$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13187109-1ad9-3f5a-a65b-16be02fbc77f.roa File: 13187109-1ad9-3f5a-a65b-16be02fbc77f.roa (raw, json) Hash identifier: Gb+vQR5CBmtSoUh/I4r6kAxlPLPcVOKbh4g9IJeiCrw= Subject key identifier: CA:E2:72:45:EF:CC:4B:21:08:CC:35:91:78:81:46:66:67:D0:25:0F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F497367D09B82F61CA1D32F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13187109-1ad9-3f5a-a65b-16be02fbc77f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13737 IP address blocks: 74.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:67:d0:9b:82:f6:1c:a1:d3:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=562fb706-ce6f-4aa8-9ec5-dd7615abcdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a2:ba:c1:9b:d6:e7:b1:96:6f:22:1f:51:bc: 44:94:1f:61:c3:54:3b:ca:7f:01:f1:c9:15:a1:38: 34:86:47:75:eb:8b:80:0f:26:c3:0a:19:e9:f2:83: 6f:74:b0:3d:6a:5e:6e:5a:1b:08:49:77:3f:cc:c3: 26:ce:a0:3e:70:30:c0:76:1f:ae:91:22:3c:66:73: 49:15:f4:09:9f:b5:04:1a:72:0b:52:61:23:f8:cf: c9:04:2b:19:21:2f:e0:18:07:2f:20:7d:43:ae:1f: 54:4b:0d:20:7d:9f:de:9c:23:46:8a:87:e7:4f:c7: db:e1:3c:11:c9:8b:c7:23:9b:41:8f:fc:f7:cb:80: fd:41:cb:61:97:a4:ab:db:5d:7b:b1:13:47:88:c1: 3e:97:4b:de:80:ef:35:3d:14:b0:04:11:cc:ba:26: 93:b6:ee:1e:1b:3c:7a:36:d0:0d:8e:92:6e:88:a7: 45:eb:33:7a:05:87:9a:87:79:13:19:e1:4b:d5:90: 12:f3:59:da:ce:e0:36:ee:05:c6:3d:43:71:d1:81: 4b:78:a5:f5:16:2b:bd:28:99:d9:68:d4:4b:69:04: 91:23:24:99:53:f5:1b:13:1d:92:87:fe:ef:a3:07: 45:27:c0:c8:fb:90:55:23:4a:74:4a:31:3a:48:4a: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E2:72:45:EF:CC:4B:21:08:CC:35:91:78:81:46:66:67:D0:25:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13187109-1ad9-3f5a-a65b-16be02fbc77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:2b:d3:ef:e9:d0:9c:4b:9f:6c:c6:f5:db:8c:f5:c2:e8:78: 2c:07:f8:32:d2:a1:4d:e9:0f:63:92:b8:c9:be:e3:e9:19:43: c9:5d:b1:43:9d:be:22:4a:39:78:c5:c3:74:1b:e6:f0:e1:80: 23:9a:ac:71:7c:37:cf:98:df:75:e8:d5:62:63:68:31:a4:ff: 5b:3a:0f:41:77:46:22:eb:aa:0a:be:5d:3b:a7:71:01:4c:cb: 42:8a:38:05:c2:1c:b8:8b:55:a9:82:c3:e9:35:97:81:e6:62: f4:95:89:a1:71:e3:40:2b:3b:35:26:3d:3a:05:aa:ed:a3:1b: 6b:f9:9c:00:c0:44:9e:26:0e:cf:fd:e2:35:c9:c1:ab:f4:0e: 21:b3:44:de:6c:20:9a:76:07:ad:6a:83:63:32:b8:2a:e7:09: 22:be:37:51:ea:4c:f4:f7:fb:6f:e0:75:2f:e4:24:e0:86:34: b3:e8:61:dd:69:c4:db:b5:4e:9d:79:53:12:b6:c0:69:3c:a3: d8:45:38:03:76:b5:b1:2d:c8:c8:c1:cc:69:c5:75:52:0a:b8: 0d:30:d5:b3:1a:3f:16:0a:25:d3:c0:86:8d:60:12:94:87:e7: f4:f8:fb:36:47:18:0b:3f:28:15:de:00:d7:b1:d9:f2:bd:83: 5c:fd:af:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2fQm4L2HKHTL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTYyZmI3MDYtY2U2Zi00YWE4LTllYzUtZGQ3NjE1YWJjZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KK6wZvW57GWbyIfUbxElB9hw1Q7yn8B8ckV oTg0hkd164uADybDChnp8oNvdLA9al5uWhsISXc/zMMmzqA+cDDAdh+ukSI8ZnNJ FfQJn7UEGnILUmEj+M/JBCsZIS/gGAcvIH1Drh9USw0gfZ/enCNGiofnT8fb4TwR yYvHI5tBj/z3y4D9Qcthl6Sr2117sRNHiME+l0vegO81PRSwBBHMuiaTtu4eGzx6 NtANjpJuiKdF6zN6BYeah3kTGeFL1ZAS81nazuA27gXGPUNx0YFLeKX1Fiu9KJnZ aNRLaQSRIySZU/UbEx2Sh/7vowdFJ8DI+5BVI0p0SjE6SEpZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrickXvzEshCMw1kXiBRmZn0CUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTMxODcxMDktMWFkOS0z ZjVhLWE2NWItMTZiZTAyZmJjNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKor0+/p0JxLn2zG9duM9cLoeCwH+DLSoU3pD2OSuMm+4+kZQ8ldsUOd viJKOXjFw3Qb5vDhgCOarHF8N8+Y33Xo1WJjaDGk/1s6D0F3RiLrqgq+XTuncQFM y0KKOAXCHLiLVamCw+k1l4HmYvSViaFx40ArOzUmPToFqu2jG2v5nADARJ4mDs/9 4jXJwav0DiGzRN5sIJp2B61qg2MyuCrnCSK+N1HqTPT3+2/gdS/kJOCGNLPoYd1p xNu1Tp15UxK2wGk8o9hFOAN2tbEtyMjBzGnFdVIKuA0w1bMaPxYKJdPAho1gEpSH 5/T4+zZHGAs/KBXeANex2fK9g1z9r3A= -----END CERTIFICATE-----Generated at Mon Sep 28 22:42:44 2026 by rpki-client