$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb2baefd-12b9-322c-a9de-f1e44dd3684e.roa File: bb2baefd-12b9-322c-a9de-f1e44dd3684e.roa (raw, json) Hash identifier: 9FbPjyosjYedPxMaNDEsT5zODg0Hd+/3WHXyrmJOs7Y= Subject key identifier: A5:11:D1:86:0C:75:7D:9A:95:D0:04:D1:43:E4:8B:02:25:73:B0:4B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD40D79C85F79255CEB8808 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb2baefd-12b9-322c-a9de-f1e44dd3684e.roa Signing time: Fri 25 Sep 2026 12:52:32 +0000 ROA not before: Fri 25 Sep 2026 12:52:32 +0000 ROA not after: Thu 24 Dec 2026 13:52:32 +0000 asID: 6079 IP address blocks: 74.2.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d4:0d:79:c8:5f:79:25:5c:eb:88:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:52:32 2026 GMT Not After : Dec 24 13:52:32 2026 GMT Subject: CN=6d30eadd-e569-4729-a7d8-c6cd1a63dab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:b7:c3:a3:58:42:63:ad:b3:3f:e5:a9:6a: 08:c7:4f:3a:15:2d:fa:3e:29:94:5e:1f:c8:a3:52: 70:91:04:6a:ee:a9:64:9a:40:de:ef:d5:49:02:83: d1:8b:10:28:cf:4f:9f:c2:63:92:9a:56:e6:05:8c: 32:d8:0b:eb:9f:bf:fb:7a:71:1e:15:cc:ba:a7:da: 0e:81:40:38:4c:21:9e:f9:b5:f8:4e:5d:2e:7c:b2: b5:03:60:18:96:59:45:3f:d5:88:c5:51:73:63:6f: f9:4e:1a:08:f1:11:cb:80:6e:d1:3e:1c:9e:9f:76: 3b:f2:1f:7c:e2:fd:3b:04:a6:a1:3e:cd:3d:60:b2: 54:9f:1b:d2:7d:4f:70:d7:e0:f6:b9:4c:0a:4c:13: 76:5c:c4:4c:ba:ce:34:d3:7f:b5:22:9a:f2:cd:91: 01:41:5f:a6:55:7d:e0:87:30:44:43:50:12:8d:ad: 16:14:94:0a:4e:ad:4a:16:45:ce:2a:70:10:5f:da: 8a:43:47:20:6a:87:0d:9b:77:ca:ba:7f:d7:5b:34: fa:24:2c:28:d4:40:d6:76:6e:27:27:11:73:9e:07: 22:36:26:52:30:11:35:cb:c6:1b:d1:a3:5c:f2:71: 5c:81:61:35:41:b5:c9:88:dd:ba:e7:53:7a:d3:7a: 1c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:D1:86:0C:75:7D:9A:95:D0:04:D1:43:E4:8B:02:25:73:B0:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb2baefd-12b9-322c-a9de-f1e44dd3684e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:02:e0:17:7f:40:3c:a4:40:38:f9:cc:c8:43:bd:df:43:63: a8:57:c0:34:d1:8b:5d:a8:22:a7:16:62:b8:76:fe:29:51:e0: 2d:3d:f3:54:ae:ce:39:93:f8:93:94:b4:85:55:07:a8:35:5d: 32:5e:ed:16:fc:d1:35:3c:4a:0c:94:32:4a:38:11:dc:6a:68: 1e:1c:d4:70:30:c1:48:cc:e0:68:70:2e:b0:e5:76:7a:c4:bd: 8b:fc:43:6d:91:28:d7:4b:a5:f1:14:7e:f6:7c:e8:48:eb:11: 44:a8:ac:34:86:40:d8:7e:2f:c7:a1:59:b2:08:7d:06:33:da: 31:30:07:83:45:1d:b0:19:50:27:6c:ef:2a:24:41:9e:98:ad: 3f:e1:25:a6:62:76:9f:cc:11:1e:29:d5:ae:28:5a:52:65:d1: 56:02:23:aa:8d:eb:eb:ab:5b:93:e6:53:61:c0:5c:c0:b6:4f: 85:73:34:fa:86:32:b2:24:fd:47:56:1d:8b:ab:12:11:4c:dc: 7c:c5:06:dc:25:d1:7c:c9:dd:6d:60:f8:36:76:89:4c:4c:a8: 04:c7:14:93:6b:24:8a:0c:ba:50:61:93:6a:d7:9d:d2:8f:9c: e6:b7:a9:d9:03:a9:69:53:ea:25:15:93:79:da:02:ca:bf:90: 7d:f2:b0:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1A15yF95JVzriAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTIzMloXDTI2MTIyNDEzNTIzMlowLzEtMCsGA1UEAxMk NmQzMGVhZGQtZTU2OS00NzI5LWE3ZDgtYzZjZDFhNjNkYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLu3w6NYQmOtsz/lqWoIx086FS36PimUXh/I o1JwkQRq7qlkmkDe79VJAoPRixAoz0+fwmOSmlbmBYwy2Avrn7/7enEeFcy6p9oO gUA4TCGe+bX4Tl0ufLK1A2AYlllFP9WIxVFzY2/5ThoI8RHLgG7RPhyen3Y78h98 4v07BKahPs09YLJUnxvSfU9w1+D2uUwKTBN2XMRMus4003+1IpryzZEBQV+mVX3g hzBEQ1ASja0WFJQKTq1KFkXOKnAQX9qKQ0cgaocNm3fKun/XWzT6JCwo1EDWdm4n JxFzngciNiZSMBE1y8Yb0aNc8nFcgWE1QbXJiN2651N603ocyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUR0YYMdX2aldAE0UPkiwIlc7BLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmIyYmFlZmQtMTJiOS0z MjJjLWE5ZGUtZjFlNDRkZDM2ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSgIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkC4Bd/QDykQDj5zMhDvd9DY6hXwDTRi12oIqcWYrh2/ilR4C0981Su zjmT+JOUtIVVB6g1XTJe7Rb80TU8SgyUMko4EdxqaB4c1HAwwUjM4GhwLrDldnrE vYv8Q22RKNdLpfEUfvZ86EjrEUSorDSGQNh+L8ehWbIIfQYz2jEwB4NFHbAZUCds 7yokQZ6YrT/hJaZidp/MER4p1a4oWlJl0VYCI6qN6+urW5PmU2HAXMC2T4VzNPqG MrIk/UdWHYurEhFM3HzFBtwl0XzJ3W1g+DZ2iUxMqATHFJNrJIoMulBhk2rXndKP nOa3qdkDqWlT6iUVk3naAsq/kH3ysAw= -----END CERTIFICATE-----Generated at Mon Sep 28 19:51:08 2026 by rpki-client