$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/34e49ef5-cd98-32d3-b7da-7f4da275f803.roa File: 34e49ef5-cd98-32d3-b7da-7f4da275f803.roa (raw, json) Hash identifier: gGcrWLaAEmBUXpBlO4mEE4X7nASSe3Tk3RRxJoLJYmg= Subject key identifier: 1B:C3:01:99:95:37:3C:95:C3:8C:76:EF:58:78:66:75:91:51:3B:2D Certificate issuer: /CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9 Certificate serial: 010D0C9F4328584D0EA7EC0C685D4A9899D4D300 Authority key identifier: 18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/34e49ef5-cd98-32d3-b7da-7f4da275f803.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 36464 IP address blocks: 74.118.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ec:0c:68:5d:4a:98:99:d4:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ef995973-9fac-4760-93be-9e3b24c5dfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:fe:cd:91:33:a1:e5:4b:c4:e6:82:0f:7b: 4b:d8:7c:89:ee:59:63:27:a0:3a:88:69:3c:47:af: 8e:5f:84:0f:cd:ae:5b:61:fb:60:5d:23:f4:e9:5a: 35:ce:e4:59:e9:66:e6:78:5e:6c:c2:3a:ef:99:24: c1:a7:c4:23:1f:c6:8c:b4:79:a9:37:ae:dc:a1:8e: 9f:02:3d:90:9a:fa:77:18:87:22:82:a7:47:b3:26: 4b:46:7c:5b:bd:42:af:67:5a:54:b7:46:50:b5:f0: 28:64:21:d8:23:04:8d:54:9e:02:c2:c5:1d:ed:f5: 8c:4d:39:30:c4:42:05:78:df:59:10:7f:41:2a:d5: 29:89:85:6b:fe:5a:a6:34:9c:e0:c7:1b:9c:7c:39: ce:ef:1d:40:1a:fd:c7:ec:06:7a:7f:1e:52:47:75: a7:0b:1c:03:a0:33:78:7e:df:94:c9:85:d2:78:7c: ca:70:d7:f7:72:04:d4:05:8c:5d:65:e8:7f:22:fe: 0b:af:9d:4d:74:65:ba:cc:7a:e5:c5:72:80:3b:63: c6:62:96:6a:6d:cb:65:37:7f:a0:f7:fc:d3:11:9f: 5c:cd:2c:70:4a:2e:c6:79:b3:fc:5f:a8:91:a5:50: 02:cf:6b:0b:c9:1c:f9:d2:63:a6:16:b1:3f:10:b2: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:01:99:95:37:3C:95:C3:8C:76:EF:58:78:66:75:91:51:3B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/34e49ef5-cd98-32d3-b7da-7f4da275f803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl X509v3 Authority Key Identifier: keyid:18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer sbgp-ipAddrBlock: critical IPv4: 74.118.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:64:76:4a:cb:a9:e2:86:7f:7b:90:93:d2:7a:8c:d8:7e:8c: 44:38:bb:2f:ae:c0:0e:56:66:f8:9b:80:7b:d4:d7:81:1e:d8: f9:c2:69:5b:13:44:79:3a:25:b4:45:e4:6b:22:80:2e:38:94: 53:13:93:c9:22:5a:c4:04:e2:38:35:a6:0c:31:a3:ae:0b:02: 03:da:68:df:46:63:db:bb:73:54:10:bf:35:ec:e6:b6:d8:7c: 87:1c:8a:e3:56:42:33:bb:50:b2:be:60:9d:96:a4:c4:09:1f: e8:5f:6c:49:9f:ba:24:82:5a:7f:d6:26:6c:8b:02:48:e0:20: b3:17:c6:b4:7d:77:64:97:8f:28:51:ca:12:1a:e7:4b:e9:d2: 71:a7:4f:fa:75:cd:84:41:b1:9c:fb:8f:d1:6f:30:0c:66:fc: 80:68:52:33:30:0f:39:df:e2:9d:5d:95:0d:89:34:ef:05:2e: 65:d6:2b:a2:37:a5:28:b6:c5:b9:cd:f7:70:cf:5d:a6:04:67: ef:c2:53:fa:1b:10:eb:5b:d0:2f:a0:80:22:38:57:9c:5f:13: 5d:bd:37:be:53:c4:1c:e8:57:5d:40:b3:62:ba:48:df:c0:ff: 43:d3:51:45:a3:56:b7:16:b4:ce:19:ef:43:18:81:93:1a:2b: 69:17:c0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+wMaF1KmJnU0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4ZmNiODYtNDczZC00YTMxLThhMGQtOTVhMDQ2Y2Rh OWE5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZWY5OTU5NzMtOWZhYy00NzYwLTkzYmUtOWUzYjI0YzVkZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmH+zZEzoeVLxOaCD3tL2HyJ7lljJ6A6iGk8 R6+OX4QPza5bYftgXSP06Vo1zuRZ6WbmeF5swjrvmSTBp8QjH8aMtHmpN67coY6f Aj2Qmvp3GIcigqdHsyZLRnxbvUKvZ1pUt0ZQtfAoZCHYIwSNVJ4CwsUd7fWMTTkw xEIFeN9ZEH9BKtUpiYVr/lqmNJzgxxucfDnO7x1AGv3H7AZ6fx5SR3WnCxwDoDN4 ft+UyYXSeHzKcNf3cgTUBYxdZeh/Iv4Lr51NdGW6zHrlxXKAO2PGYpZqbctlN3+g 9/zTEZ9czSxwSi7GebP8X6iRpVACz2sLyRz50mOmFrE/ELIUoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvDAZmVNzyVw4x271h4ZnWRUTstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hODhm Y2I4Ni00NzNkLTRhMzEtOGEwZC05NWEwNDZjZGE5YTkvMzRlNDllZjUtY2Q5OC0z MmQzLWI3ZGEtN2Y0ZGEyNzVmODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTg4ZmNiODYtNDczZC00YTMxLThh MGQtOTVhMDQ2Y2RhOWE5L2E4OGZjYjg2LTQ3M2QtNGEzMS04YTBkLTk1YTA0NmNk YTlhOS5jcmwwHwYDVR0jBBgwFoAUGKS4ZEPLGXmdAO1pELLDk1DGJk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hODhmY2I4Ni00NzNkLTRhMzEtOGEwZC05NWEw NDZjZGE5YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRkdkrLqeKGf3uQk9J6jNh+jEQ4uy+uwA5WZvibgHvU14Ee2PnCaVsT RHk6JbRF5GsigC44lFMTk8kiWsQE4jg1pgwxo64LAgPaaN9GY9u7c1QQvzXs5rbY fIcciuNWQjO7ULK+YJ2WpMQJH+hfbEmfuiSCWn/WJmyLAkjgILMXxrR9d2SXjyhR yhIa50vp0nGnT/p1zYRBsZz7j9FvMAxm/IBoUjMwDznf4p1dlQ2JNO8FLmXWK6I3 pSi2xbnN93DPXaYEZ+/CU/obEOtb0C+ggCI4V5xfE129N75TxBzoV11As2K6SN/A /0PTUUWjVrcWtM4Z70MYgZMaK2kXwCE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:45 2026 by rpki-client