$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d0979e5f-c842-3c12-a862-11df9ac5af79.roa File: d0979e5f-c842-3c12-a862-11df9ac5af79.roa (raw, json) Hash identifier: VuNBbxwfskgO995qeIWib3QeaEB0Y6j0x8Vn4K2hgU8= Subject key identifier: 56:75:CC:20:C1:8B:FE:60:82:DF:C7:99:02:D1:15:0B:DC:FE:ED:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F2957AD82A293EF34E4C5AA40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d0979e5f-c842-3c12-a862-11df9ac5af79.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 834 IP address blocks: 74.0.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:ad:82:a2:93:ef:34:e4:c5:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=693dbc5b-c259-430f-b470-1562914881d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:f4:75:2b:57:a7:93:cb:a9:d5:bf:78:1a: 7e:8e:93:96:a5:0f:07:c2:44:db:47:f4:57:38:cc: 77:6b:56:56:d7:98:3a:e8:d3:0f:a8:5e:3f:35:e1: 12:19:49:8d:dd:fc:7b:75:e5:ab:d2:e9:46:c7:de: ee:6f:a4:78:e7:a1:74:28:2f:8f:76:d6:af:c1:21: 1d:11:c0:0a:ae:68:ea:0f:79:96:d9:33:cb:42:c3: 7a:31:4e:9d:55:02:56:e5:9f:d7:88:9d:44:7f:1a: 90:75:d7:fd:7e:25:3d:9e:35:21:51:c4:2a:35:61: 2d:96:97:fb:70:19:e0:d4:10:30:19:cd:01:98:1b: 87:14:77:e8:e5:30:71:44:78:0f:04:79:24:0b:d8: d4:89:48:b5:0f:23:81:41:8e:2e:5c:f2:ba:e1:99: 63:1d:a9:4b:7b:17:ca:52:4d:a6:cd:72:11:a1:7d: 9b:84:ec:34:7a:0d:bf:df:2a:6b:b6:8d:d4:ec:77: 0d:ff:90:fa:f3:96:f6:5e:d9:45:6a:54:2e:3a:cb: a7:43:04:e9:dc:f0:75:65:9f:ac:83:80:c7:22:41: cb:2d:30:76:79:a6:a0:01:68:48:fe:43:6d:16:64: 21:71:5e:1b:74:5c:2b:96:3d:af:92:03:23:0b:3a: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:75:CC:20:C1:8B:FE:60:82:DF:C7:99:02:D1:15:0B:DC:FE:ED:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d0979e5f-c842-3c12-a862-11df9ac5af79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:b0:27:89:4a:4f:db:21:78:31:30:6d:bb:be:a6:d8:12:b9: ae:aa:10:ef:8b:8c:12:71:64:c3:fe:36:8b:89:74:45:10:65: d9:90:4a:8e:8d:56:09:a6:41:da:49:cb:de:74:f7:c9:d9:b9: b8:35:92:b9:a7:37:07:bc:be:dc:ad:7c:a1:2d:31:a1:ff:21: cc:f4:a1:c3:7c:d0:e2:ea:b9:3a:a3:8c:62:8c:d1:42:10:b7: 5d:9a:5f:bf:cc:af:50:81:92:e3:e5:66:e3:aa:20:f4:92:af: d6:69:6a:f3:0a:40:97:55:f2:f3:e3:39:88:a8:1a:f8:e1:02: 80:67:aa:fb:03:19:48:63:7c:02:73:17:b1:da:03:f4:99:be: 3a:15:df:47:29:d7:58:87:ab:84:7f:33:0c:76:9c:36:8d:30: 9a:88:cc:77:53:0f:db:af:3b:46:de:fa:18:5b:23:61:0f:6a: 39:79:81:6b:b4:5d:69:c3:c8:de:4d:9f:92:ee:c7:40:50:6b: b6:c2:2d:6d:95:4b:1b:a3:9b:7f:77:bb:90:ec:b5:2a:0d:11: a6:16:41:fb:84:dd:57:3d:a5:14:22:90:a9:61:94:f9:4f:2e: 62:e6:65:cd:01:94:97:96:85:9c:c9:f5:6d:ab:f7:6f:cd:4f: 35:18:ff:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV62CopPvNOTFqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NjkzZGJjNWItYzI1OS00MzBmLWI0NzAtMTU2MjkxNDg4MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryr0dStXp5PLqdW/eBp+jpOWpQ8HwkTbR/RX OMx3a1ZW15g66NMPqF4/NeESGUmN3fx7deWr0ulGx97ub6R456F0KC+PdtavwSEd EcAKrmjqD3mW2TPLQsN6MU6dVQJW5Z/XiJ1EfxqQddf9fiU9njUhUcQqNWEtlpf7 cBng1BAwGc0BmBuHFHfo5TBxRHgPBHkkC9jUiUi1DyOBQY4uXPK64ZljHalLexfK Uk2mzXIRoX2bhOw0eg2/3yprto3U7HcN/5D685b2XtlFalQuOsunQwTp3PB1ZZ+s g4DHIkHLLTB2eaagAWhI/kNtFmQhcV4bdFwrlj2vkgMjCzpn7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ1zCDBi/5ggt/HmQLRFQvc/u3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDA5NzllNWYtYzg0Mi0z YzEyLWE4NjItMTFkZjlhYzVhZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALywJ4lKT9sheDEwbbu+ptgSua6qEO+LjBJxZMP+NouJdEUQZdmQSo6N VgmmQdpJy95098nZubg1krmnNwe8vtytfKEtMaH/Icz0ocN80OLquTqjjGKM0UIQ t12aX7/Mr1CBkuPlZuOqIPSSr9ZpavMKQJdV8vPjOYioGvjhAoBnqvsDGUhjfAJz F7HaA/SZvjoV30cp11iHq4R/Mwx2nDaNMJqIzHdTD9uvO0be+hhbI2EPajl5gWu0 XWnDyN5Nn5Lux0BQa7bCLW2VSxujm393u5DstSoNEaYWQfuE3Vc9pRQikKlhlPlP LmLmZc0BlJeWhZzJ9W2r92/NTzUY/yA= -----END CERTIFICATE-----Generated at Thu Oct 1 21:49:44 2026 by rpki-client