$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa File: 3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa (raw, json) Hash identifier: jk+bXUH9K4JtRZFdIF/mfRj+MElNWfwgJqMctQHBXeE= Subject key identifier: 20:77:97:2A:92:A5:65:DA:5B:F1:DA:9C:E5:75:B8:AD:D6:58:09:46 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E8DEF992CB204A3DFC97F6360 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 6079 IP address blocks: 74.2.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:99:2c:b2:04:a3:df:c9:7f:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=17de5b89-a311-448e-b35b-df016e7ec776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:dd:04:17:2d:13:41:ba:5d:b6:10:23:ae: 54:a1:dc:71:a5:be:35:a6:88:0c:7c:34:f8:b1:f2: b3:76:75:f6:42:a4:ad:c3:0e:f5:f6:6f:f2:ef:11: d3:4d:a3:d5:22:26:8f:a0:79:9d:ff:9f:3b:a5:25: 9f:50:5f:53:22:3b:16:02:c1:dd:21:6c:b3:9a:51: 52:df:14:4e:fd:2d:ce:96:45:2c:b1:97:e1:1f:6f: 10:10:1d:cf:57:ee:8b:76:da:52:d8:07:fb:05:d6: ab:3c:63:e8:11:3b:d9:a7:8f:02:64:ea:f1:34:3a: b0:74:8a:24:1b:13:bc:ed:fd:c2:b6:26:6b:fd:4a: 8d:6d:fa:0b:80:1d:38:1d:27:42:5f:e4:02:7e:57: 64:6b:6a:0e:e2:fe:7a:a8:54:32:dc:15:64:c5:c3: bc:ed:1d:5a:97:d6:2e:1d:d6:37:7f:2b:73:33:b9: b9:2b:1c:fc:ca:f7:5f:a8:7f:5b:1d:8b:d9:89:86: 31:b4:78:53:3c:2d:4b:8c:cd:1a:35:3b:d3:35:07: 1d:f6:bf:35:55:9e:4e:2c:ba:05:46:dc:1a:41:11: 86:cb:bb:83:69:ef:8c:fd:51:4c:93:46:e5:f9:26: c6:5b:2b:62:54:41:c1:99:b9:5b:a3:2b:70:bf:38: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:77:97:2A:92:A5:65:DA:5B:F1:DA:9C:E5:75:B8:AD:D6:58:09:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0a:3a:5c:16:92:ef:91:45:2e:14:7a:69:9f:30:90:6e:b7: 59:e1:e1:ad:07:29:88:e0:05:6b:ce:d3:a9:e1:d4:26:e7:44: 2e:ec:e7:b6:2f:e0:de:d6:1f:4a:f9:a7:85:eb:c9:81:39:29: b7:77:c4:84:ee:be:6d:1c:ff:cf:71:2d:db:a3:44:73:e6:19: 3d:b5:22:17:ad:0d:bf:98:a6:1a:81:77:61:17:c2:7f:05:be: 2d:c1:33:c5:0f:3e:bc:b0:a7:b2:c9:7c:66:d9:c3:ce:59:39: e4:6c:49:42:94:9c:99:9f:a4:43:59:5d:45:15:32:fe:44:c7: d6:b4:3c:a7:53:c4:16:68:85:84:68:b8:d4:00:f7:3c:ba:98: 80:ee:01:eb:ea:e5:f8:96:06:ab:ba:16:38:ac:f6:f8:09:8f: ee:94:80:5d:ff:42:8c:83:67:c5:69:0c:23:8f:ea:2c:f4:a9: 04:6a:9d:15:ea:01:23:3d:43:ad:6a:c1:f3:77:01:77:ad:af: e3:8d:37:c6:d6:dd:06:b8:a5:4b:30:76:55:62:99:ef:a0:36: fc:23:77:93:c5:d0:ae:df:f7:34:89:c0:6f:b2:5b:f9:69:b1: 80:1b:5f:80:a9:94:9e:8f:39:ee:9f:9d:0f:99:f0:20:fc:13: 70:52:b3:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N75kssgSj38l/Y2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MTdkZTViODktYTMxMS00NDhlLWIzNWItZGYwMTZlN2VjNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN/dBBctE0G6XbYQI65Uodxxpb41pogMfDT4 sfKzdnX2QqStww719m/y7xHTTaPVIiaPoHmd/587pSWfUF9TIjsWAsHdIWyzmlFS 3xRO/S3OlkUssZfhH28QEB3PV+6LdtpS2Af7BdarPGPoETvZp48CZOrxNDqwdIok GxO87f3CtiZr/UqNbfoLgB04HSdCX+QCfldka2oO4v56qFQy3BVkxcO87R1al9Yu HdY3fytzM7m5Kxz8yvdfqH9bHYvZiYYxtHhTPC1LjM0aNTvTNQcd9r81VZ5OLLoF RtwaQRGGy7uDae+M/VFMk0bl+SbGWytiVEHBmblboytwvzgbpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB3lyqSpWXaW/HanOV1uK3WWAlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2M0ZTdjODctMTMyOS0z M2MxLWEwYWItYjIyMDdhOTU4MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIKOlwWku+RRS4UemmfMJBut1nh4a0HKYjgBWvO06nh1CbnRC7s57Yv 4N7WH0r5p4XryYE5Kbd3xITuvm0c/89xLdujRHPmGT21IhetDb+YphqBd2EXwn8F vi3BM8UPPrywp7LJfGbZw85ZOeRsSUKUnJmfpENZXUUVMv5Ex9a0PKdTxBZohYRo uNQA9zy6mIDuAevq5fiWBqu6Fjis9vgJj+6UgF3/QoyDZ8VpDCOP6iz0qQRqnRXq ASM9Q61qwfN3AXetr+ONN8bW3Qa4pUswdlVime+gNvwjd5PF0K7f9zSJwG+yW/lp sYAbX4CplJ6POe6fnQ+Z8CD8E3BSsyA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:54 2026 by rpki-client