$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c33a18fb-9784-3b87-b86a-06567aa753f2.roa File: c33a18fb-9784-3b87-b86a-06567aa753f2.roa (raw, json) Hash identifier: tWvRPpiQAVSoCJ75a95ZM2eHeHFZScHcnO2IYUpm27E= Subject key identifier: 53:9B:62:6F:9B:91:9E:66:BF:DA:6D:15:39:71:76:BA:5C:48:26:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0D6CE59C216B712FFBBA4900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c33a18fb-9784-3b87-b86a-06567aa753f2.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 74.1.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e5:9c:21:6b:71:2f:fb:ba:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=5b3cb89d-74e5-4e8b-8985-bd22002a339a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:8e:bb:b1:a3:fd:ef:08:a2:13:34:5a:4c: e3:31:78:92:cf:7f:2e:1f:0d:1e:c8:c1:b7:1e:37: 51:08:16:87:ed:5a:12:cd:29:db:29:d1:8b:f5:da: 35:89:62:b3:29:1b:b5:b1:ed:92:94:a1:3b:27:24: fc:36:82:53:d6:07:bf:55:73:e2:40:c7:a9:d7:75: ae:5f:4d:3d:1d:25:56:85:ee:b5:16:2d:0b:b0:4f: b6:69:9c:9d:6b:29:32:e2:b6:03:c2:5b:1c:bf:8f: 0d:be:d6:15:1b:3a:cd:da:a9:85:49:c1:68:1c:b5: d8:10:dc:26:fa:7d:26:1e:05:60:6e:16:14:99:79: 6b:fd:cd:e4:74:1f:ab:fe:91:ab:c5:50:4d:58:64: 75:af:66:b3:24:87:55:ce:da:33:a7:f1:7b:3f:e7: 1b:5d:f6:fa:9f:58:2e:97:88:17:db:c8:1c:3c:98: 9c:91:6b:4e:4b:27:32:48:05:58:87:df:be:2c:a9: c7:bf:f5:75:ab:cb:51:a2:21:72:86:e3:b9:e4:69: 0b:61:bd:00:ab:e9:0d:7a:ef:85:04:1b:c3:78:ef: bf:50:0d:b7:e1:42:94:30:fc:a1:f8:5d:0d:be:22: 50:02:9c:50:21:26:a3:c1:a1:39:bf:db:0c:a0:70: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9B:62:6F:9B:91:9E:66:BF:DA:6D:15:39:71:76:BA:5C:48:26:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c33a18fb-9784-3b87-b86a-06567aa753f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b5:b9:1d:b4:b7:95:f9:51:0e:7b:dc:09:0d:b2:28:20:66: 5d:8d:3a:96:bb:34:cd:5c:57:ff:92:aa:c0:20:0a:dd:fc:f8: 33:13:26:70:80:47:24:f1:a0:8f:ab:8e:66:07:90:3f:48:a0: 91:f2:37:7a:d5:51:a5:9a:8f:54:48:b5:06:54:d7:dd:c2:6e: 49:d1:8a:f4:cc:a2:83:fb:7b:2a:fe:4f:d9:1c:ab:ee:22:55: d0:dd:e4:32:f6:e6:1a:59:3b:25:e6:86:92:f9:58:aa:e6:e5: 22:54:9f:eb:da:fc:d6:dc:0f:16:76:41:91:ee:7b:28:21:47: 22:27:d8:f2:cb:6c:57:6d:18:46:00:96:4e:4a:94:15:df:de: 07:f0:3c:1c:ac:20:7e:9c:a8:e1:81:50:f1:10:ab:24:c3:da: 0a:10:e0:89:09:07:2c:62:de:e4:58:5f:eb:50:ed:2a:b4:b2: 33:13:73:b0:5f:52:74:dc:d1:bb:e8:08:50:14:b1:4c:e4:0f: 38:f6:3d:49:aa:6d:20:ac:14:1c:1a:ce:90:5a:60:e5:f0:72: a6:32:6b:90:40:a2:83:af:bc:fc:1e:c0:1c:29:0c:67:09:57: ba:89:7d:55:c6:5e:67:53:09:46:22:77:d2:6c:fb:66:b8:43: b9:9e:f9:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOWcIWtxL/u6SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NWIzY2I4OWQtNzRlNS00ZThiLTg5ODUtYmQyMjAwMmEzMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40aOu7Gj/e8IohM0WkzjMXiSz38uHw0eyMG3 HjdRCBaH7VoSzSnbKdGL9do1iWKzKRu1se2SlKE7JyT8NoJT1ge/VXPiQMep13Wu X009HSVWhe61Fi0LsE+2aZydayky4rYDwlscv48NvtYVGzrN2qmFScFoHLXYENwm +n0mHgVgbhYUmXlr/c3kdB+r/pGrxVBNWGR1r2azJIdVztozp/F7P+cbXfb6n1gu l4gX28gcPJickWtOSycySAVYh9++LKnHv/V1q8tRoiFyhuO55GkLYb0Aq+kNeu+F BBvDeO+/UA234UKUMPyh+F0NviJQApxQISajwaE5v9sMoHC5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFObYm+bkZ5mv9ptFTlxdrpcSCZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzMzYTE4ZmItOTc4NC0z Yjg3LWI4NmEtMDY1NjdhYTc1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG1uR20t5X5UQ573AkNsiggZl2NOpa7NM1cV/+SqsAgCt38+DMTJnCA RyTxoI+rjmYHkD9IoJHyN3rVUaWaj1RItQZU193CbknRivTMooP7eyr+T9kcq+4i VdDd5DL25hpZOyXmhpL5WKrm5SJUn+va/NbcDxZ2QZHueyghRyIn2PLLbFdtGEYA lk5KlBXf3gfwPBysIH6cqOGBUPEQqyTD2goQ4IkJByxi3uRYX+tQ7Sq0sjMTc7Bf UnTc0bvoCFAUsUzkDzj2PUmqbSCsFBwazpBaYOXwcqYya5BAooOvvPwewBwpDGcJ V7qJfVXGXmdTCUYid9Js+2a4Q7me+dI= -----END CERTIFICATE-----Generated at Thu Oct 8 15:47:46 2026 by rpki-client