$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21d7a2cf-2db5-349f-b55a-4e2c2ef40220.roa File: 21d7a2cf-2db5-349f-b55a-4e2c2ef40220.roa (raw, json) Hash identifier: MbZL9lGnYVbPYGFLZDEdjrAgmqR0iNh7GJDKYfVopAQ= Subject key identifier: 09:6D:3D:98:C0:53:98:36:2F:7E:CA:83:C9:D5:B8:87:92:7C:8B:CF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD60519267247DFE233C120 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21d7a2cf-2db5-349f-b55a-4e2c2ef40220.roa Signing time: Fri 25 Sep 2026 12:56:29 +0000 ROA not before: Fri 25 Sep 2026 12:56:29 +0000 ROA not after: Thu 24 Dec 2026 13:56:29 +0000 asID: 6079 IP address blocks: 74.0.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d6:05:19:26:72:47:df:e2:33:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:56:29 2026 GMT Not After : Dec 24 13:56:29 2026 GMT Subject: CN=2f6284e9-f667-40ec-9e7a-2cd8291987df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:42:78:7f:18:b9:3b:85:e5:c9:1a:2f:0b: c4:6e:91:02:5f:e7:41:90:c9:8c:ac:a5:fe:d5:9a: 72:2a:21:e9:e9:33:51:09:57:36:fc:fa:e1:22:98: e2:5b:a6:11:df:2a:2e:41:45:29:3c:69:c5:dd:21: 93:d5:6c:71:0c:ce:7d:4b:01:4b:ae:b9:3a:84:a3: 97:e5:76:42:e4:a1:8b:2b:15:c3:0d:ec:a2:2b:77: e4:d4:a7:89:46:5c:75:52:3c:f5:9a:a6:2a:44:30: 2d:0a:de:a6:b2:0f:f7:71:07:b3:4f:97:77:af:bb: 25:64:8a:3d:57:7e:dc:35:e7:5b:b2:9c:66:02:c6: 88:98:dd:54:88:df:3a:b6:a3:10:12:57:65:f5:dd: db:09:d1:38:86:82:69:c9:4d:61:ef:44:5d:ec:ae: 52:0a:4f:bc:de:85:a7:63:c9:82:b0:54:a4:e8:aa: 8d:03:ad:54:92:16:f2:4b:77:87:09:07:52:c5:40: 58:02:93:a1:a6:e1:9a:fa:47:e1:63:58:e6:af:8c: c1:87:97:ae:82:14:8d:b0:0e:19:b0:76:19:47:49: 69:a5:3d:6b:71:ad:85:30:67:b2:1a:41:44:12:ce: 5f:9f:0b:69:38:e3:22:74:a6:b8:e2:7d:cf:04:40: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:3D:98:C0:53:98:36:2F:7E:CA:83:C9:D5:B8:87:92:7C:8B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21d7a2cf-2db5-349f-b55a-4e2c2ef40220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:94:8d:ea:af:74:cb:41:dc:48:6a:48:34:56:74:07:77:94: f6:70:be:ac:c7:50:28:4f:03:37:e5:04:2c:06:f0:d3:6d:1e: 49:72:2f:49:74:ac:88:f2:65:df:c5:3f:b7:cd:6f:a2:8a:49: 07:c1:70:df:d5:d8:06:de:11:e5:f8:fd:c5:1d:9c:39:86:f4: 88:b9:4e:f8:a8:67:23:f8:eb:4a:a1:df:4a:e0:e3:60:b8:71: 4b:37:ad:43:6d:00:98:bb:c2:59:16:14:77:70:49:d6:b7:5d: 8d:59:f0:c8:1a:8c:8d:c5:24:2e:25:47:85:a1:59:ff:66:fe: 7a:4d:e3:70:95:c1:7a:a8:c6:03:37:3b:e9:cb:48:0e:6a:a3: d9:6b:1d:bf:f8:0d:e0:24:1c:36:d5:1a:96:78:e2:41:a5:6e: a8:3d:77:cf:48:5d:5b:08:ad:a3:5d:16:60:aa:e7:1e:d4:5c: 41:42:ae:38:3a:b5:04:34:a7:ce:de:e7:1b:ea:84:de:37:19: f2:dc:e0:16:e1:17:8b:ec:be:f7:56:6d:31:5b:bd:34:93:52: 37:09:3a:ee:5c:32:67:f4:8e:14:ed:7f:3e:58:d5:96:e1:25: 9c:4b:37:80:f9:ae:66:24:2a:37:15:df:72:71:b7:fc:49:f7: 64:6b:88:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1gUZJnJH3+IzwSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTYyOVoXDTI2MTIyNDEzNTYyOVowLzEtMCsGA1UEAxMk MmY2Mjg0ZTktZjY2Ny00MGVjLTllN2EtMmNkODI5MTk4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6RCeH8YuTuF5ckaLwvEbpECX+dBkMmMrKX+ 1ZpyKiHp6TNRCVc2/PrhIpjiW6YR3youQUUpPGnF3SGT1WxxDM59SwFLrrk6hKOX 5XZC5KGLKxXDDeyiK3fk1KeJRlx1Ujz1mqYqRDAtCt6msg/3cQezT5d3r7slZIo9 V37cNedbspxmAsaImN1UiN86tqMQEldl9d3bCdE4hoJpyU1h70Rd7K5SCk+83oWn Y8mCsFSk6KqNA61UkhbyS3eHCQdSxUBYApOhpuGa+kfhY1jmr4zBh5eughSNsA4Z sHYZR0lppT1rca2FMGeyGkFEEs5fnwtpOOMidKa44n3PBEA7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAltPZjAU5g2L37Kg8nVuIeSfIvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFkN2EyY2YtMmRiNS0z NDlmLWI1NWEtNGUyYzJlZjQwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+UjeqvdMtB3EhqSDRWdAd3lPZwvqzHUChPAzflBCwG8NNtHklyL0l0 rIjyZd/FP7fNb6KKSQfBcN/V2AbeEeX4/cUdnDmG9Ii5TvioZyP460qh30rg42C4 cUs3rUNtAJi7wlkWFHdwSda3XY1Z8MgajI3FJC4lR4WhWf9m/npN43CVwXqoxgM3 O+nLSA5qo9lrHb/4DeAkHDbVGpZ44kGlbqg9d89IXVsIraNdFmCq5x7UXEFCrjg6 tQQ0p87e5xvqhN43GfLc4BbhF4vsvvdWbTFbvTSTUjcJOu5cMmf0jhTtfz5Y1Zbh JZxLN4D5rmYkKjcV33Jxt/xJ92RriP0= -----END CERTIFICATE-----Generated at Sun Sep 27 16:04:10 2026 by rpki-client