$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa File: 36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa (raw, json) Hash identifier: OSXRXthdLbeZROuA96Rwgaj9Xs19p8yiudkwiHyQy9c= Subject key identifier: 9A:9F:1D:5F:E2:B6:F2:EC:B4:C9:CF:A3:95:EB:C6:96:39:85:6C:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D905A94606A2F6463FC1A0C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 174 IP address blocks: 74.2.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:94:60:6a:2f:64:63:fc:1a:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=795671c9-11c1-4f1b-ad45-0f63078181c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:00:d9:c9:bd:0a:62:06:44:32:da:05:41: b0:0e:67:13:6f:4f:30:07:3c:79:e4:5c:9f:d7:f3: c9:fd:e6:58:e6:26:db:15:af:67:89:e9:82:7e:9d: 1a:a9:92:11:ad:53:c2:87:61:2a:06:fe:47:6b:5f: 61:ab:85:da:64:b2:81:99:f4:42:27:65:44:2e:9b: fa:29:30:40:7b:49:f3:3c:fd:71:8d:1b:af:52:8e: dc:d9:0d:10:19:1d:14:71:2c:4d:90:b6:bf:e8:c8: 5b:23:ae:9d:74:e0:42:65:fc:e7:ba:f9:c0:ab:77: 8b:37:dc:48:3b:bf:36:32:ad:24:f5:95:bf:6a:8a: 96:21:06:3f:ca:b7:c1:99:2c:a7:24:89:ec:e0:0c: 84:56:be:61:a2:2d:29:64:85:67:ce:38:c9:41:d0: 2c:c9:17:f1:d3:53:02:33:c9:08:0a:5e:43:db:1d: 74:3e:01:cb:b7:56:72:d1:86:51:2f:fd:1f:25:3c: a7:8a:b6:af:3f:e6:9b:35:35:9b:98:94:d9:fa:c2: 22:4e:95:e1:bb:d7:2f:1d:0c:e8:af:97:cd:eb:36: 8c:5c:91:e4:d8:15:1e:15:cb:70:e2:f1:c8:4b:e6: 9c:ab:94:4f:6a:d3:1c:d9:46:cd:3a:ed:a2:96:24: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:1D:5F:E2:B6:F2:EC:B4:C9:CF:A3:95:EB:C6:96:39:85:6C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:aa:ee:d6:90:01:fc:80:46:13:72:f2:d0:0b:c9:1b:85:60: aa:d8:08:cb:68:75:f2:23:98:16:b4:59:5c:20:a8:fb:42:2b: 84:43:32:86:e2:eb:4a:02:67:4e:5d:8a:c5:24:a2:75:e5:be: c3:72:e7:3a:20:5b:89:de:51:07:44:91:d5:38:46:53:ad:6b: b9:a6:90:ff:84:7e:ac:ad:e8:08:c6:5d:ee:a8:7f:14:d3:ca: c3:08:bc:3e:f3:bd:e7:6e:bc:82:09:c0:81:ca:cd:a2:bd:36: bd:e9:eb:6f:e1:c3:fd:db:79:ce:2c:4b:1d:d0:9b:b4:b9:ff: 04:55:2a:d9:c7:5b:d3:94:08:85:55:16:13:2e:3a:04:16:96: 15:24:f0:c9:33:ae:01:ed:2d:af:75:5a:57:0d:90:10:94:b4: bf:1d:76:2e:6a:a5:bd:0e:10:32:8e:27:0c:ad:22:54:49:8f: cf:db:bf:02:d3:b3:e7:50:c6:d9:2b:ed:11:86:aa:00:96:13: 5d:5f:82:27:f9:ee:ca:5b:c0:c3:53:9e:71:d5:42:e3:1d:ec: f4:3f:5b:98:54:cb:9b:54:01:c6:06:be:aa:7e:ce:cd:64:10: 5e:6c:16:ff:2f:aa:bd:27:b8:4f:b0:11:2b:cb:c3:24:ac:66: 7d:40:6e:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpRgai9kY/waDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk Nzk1NjcxYzktMTFjMS00ZjFiLWFkNDUtMGY2MzA3ODE4MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxkA2cm9CmIGRDLaBUGwDmcTb08wBzx55Fyf 1/PJ/eZY5ibbFa9niemCfp0aqZIRrVPCh2EqBv5Ha19hq4XaZLKBmfRCJ2VELpv6 KTBAe0nzPP1xjRuvUo7c2Q0QGR0UcSxNkLa/6MhbI66ddOBCZfznuvnAq3eLN9xI O782Mq0k9ZW/aoqWIQY/yrfBmSynJIns4AyEVr5hoi0pZIVnzjjJQdAsyRfx01MC M8kICl5D2x10PgHLt1Zy0YZRL/0fJTyniravP+abNTWbmJTZ+sIiTpXhu9cvHQzo r5fN6zaMXJHk2BUeFctw4vHIS+acq5RPatMc2UbNOu2iliTVHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqfHV/itvLstMnPo5XrxpY5hWwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzZjMWRjNjAtNDhkMS0z NTU1LTljMDgtMGZhNGE2YTExNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6q7taQAfyARhNy8tALyRuFYKrYCMtodfIjmBa0WVwgqPtCK4RDMobi 60oCZ05disUkonXlvsNy5zogW4neUQdEkdU4RlOta7mmkP+Efqyt6AjGXe6ofxTT ysMIvD7zveduvIIJwIHKzaK9Nr3p62/hw/3bec4sSx3Qm7S5/wRVKtnHW9OUCIVV FhMuOgQWlhUk8MkzrgHtLa91WlcNkBCUtL8ddi5qpb0OEDKOJwytIlRJj8/bvwLT s+dQxtkr7RGGqgCWE11fgif57spbwMNTnnHVQuMd7PQ/W5hUy5tUAcYGvqp+zs1k EF5sFv8vqr0nuE+wESvLwySsZn1Aboo= -----END CERTIFICATE-----Generated at Tue May 12 21:34:15 2026 by rpki-client