$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa File: 1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa (raw, json) Hash identifier: RRxJGZc1vrE12MJqmuWSjI6VtMABc42Xw9UwvyIcUHI= Subject key identifier: 1A:65:2B:A2:19:47:A9:6A:48:92:3F:28:54:AD:15:53:49:18:54:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E779A24FA05E04A4D0465A980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 212238 IP address blocks: 74.0.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:24:fa:05:e0:4a:4d:04:65:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=ff0f687e-97ac-4c96-978b-9daabb9a521a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:67:7c:33:30:d7:7a:25:54:a5:dd:22:dd: ae:35:ae:5c:fb:cf:02:fe:7c:de:9d:d9:ba:70:07: bf:87:c8:a1:1c:d2:00:73:87:a5:96:b0:82:47:0b: 90:46:1b:df:fb:fc:c6:05:a5:9e:db:df:69:7a:34: c0:b6:0d:46:f7:36:c9:44:82:a2:2f:b8:75:3a:5f: 85:eb:cd:bd:89:6a:ee:db:df:8c:98:a1:db:b0:ec: 42:b4:66:9b:03:82:6a:42:41:96:2b:1b:a7:17:3f: 63:9c:f7:31:07:a2:e0:5f:3f:e9:d0:7a:ad:d6:10: 98:06:0d:0f:69:5c:b2:05:8c:a2:1a:23:64:81:62: 82:db:87:de:ce:d8:7c:7c:6c:f5:fe:a0:32:2a:b7: 47:e5:98:7e:5a:31:4c:b9:65:aa:40:6c:69:bb:aa: 22:47:36:8f:cd:d5:12:8f:9f:27:f0:1f:68:6e:38: 10:5c:2c:3e:2d:aa:5e:0b:66:18:fb:bc:b8:20:09: 8b:7b:4d:6d:d3:4c:fb:49:42:b5:c2:54:c7:53:f0: 45:c3:dd:23:f4:84:fe:96:db:43:47:70:d4:b2:d4: 26:39:3d:f2:a0:a6:4c:5e:fb:05:05:13:e5:48:5f: c7:09:66:8f:4f:25:70:30:78:11:d2:9f:85:dc:74: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:65:2B:A2:19:47:A9:6A:48:92:3F:28:54:AD:15:53:49:18:54:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:55:40:ca:fb:36:8e:a7:cc:ca:95:16:35:62:82:4e:62:e0: c2:bc:f2:88:e5:b1:ab:a7:00:a1:62:24:6b:5a:91:f9:6b:94: a9:94:fc:bd:f0:14:fa:04:87:ac:3c:e9:1b:58:ba:54:af:b1: f1:62:6c:55:41:14:8b:73:d8:65:2d:2a:92:56:ce:17:f6:ba: 0f:09:a3:63:8f:54:5d:75:f8:5d:99:6f:8e:7a:1c:06:5b:f8: bf:a0:5f:2d:09:03:af:e9:f2:2d:22:29:e0:56:7b:7b:cc:ac: ec:2b:ae:7d:5e:0f:c0:07:48:23:2d:94:ec:0c:62:39:23:db: ea:09:cf:37:50:e9:62:b6:91:0b:72:32:9e:c4:6e:3b:5d:ec: 2c:f7:99:3f:b4:83:04:51:b1:50:71:d5:22:aa:61:6c:6b:4c: 07:de:58:75:bd:fb:ae:76:56:76:b9:4d:78:77:02:29:bb:46: 41:6b:92:dc:95:b1:9d:84:ed:46:cc:b9:90:56:5b:64:0b:13: c5:3c:d7:f5:93:09:d3:bb:e5:b5:9e:06:42:16:cb:cd:6c:67: f5:9d:7d:f3:42:2c:0d:a3:39:49:24:63:72:3e:f6:45:4e:79: 2a:66:f2:bc:8e:55:1b:4b:84:b8:e1:27:1c:54:3f:68:b4:e9: 9a:03:24:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53miT6BeBKTQRlqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ZmYwZjY4N2UtOTdhYy00Yzk2LTk3OGItOWRhYWJiOWE1MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXJnfDMw13olVKXdIt2uNa5c+88C/nzendm6 cAe/h8ihHNIAc4ellrCCRwuQRhvf+/zGBaWe299pejTAtg1G9zbJRIKiL7h1Ol+F 6829iWru29+MmKHbsOxCtGabA4JqQkGWKxunFz9jnPcxB6LgXz/p0Hqt1hCYBg0P aVyyBYyiGiNkgWKC24fezth8fGz1/qAyKrdH5Zh+WjFMuWWqQGxpu6oiRzaPzdUS j58n8B9objgQXCw+LapeC2YY+7y4IAmLe01t00z7SUK1wlTHU/BFw90j9IT+lttD R3DUstQmOT3yoKZMXvsFBRPlSF/HCWaPTyVwMHgR0p+F3HSkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBplK6IZR6lqSJI/KFStFVNJGFRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTg5NWM3NWEtNzNhNi0z ZjI1LThkYjUtYzljNjhlMGQyYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBVQMr7No6nzMqVFjVigk5i4MK88ojlsaunAKFiJGtakflrlKmU/L3w FPoEh6w86RtYulSvsfFibFVBFItz2GUtKpJWzhf2ug8Jo2OPVF11+F2Zb456HAZb +L+gXy0JA6/p8i0iKeBWe3vMrOwrrn1eD8AHSCMtlOwMYjkj2+oJzzdQ6WK2kQty Mp7Ebjtd7Cz3mT+0gwRRsVBx1SKqYWxrTAfeWHW9+652Vna5TXh3Aim7RkFrktyV sZ2E7UbMuZBWW2QLE8U81/WTCdO75bWeBkIWy81sZ/WdffNCLA2jOUkkY3I+9kVO eSpm8ryOVRtLhLjhJxxUP2i06ZoDJDU= -----END CERTIFICATE-----Generated at Thu Jul 23 21:59:12 2026 by rpki-client