$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/588423f3-6fd5-3b1c-9e1e-acb8af804832.roa File: 588423f3-6fd5-3b1c-9e1e-acb8af804832.roa (raw, json) Hash identifier: CX5tlAhZgn6XxvsAd87wxDADe+3vEyWHTAPqwQI8Ldg= Subject key identifier: 94:04:4A:42:03:39:D0:2C:53:EB:7B:6F:68:0D:EB:38:DD:C1:79:9D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8AC55D5FA5AC4D7238E9EC02 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/588423f3-6fd5-3b1c-9e1e-acb8af804832.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 74.1.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:5d:5f:a5:ac:4d:72:38:e9:ec:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=8c2700a9-4344-4cff-a08b-beb3d8c6e599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:82:d0:30:60:67:81:24:05:1e:04:88:65:36: cb:ff:61:5a:74:a5:b7:49:47:f8:5a:ba:f5:ef:67: ee:4e:3d:38:92:74:fb:cc:42:96:09:7c:6d:96:ff: 00:25:27:b5:14:65:f9:65:b6:10:cf:94:dc:81:76: 2e:aa:f0:a3:28:f5:6f:36:03:8d:1c:f5:ab:0c:e5: e8:7b:e1:8e:95:f2:09:88:fc:29:22:c2:8d:cf:e1: 86:79:52:d0:c9:db:91:44:82:d4:42:fb:ec:c6:6e: 52:d7:63:47:28:d8:a8:58:ef:a2:95:5c:54:b0:8f: f2:11:0c:cd:fc:da:3b:e2:31:58:a8:b5:65:6e:81: df:23:f8:98:36:dd:5e:cf:1f:8c:07:26:e6:6c:31: cb:06:be:80:84:c3:92:25:6b:0a:37:22:a3:3c:9f: 8f:12:c0:96:93:57:72:6a:c9:00:5e:ba:c7:d0:41: af:d8:aa:9c:63:49:55:de:36:71:d2:cb:b9:07:94: 03:36:bd:e4:ad:e9:91:3a:7f:4f:ce:75:bc:22:8f: c0:27:ed:ad:fd:62:cb:0d:65:70:c0:d6:e7:e9:e3: 8a:e1:29:1b:55:94:2e:ad:b4:7f:55:54:70:b4:1f: c2:06:5f:b6:6b:a1:fe:11:ec:9f:b6:b0:1c:be:3f: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:04:4A:42:03:39:D0:2C:53:EB:7B:6F:68:0D:EB:38:DD:C1:79:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/588423f3-6fd5-3b1c-9e1e-acb8af804832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:16:df:9a:21:9d:0b:4f:c3:87:49:8f:eb:32:6f:5e:da:7b: 4b:a1:0f:45:01:8a:cc:a6:a0:d8:7f:fe:fd:3a:21:6e:a1:20: 5c:06:2b:45:b8:23:e0:b8:4e:e8:64:01:2f:c7:5f:35:ff:e5: 17:f3:18:88:36:01:43:a1:3e:c6:34:d1:dc:8f:00:6d:91:2b: b2:11:07:ca:06:4c:17:af:ed:d3:43:78:78:89:1e:ff:73:a1: b6:04:3c:dc:47:a9:d1:f7:02:cb:7b:99:bc:c6:13:5f:8e:76: da:4b:cd:d7:4d:3d:0f:9f:f5:80:4a:90:5c:3b:8e:1a:ea:dd: b0:be:20:37:ef:c0:7e:0d:c9:eb:23:24:18:67:e3:13:78:02: 6f:2b:3e:c8:24:7e:4a:2b:de:44:d4:13:82:24:05:03:74:bb: ae:12:ec:13:e6:7d:c4:11:1a:b6:e5:c6:d4:63:4f:ba:42:f2: a8:2a:a5:87:b0:67:c8:a1:7e:5e:43:14:94:55:88:e8:7b:9e: 73:00:7c:7e:d2:f4:a5:91:98:bf:ed:9f:e8:3d:2d:02:3c:2c: 1c:a9:4f:ec:df:4e:7f:61:fd:f8:cf:b1:aa:7d:41:d7:78:aa: 70:e5:31:fa:10:c0:34:fb:14:cb:1b:4a:ad:8e:45:53:d3:2e: eb:45:4f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxV1fpaxNcjjp7AIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk OGMyNzAwYTktNDM0NC00Y2ZmLWEwOGItYmViM2Q4YzZlNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhILQMGBngSQFHgSIZTbL/2FadKW3SUf4Wrr1 72fuTj04knT7zEKWCXxtlv8AJSe1FGX5ZbYQz5TcgXYuqvCjKPVvNgONHPWrDOXo e+GOlfIJiPwpIsKNz+GGeVLQyduRRILUQvvsxm5S12NHKNioWO+ilVxUsI/yEQzN /No74jFYqLVlboHfI/iYNt1ezx+MBybmbDHLBr6AhMOSJWsKNyKjPJ+PEsCWk1dy askAXrrH0EGv2KqcY0lV3jZx0su5B5QDNr3kremROn9PznW8Io/AJ+2t/WLLDWVw wNbn6eOK4SkbVZQurbR/VVRwtB/CBl+2a6H+EeyftrAcvj8XfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQESkIDOdAsU+t7b2gN6zjdwXmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTg4NDIzZjMtNmZkNS0z YjFjLTllMWUtYWNiOGFmODA0ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwW35ohnQtPw4dJj+syb17ae0uhD0UBisymoNh//v06IW6hIFwGK0W4 I+C4TuhkAS/HXzX/5RfzGIg2AUOhPsY00dyPAG2RK7IRB8oGTBev7dNDeHiJHv9z obYEPNxHqdH3Ast7mbzGE1+OdtpLzddNPQ+f9YBKkFw7jhrq3bC+IDfvwH4Nyesj JBhn4xN4Am8rPsgkfkor3kTUE4IkBQN0u64S7BPmfcQRGrblxtRjT7pC8qgqpYew Z8ihfl5DFJRViOh7nnMAfH7S9KWRmL/tn+g9LQI8LBypT+zfTn9h/fjPsap9Qdd4 qnDlMfoQwDT7FMsbSq2ORVPTLutFT6Y= -----END CERTIFICATE-----Generated at Wed May 13 14:55:48 2026 by rpki-client