$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa File: 3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa (raw, json) Hash identifier: FfvK5zmYfjNzEzjS1vTgRSHUhs8BJgzQGChvJLpsN6M= Subject key identifier: 0D:1A:B7:5A:C9:C4:D4:63:80:EC:74:1C:5F:AF:75:28:72:19:5C:DF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD9836781220D8DF3A5015A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa Signing time: Thu 30 Apr 2026 12:23:07 +0000 ROA not before: Thu 30 Apr 2026 12:23:07 +0000 ROA not after: Wed 29 Jul 2026 12:23:07 +0000 asID: 6079 IP address blocks: 74.2.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:98:36:78:12:20:d8:df:3a:50:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:23:07 2026 GMT Not After : Jul 29 12:23:07 2026 GMT Subject: CN=1af4c067-2e4f-4dfa-8de6-0c9c68e12b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:58:0d:8a:f2:3d:2e:4e:5e:22:9c:7b:f4: fb:5e:1c:fd:73:d8:a4:68:c5:7a:86:93:d8:d8:2d: f5:54:0d:b4:88:e7:4d:05:ba:21:a7:20:ab:c6:98: aa:d2:bf:14:8e:62:fe:7e:b5:10:a3:b9:de:57:0a: d4:23:29:1d:d8:ea:ab:fe:5f:29:99:c8:5d:bf:c1: d4:9b:21:ec:5a:50:28:8c:58:ca:05:be:af:fe:01: de:a1:56:67:8c:01:f2:b4:b8:e4:b0:f3:13:b7:e9: 5d:fa:e9:1c:47:e7:6e:85:12:17:ac:0e:e4:e4:2a: 6e:a4:a6:97:7c:a0:07:99:76:55:28:33:aa:a3:c6: b7:5a:34:be:98:ae:78:c2:3f:b6:2e:ab:ff:b3:25: a5:bc:3b:ec:6d:b7:a6:79:c4:a7:c8:2d:24:41:15: b2:63:25:81:f2:03:f5:41:ae:43:70:96:c4:c1:6d: 89:07:91:59:c3:30:1e:84:4b:56:05:2a:c2:d1:77: ac:21:bd:c0:cb:b2:aa:3e:b8:1d:0a:9c:eb:d2:a4: eb:3c:24:5b:00:c9:ea:ac:74:af:26:a0:2a:d3:3b: 9e:0b:25:0c:fe:cf:df:0c:a0:18:3f:bc:2d:b4:26: d5:87:e6:8f:8c:0b:dc:c3:29:a3:69:3e:ec:76:c8: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1A:B7:5A:C9:C4:D4:63:80:EC:74:1C:5F:AF:75:28:72:19:5C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3c4e7c87-1329-33c1-a0ab-b2207a9581e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a4:b4:96:96:51:aa:ba:a4:3a:91:ee:30:d0:b6:46:bd:2f: 57:99:83:24:ae:41:bb:61:f2:28:51:a8:e7:a3:09:fb:5e:27: d2:16:5d:54:45:22:f3:72:ae:1e:79:11:25:91:31:31:09:6c: d4:c4:90:dc:ae:b0:82:b7:90:e2:a4:1d:05:f9:f3:4d:8e:0b: e9:de:98:ad:2c:e1:2f:fa:6c:25:57:c7:88:dc:7f:f7:00:cf: 92:94:82:a0:26:67:ac:e7:83:a4:de:95:4e:cd:ea:59:61:91: a2:b8:56:bf:bd:ec:bc:54:e6:d0:66:0e:f1:41:00:92:9b:94: f9:e1:98:25:7f:3e:38:a0:52:2b:68:ba:1e:5f:80:5b:fe:80: 0d:95:8b:e0:9e:89:e8:70:15:2d:5a:e0:ca:bd:b3:a1:75:ff: 55:ff:c1:46:00:01:88:78:50:c5:fe:b6:ba:82:c3:71:93:17: 76:33:16:67:39:aa:ad:5f:79:2f:0e:0d:c2:21:04:1b:a4:3a: 24:91:9b:da:5b:66:6d:1b:c8:a5:08:37:24:74:a0:27:38:b9: 29:d5:96:4e:d7:96:a7:6a:bd:19:85:bc:bc:93:9c:e0:a5:02: 62:be:f2:0f:15:9d:2c:32:ac:06:11:1d:97:2e:0b:50:ae:74: 6c:99:49:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tmDZ4EiDY3zpQFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMjMwN1oXDTI2MDcyOTEyMjMwN1owLzEtMCsGA1UEAxMk MWFmNGMwNjctMmU0Zi00ZGZhLThkZTYtMGM5YzY4ZTEyYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOJYDYryPS5OXiKce/T7Xhz9c9ikaMV6hpPY 2C31VA20iOdNBbohpyCrxpiq0r8UjmL+frUQo7neVwrUIykd2Oqr/l8pmchdv8HU myHsWlAojFjKBb6v/gHeoVZnjAHytLjksPMTt+ld+ukcR+duhRIXrA7k5CpupKaX fKAHmXZVKDOqo8a3WjS+mK54wj+2Lqv/syWlvDvsbbemecSnyC0kQRWyYyWB8gP1 Qa5DcJbEwW2JB5FZwzAehEtWBSrC0XesIb3Ay7KqPrgdCpzr0qTrPCRbAMnqrHSv JqAq0zueCyUM/s/fDKAYP7wttCbVh+aPjAvcwymjaT7sdsjAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0at1rJxNRjgOx0HF+vdShyGVzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2M0ZTdjODctMTMyOS0z M2MxLWEwYWItYjIyMDdhOTU4MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyktJaWUaq6pDqR7jDQtka9L1eZgySuQbth8ihRqOejCfteJ9IWXVRF IvNyrh55ESWRMTEJbNTEkNyusIK3kOKkHQX5802OC+nemK0s4S/6bCVXx4jcf/cA z5KUgqAmZ6zng6TelU7N6llhkaK4Vr+97LxU5tBmDvFBAJKblPnhmCV/PjigUito uh5fgFv+gA2Vi+CeiehwFS1a4Mq9s6F1/1X/wUYAAYh4UMX+trqCw3GTF3YzFmc5 qq1feS8ODcIhBBukOiSRm9pbZm0byKUINyR0oCc4uSnVlk7XlqdqvRmFvLyTnOCl AmK+8g8VnSwyrAYRHZcuC1CudGyZSVg= -----END CERTIFICATE-----Generated at Wed May 13 12:41:57 2026 by rpki-client