$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdfc7b40-bde4-34a2-b692-96a778908a5b.roa File: cdfc7b40-bde4-34a2-b692-96a778908a5b.roa (raw, json) Hash identifier: sR4t0JbQLTltqXExI05q4TX5BsWyvjRHonii/Vf6zLs= Subject key identifier: B2:D8:DE:3B:DD:71:F6:CE:F0:71:1C:F0:2A:66:DA:55:A8:C1:6A:B9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D100CEE94E58B3FC547FB5E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdfc7b40-bde4-34a2-b692-96a778908a5b.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 74.2.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:ee:94:e5:8b:3f:c5:47:fb:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=ff81cae6-5787-4407-bc8e-a41e726b7829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:14:18:04:58:d5:63:0b:ee:4a:04:a7:4b: 8b:e1:77:ab:c3:fc:bc:a3:35:d4:c1:9b:73:c4:33: fb:0c:61:ae:85:d4:e4:aa:4a:06:b1:3e:16:e5:3b: e9:8a:d8:0b:d9:15:c1:ec:7e:42:d3:f9:b2:e8:4f: 8e:b5:63:79:2d:b9:af:31:c1:77:18:c8:08:50:16: 2b:45:c9:ac:63:be:ad:0f:57:c0:fe:59:cc:bb:7b: 6c:fb:e5:b0:7e:2d:50:6b:c1:85:f6:27:40:3e:f5: 9f:df:8f:9b:cc:b6:ae:12:19:c0:a1:74:6e:77:6b: e5:3c:48:c1:f6:5d:45:7e:a3:21:71:5e:e4:72:f8: cb:23:c2:a1:50:e0:7e:49:f2:36:90:b7:4a:99:fc: d0:c1:cf:d9:58:8e:55:6f:a6:d8:2d:f6:4e:db:24: 9f:9c:0f:a7:0a:36:fe:08:c5:59:fa:10:93:82:93: b9:f2:71:20:b0:67:78:29:4b:33:ee:d0:91:b3:53: a8:0d:2f:f5:19:0b:e1:d2:21:83:08:24:a1:59:04: d4:25:56:97:5c:92:b8:bd:c7:e6:7c:2d:fd:b9:a9: e9:c7:40:ea:83:dd:b2:12:3e:e5:1f:2f:a7:94:d2: 7b:c2:11:af:b8:da:eb:1e:f8:63:4f:8a:fc:c7:32: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:DE:3B:DD:71:F6:CE:F0:71:1C:F0:2A:66:DA:55:A8:C1:6A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdfc7b40-bde4-34a2-b692-96a778908a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:0f:9c:d3:34:ee:80:75:b8:4e:0b:94:76:93:eb:4a:f3:5f: fb:77:85:e7:62:8f:43:cd:cb:10:c2:a6:8f:c2:35:2a:f3:6e: 87:7e:c2:fe:f3:d7:2e:11:0f:db:3d:6d:14:92:a3:3c:dc:ea: 6f:91:18:3a:5a:7b:d2:76:66:73:ae:cf:8d:9f:34:f5:28:da: fc:25:1e:4b:f0:38:52:37:a1:63:7d:98:ce:17:b7:4f:df:31: de:52:02:45:c6:4a:c4:0b:07:e4:55:e7:33:15:b6:72:ea:aa: fc:e0:e2:74:02:16:27:66:99:53:52:bc:2b:b9:b1:7a:ab:2a: 2c:58:f1:00:ca:02:40:eb:6a:b7:b7:81:23:94:6f:c8:d0:63: 79:23:30:40:44:01:88:57:92:a3:0d:43:df:2c:27:b7:b1:b1: c3:f9:df:3d:3e:1b:73:27:a4:30:be:ef:bf:70:d5:a5:36:36: cd:98:33:1d:75:8f:cd:d9:e6:9a:c6:9e:ad:4d:46:c6:8d:17: c9:08:b6:e1:88:d5:69:12:74:87:d8:e4:1b:78:41:29:0e:a6: 73:6a:90:9d:42:49:0b:3e:8b:77:f4:4c:db:18:c8:02:14:04: ae:81:da:66:1b:63:9d:7a:74:f7:70:2d:99:fa:5c:db:4c:46: 8a:d2:d7:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDO6U5Ys/xUf7XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZmY4MWNhZTYtNTc4Ny00NDA3LWJjOGUtYTQxZTcyNmI3ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HgUGARY1WML7koEp0uL4Xerw/y8ozXUwZtz xDP7DGGuhdTkqkoGsT4W5TvpitgL2RXB7H5C0/my6E+OtWN5LbmvMcF3GMgIUBYr RcmsY76tD1fA/lnMu3ts++Wwfi1Qa8GF9idAPvWf34+bzLauEhnAoXRud2vlPEjB 9l1FfqMhcV7kcvjLI8KhUOB+SfI2kLdKmfzQwc/ZWI5Vb6bYLfZO2ySfnA+nCjb+ CMVZ+hCTgpO58nEgsGd4KUsz7tCRs1OoDS/1GQvh0iGDCCShWQTUJVaXXJK4vcfm fC39uanpx0Dqg92yEj7lHy+nlNJ7whGvuNrrHvhjT4r8xzL9GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLY3jvdcfbO8HEc8Cpm2lWowWq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RmYzdiNDAtYmRlNC0z NGEyLWI2OTItOTZhNzc4OTA4YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoPnNM07oB1uE4LlHaT60rzX/t3hedij0PNyxDCpo/CNSrzbod+wv7z 1y4RD9s9bRSSozzc6m+RGDpae9J2ZnOuz42fNPUo2vwlHkvwOFI3oWN9mM4Xt0/f Md5SAkXGSsQLB+RV5zMVtnLqqvzg4nQCFidmmVNSvCu5sXqrKixY8QDKAkDrare3 gSOUb8jQY3kjMEBEAYhXkqMNQ98sJ7exscP53z0+G3MnpDC+779w1aU2Ns2YMx11 j83Z5prGnq1NRsaNF8kItuGI1WkSdIfY5Bt4QSkOpnNqkJ1CSQs+i3f0TNsYyAIU BK6B2mYbY516dPdwLZn6XNtMRorS134= -----END CERTIFICATE-----Generated at Thu Mar 26 14:32:46 2026 by rpki-client