3:b7:5b:a4:20:db: 14:5e:a2:5f:67:73:67:15:f9:b0:9a:25:af:18:0d: 9e:97:74:6c:3a:a0:29:4c:24:13:39:d0:19:1b:ca: 10:1f:db:54:fe:78:58:14:ac:62:30:5a:fc:5c:a7: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:75:D2:0A:6B:82:D9:08:3F:2C:A5:6A:0A:88:A8:F1:29:33:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/0256e4dd-8481-3bb0-9a9c-255ae4ab3148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87/77fda34c-14d4-40e5-b350-895a343d3b87.crl X509v3 Authority Key Identifier: keyid:61:31:A5:B8:9A:D0:73:3A:6E:75:AA:9B:A8:0B:95:B2:0C:4B:13:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77fda34c-14d4-40e5-b350-895a343d3b87.cer sbgp-ipAddrBlock: critical IPv4: 74.122.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2a:0b:45:09:23:4a:a2:9d:a0:8e:4f:88:6b:26:c2:ef:86: 48:f6:f5:f3:9b:c3:4b:e2:ab:45:8a:de:df:77:e3:64:1a:3f: 05:ba:b6:07:b9:74:42:78:8f:9e:0d:91:1e:08:e1:9f:32:bd: 3e:ec:d9:c3:2c:d7:92:db:2e:77:1b:51:05:82:37:28:df:71: 8c:91:31:9b:80:ac:3f:27:3d:ec:51:9d:1a:92:f2:3e:41:db: db:78:f9:c6:be:e4:01:90:db:70:15:94:39:89:52:9a:ba:bb: c9:ef:a6:45:e9:90:6c:ed:30:f1:6e:29:91:c2:f3:c0:f7:45: 56:59:01:95:d5:0c:fc:d2:a4:9e:28:76:7e:ab:9c:a8:2c:25: b9:be:51:bb:a7:7a:ae:1f:f6:dc:31:bf:01:cd:a4:c2:24:15: ce:22:d1:fb:cf:c1:45:bb:98:d5:4a:6a:27:17:9d:c8:19:1e: 45:1b:e6:64:3c:a4:2a:25:bf:93:65:bd:3f:9a:f1:2e:d6:d1: 70:b1:a8:e6:26:11:13:99:a0:2c:77:ce:a2:20:be:1f:29:8e: 39:6e:ae:57:12:de:00:83:0f:0f:ec:4b:b7:76:0a:5f:72:46: f1:91:42:7f:9a:d6:08:eb:28:3d:67:38:2b:8e:d4:2c:e0:6c: 46:28:b0:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7O9CEV3rUGqDuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdmZGEzNGMtMTRkNC00MGU1LWIzNTAtODk1YTM0M2Qz Yjg3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk OGMxNTNkNWUtYWFmYS00M2YwLTg1ZjgtODQ0NTVmMDExYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkecMSEk3+ftfY7OX8poU4OTnsQf+qLyr9sXC yOEKGEgRhZN/kpRYoMRa7bM6l5qq10yTbeTXU/bI2GkYcdi9Aw0g3j6npaMvqkIL uA3aersk1GOWP5VeZZXtRWRfbRCfkeg4Tbe2NVqvut62pUoR5+osA9VEeblWDgB+ H4zB0zpeDWJYJr1b+uoDevG2wi6F5C3i3PfFW5MlCW/A7G99EM7nIRRuoQg+4BcX wRri0rwwp73dmZUn8aUSJhtCD52HQWCT++GpB+4UPTOjt1ukINsUXqJfZ3NnFfmw miWvGA2el3RsOqApTCQTOdAZG8oQH9tU/nhYFKxiMFr8XKeNdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp1ddIKa4LZCD8spWoKiKjxKTMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83N2Zk YTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVhMzQzZDNiODcvMDI1NmU0ZGQtODQ4MS0z YmIwLTlhOWMtMjU1YWU0YWIzMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzdmZGEzNGMtMTRkNC00MGU1LWIz NTAtODk1YTM0M2QzYjg3Lzc3ZmRhMzRjLTE0ZDQtNDBlNS1iMzUwLTg5NWEzNDNk M2I4Ny5jcmwwHwYDVR0jBBgwFoAUYTGluJrQczpudaqbqAuVsgxLE8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83N2ZkYTM0Yy0xNGQ0LTQwZTUtYjM1MC04OTVh MzQzZDNiODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIqC0UJI0qinaCOT4hrJsLvhkj29fObw0viq0WK3t9342QaPwW6tge5 dEJ4j54NkR4I4Z8yvT7s2cMs15LbLncbUQWCNyjfcYyRMZuArD8nPexRnRqS8j5B 29t4+ca+5AGQ23AVlDmJUpq6u8nvpkXpkGztMPFuKZHC88D3RVZZAZXVDPzSpJ4o dn6rnKgsJbm+Ubuneq4f9twxvwHNpMIkFc4i0fvPwUW7mNVKaicXncgZHkUb5mQ8 pColv5NlvT+a8S7W0XCxqOYmEROZoCx3zqIgvh8pjjlurlcS3gCDDw/sS7d2Cl9y RvGRQn+a1gjrKD1nOCuO1CzgbEYosKg= -----END CERTIFICATE-----Generated at Fri Jul 24 11:08:04 2026 by rpki-client