$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a402ee64-823d-3555-b141-3b1e3cc688bb.roa File: a402ee64-823d-3555-b141-3b1e3cc688bb.roa (raw, json) Hash identifier: 54CzGoTIgrpOJCMz7vWlO9TaAgA07OJp917RrRxq5y8= Subject key identifier: 4D:A0:3E:DA:FA:12:EE:90:52:20:4E:FB:F1:06:83:8F:33:EC:F4:CC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F58CD536FF0C89EB6317E2880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a402ee64-823d-3555-b141-3b1e3cc688bb.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 834 IP address blocks: 74.2.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:53:6f:f0:c8:9e:b6:31:7e:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=2aba79b0-d989-429d-aa1d-738cb0d7b310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:0e:6b:f8:25:dd:1c:d6:a1:74:38:11:78: 58:9a:81:81:e3:2c:7e:4b:ba:b3:98:a1:b0:1f:98: 34:00:65:84:26:67:00:a5:82:8e:77:87:c8:67:9c: cf:05:66:93:6e:d6:4b:3a:2c:2f:b0:7e:af:9d:4d: 7e:30:9b:c7:92:88:3a:5f:53:af:34:01:bd:9d:dd: 60:23:27:91:7a:78:9c:21:0d:b6:df:7b:93:8a:1f: e6:35:2d:97:ad:a2:c0:2b:2e:23:66:bd:3b:aa:f4: 7f:01:d7:dd:bb:d3:78:19:44:5c:55:eb:c7:96:37: 2b:c7:af:74:87:52:3f:c4:25:61:8e:e8:e0:df:18: 7c:e1:11:01:ef:19:2b:96:ca:b6:b8:84:49:a5:a2: 88:b8:96:bf:ed:07:06:cd:fd:16:b8:69:9e:45:41: 64:c4:70:a8:e2:26:af:ed:36:95:6c:f7:cd:a2:9b: c2:cb:0a:ab:94:eb:df:d0:4f:20:d7:98:cb:22:71: 29:fb:2f:a2:5f:c0:1a:7f:bd:1b:d1:7c:24:93:a3: 38:10:b5:97:89:75:33:0c:4a:e0:35:c4:70:52:69: 2f:dc:60:de:b8:26:13:33:c5:d6:e1:ff:23:9b:15: c1:1e:ce:d7:59:3a:e4:d0:24:27:0e:ad:2d:02:d9: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A0:3E:DA:FA:12:EE:90:52:20:4E:FB:F1:06:83:8F:33:EC:F4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a402ee64-823d-3555-b141-3b1e3cc688bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:cf:df:a6:c5:88:fc:67:d6:20:99:db:68:61:bc:4d:d7:42: 24:bc:2f:89:08:c0:f0:e4:9f:bf:b8:3b:51:3d:3b:9f:1e:1a: 1d:3c:5b:18:f3:01:82:82:bf:0c:c7:aa:1b:d0:22:b5:b9:05: fa:de:69:24:82:5b:01:db:a8:e6:ea:d7:30:f9:0c:a2:f9:f6: 5b:a6:cd:e5:17:c8:25:8d:04:7e:89:d6:66:6e:82:bd:ef:36: d8:7a:7e:42:56:15:b8:5f:f3:e2:3a:fd:2a:52:84:34:21:bf: 79:bf:7c:88:18:b8:c5:de:c2:4d:cf:78:e6:fa:d6:6f:a9:6c: 6d:0b:d7:a3:d0:18:0a:5a:c3:74:4f:64:36:14:f2:cb:8b:4c: 53:91:36:d4:d8:a7:08:fa:ad:8e:95:84:a1:f7:15:54:bc:97: 7d:52:9f:76:95:64:93:63:fe:cf:4b:1f:0d:21:3b:0f:17:91: b1:ca:c0:7f:38:f2:4a:a6:c0:6a:cb:95:83:f0:72:60:ca:0d: c1:e3:09:53:b4:e3:23:77:49:1b:80:79:54:d9:75:82:59:23: 1c:f1:3e:d1:42:c4:29:6d:5e:d1:c4:10:34:e9:2a:9c:9e:ba: 32:b6:e7:4f:5b:74:99:97:ca:c5:6b:7d:90:00:7c:2c:ec:4e: 53:65:b0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVNv8MietjF+KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk MmFiYTc5YjAtZDk4OS00MjlkLWFhMWQtNzM4Y2IwZDdiMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzUOa/gl3RzWoXQ4EXhYmoGB4yx+S7qzmKGw H5g0AGWEJmcApYKOd4fIZ5zPBWaTbtZLOiwvsH6vnU1+MJvHkog6X1OvNAG9nd1g IyeRenicIQ2233uTih/mNS2XraLAKy4jZr07qvR/Adfdu9N4GURcVevHljcrx690 h1I/xCVhjujg3xh84REB7xkrlsq2uIRJpaKIuJa/7QcGzf0WuGmeRUFkxHCo4iav 7TaVbPfNopvCywqrlOvf0E8g15jLInEp+y+iX8Aaf70b0Xwkk6M4ELWXiXUzDErg NcRwUmkv3GDeuCYTM8XW4f8jmxXBHs7XWTrk0CQnDq0tAtmMtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2gPtr6Eu6QUiBO+/EGg48z7PTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTQwMmVlNjQtODIzZC0z NTU1LWIxNDEtM2IxZTNjYzY4OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTP36bFiPxn1iCZ22hhvE3XQiS8L4kIwPDkn7+4O1E9O58eGh08Wxjz AYKCvwzHqhvQIrW5BfreaSSCWwHbqObq1zD5DKL59lumzeUXyCWNBH6J1mZugr3v Nth6fkJWFbhf8+I6/SpShDQhv3m/fIgYuMXewk3PeOb61m+pbG0L16PQGApaw3RP ZDYU8suLTFORNtTYpwj6rY6VhKH3FVS8l31Sn3aVZJNj/s9LHw0hOw8XkbHKwH84 8kqmwGrLlYPwcmDKDcHjCVO04yN3SRuAeVTZdYJZIxzxPtFCxCltXtHEEDTpKpye ujK2509bdJmXysVrfZAAfCzsTlNlsGo= -----END CERTIFICATE-----Generated at Wed Oct 14 01:40:41 2026 by rpki-client