$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ed20b83a-ba89-3eab-936e-9e4c13d36e73.roa File: ed20b83a-ba89-3eab-936e-9e4c13d36e73.roa (raw, json) Hash identifier: VWad3HvpjOi7QPvG1OQcqwRKGx7IMINZkL1Eng7TUgU= Subject key identifier: 95:16:0A:32:3A:BD:6B:63:2C:E0:0C:77:4E:A2:AF:92:2D:BB:A3:99 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD442012D4D58430F98F500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ed20b83a-ba89-3eab-936e-9e4c13d36e73.roa Signing time: Fri 25 Sep 2026 12:52:56 +0000 ROA not before: Fri 25 Sep 2026 12:52:56 +0000 ROA not after: Thu 24 Dec 2026 13:52:56 +0000 asID: 6079 IP address blocks: 74.2.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d4:42:01:2d:4d:58:43:0f:98:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:52:56 2026 GMT Not After : Dec 24 13:52:56 2026 GMT Subject: CN=d2f1f120-cdae-463a-ae87-1f6e34a69be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:90:7f:95:a0:84:87:11:61:b0:7e:d6:e4: 5e:c3:bc:e8:e2:41:d9:1d:ef:11:19:38:b6:ba:6e: c3:16:42:ec:23:2d:2f:33:58:b8:ed:9a:ee:8c:1d: e5:75:03:a0:59:0c:2b:5f:7e:cf:c0:31:71:1d:4f: 71:6b:91:ff:5c:60:50:3e:e4:bb:7e:f5:e8:52:7b: 7e:92:2d:6d:a1:81:4d:93:41:2c:c5:c4:f9:55:d8: 63:21:bd:44:70:4b:82:91:1e:a1:98:e2:85:b8:59: ea:d7:7e:92:0c:3c:ae:88:b5:f1:09:a1:cd:12:37: cd:d8:82:98:cf:b5:c1:70:69:9e:42:02:3d:ba:1d: 46:c1:af:47:4f:0c:94:46:29:e6:38:46:15:82:4e: 77:c0:0d:ff:5e:11:86:c0:6d:17:1d:c4:d0:63:3c: 6d:b1:3f:48:63:1f:f5:cf:fe:d6:57:90:c2:70:66: a4:19:d1:22:81:4f:1f:3d:0c:2a:76:85:01:16:1e: 6c:ec:b9:25:ca:95:7d:0a:43:2e:65:e8:2c:cd:6c: c2:b7:44:d5:f4:ad:48:09:aa:e8:87:32:2c:15:e7: b5:f6:e5:0d:9c:45:56:db:1e:d8:84:da:d0:ac:27: ea:16:d2:80:1c:15:2e:c4:61:89:e6:ca:d8:e1:5e: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:16:0A:32:3A:BD:6B:63:2C:E0:0C:77:4E:A2:AF:92:2D:BB:A3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ed20b83a-ba89-3eab-936e-9e4c13d36e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:47:23:59:a9:64:7b:ba:fb:7f:23:2a:7d:d7:b2:9a:0d:3d: e7:54:1e:39:17:93:56:60:45:ef:31:14:06:53:6b:a2:cc:68: 81:d0:77:41:3a:b1:fa:eb:71:2e:77:f7:6d:ec:72:a9:ad:78: 18:27:70:91:c7:5f:fd:36:bc:23:17:54:59:41:66:19:ec:ca: 5b:d9:66:c5:7d:dd:42:4a:ff:c0:a6:65:7d:9f:38:a4:9e:bb: 89:76:a9:99:ab:94:e0:03:4e:6d:51:c0:27:29:82:6c:08:31: 21:35:93:57:b3:4c:37:44:26:41:fb:39:bd:1b:89:3c:0d:1f: d5:9b:28:d5:56:d4:f7:71:d9:b7:1d:40:f5:37:31:38:14:f6: 23:ea:b4:77:34:1e:93:b2:c4:30:9a:69:75:ea:2d:7a:58:49: 32:f5:34:91:6f:d1:6c:92:d6:aa:80:62:3a:dd:79:70:97:9f: a8:f2:7b:ea:46:3e:b3:b0:85:c6:d1:6c:34:e2:dd:84:35:d9: 36:da:bd:1a:09:10:3d:27:7b:ad:2a:de:d4:74:9f:4a:a4:e0: 2b:bc:8b:41:c7:b5:92:14:ed:0a:0e:0c:bd:b2:eb:e6:f0:1c: d9:1e:3d:c4:7e:72:62:51:63:57:e6:b0:8a:43:ca:35:99:90: 5b:d2:95:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1EIBLU1YQw+Y9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTI1NloXDTI2MTIyNDEzNTI1NlowLzEtMCsGA1UEAxMk ZDJmMWYxMjAtY2RhZS00NjNhLWFlODctMWY2ZTM0YTY5YmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig+Qf5WghIcRYbB+1uRew7zo4kHZHe8RGTi2 um7DFkLsIy0vM1i47ZrujB3ldQOgWQwrX37PwDFxHU9xa5H/XGBQPuS7fvXoUnt+ ki1toYFNk0EsxcT5VdhjIb1EcEuCkR6hmOKFuFnq136SDDyuiLXxCaHNEjfN2IKY z7XBcGmeQgI9uh1Gwa9HTwyURinmOEYVgk53wA3/XhGGwG0XHcTQYzxtsT9IYx/1 z/7WV5DCcGakGdEigU8fPQwqdoUBFh5s7LklypV9CkMuZegszWzCt0TV9K1ICaro hzIsFee19uUNnEVW2x7YhNrQrCfqFtKAHBUuxGGJ5srY4V405wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUWCjI6vWtjLOAMd06ir5Itu6OZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWQyMGI4M2EtYmE4OS0z ZWFiLTkzNmUtOWU0YzEzZDM2ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlHI1mpZHu6+38jKn3XspoNPedUHjkXk1ZgRe8xFAZTa6LMaIHQd0E6 sfrrcS53923scqmteBgncJHHX/02vCMXVFlBZhnsylvZZsV93UJK/8CmZX2fOKSe u4l2qZmrlOADTm1RwCcpgmwIMSE1k1ezTDdEJkH7Ob0biTwNH9WbKNVW1Pdx2bcd QPU3MTgU9iPqtHc0HpOyxDCaaXXqLXpYSTL1NJFv0WyS1qqAYjrdeXCXn6jye+pG PrOwhcbRbDTi3YQ12TbavRoJED0ne60q3tR0n0qk4Cu8i0HHtZIU7QoODL2y6+bw HNkePcR+cmJRY1fmsIpDyjWZkFvSlU4= -----END CERTIFICATE-----Generated at Mon Sep 28 19:28:49 2026 by rpki-client