$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fa8229e2-38a4-329b-b927-1bc590792c64.roa File: fa8229e2-38a4-329b-b927-1bc590792c64.roa (raw, json) Hash identifier: jqIaFXyBzhIcemTJ2feCBMrWLaT9xSpMDEu7/TR/5Kw= Subject key identifier: D9:9A:F4:D6:33:67:7C:8E:66:5F:C6:BE:7D:7B:B7:B4:C2:8B:33:4C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EFB47631C2D0955FDD3CE3400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fa8229e2-38a4-329b-b927-1bc590792c64.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 137830 IP address blocks: 74.2.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:63:1c:2d:09:55:fd:d3:ce:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=79b016f3-03dd-476e-86ef-36f282875cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:9c:af:b9:a3:e1:4e:8a:5c:42:3f:08:8f: 2a:02:f2:61:4c:f6:c6:47:b6:a2:f6:0b:2d:f6:bf: f9:bd:3a:fa:2d:1b:a5:d2:3a:30:a2:b7:15:e8:9f: 63:3a:ec:9a:e2:6a:85:ab:c5:fa:34:1a:d3:f0:87: 57:15:52:47:5a:1d:98:5c:4e:2a:75:37:49:e8:33: 5f:05:76:7b:ce:4c:88:30:a8:cc:0a:1f:31:c5:e5: b7:c7:d6:ed:fc:b8:16:34:81:8a:61:7d:b2:7f:1b: cd:08:2d:6b:f8:eb:06:f2:51:fb:d7:4e:a9:9d:9f: ad:a4:31:16:45:51:59:87:22:1c:5c:e9:a0:e1:01: 14:5b:75:af:2b:d8:a1:63:bd:93:73:d9:92:05:fa: b8:17:fa:c0:74:63:f4:e6:7b:d2:57:f1:9a:ee:a5: 44:dd:35:3e:a0:f4:fb:19:29:2d:73:cf:23:2d:be: 02:5b:43:58:06:ca:27:8f:54:97:58:b7:2f:fa:33: e1:27:bc:c9:8d:f5:8f:66:3c:1b:8e:58:72:50:b3: 03:ed:a3:18:91:38:f1:53:98:18:d5:ab:c2:97:85: 77:2c:1b:ac:2c:68:42:50:00:f1:ef:c4:6e:b5:f2: a2:4d:bf:0d:8f:af:f9:41:35:5d:11:d5:c8:46:8f: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:F4:D6:33:67:7C:8E:66:5F:C6:BE:7D:7B:B7:B4:C2:8B:33:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fa8229e2-38a4-329b-b927-1bc590792c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:03:49:11:25:e1:18:d6:cd:77:df:5d:af:81:52:f1:9c:ac: d7:c6:13:ae:58:41:81:d5:7d:73:7e:4d:a7:fb:e4:a0:ea:8d: 72:6f:3d:65:1a:4f:5e:1c:9c:d9:d2:cf:62:8f:3d:ce:b1:b2: 92:fb:c7:43:bb:5d:84:78:bb:10:3b:22:24:a6:32:22:06:cb: 79:8a:5b:ac:14:cc:65:5d:2b:c3:ba:0c:e6:11:4c:6c:5f:a3: 36:2e:f8:77:14:66:9d:6b:e0:0d:93:98:55:78:ac:55:e1:4e: bc:49:ce:4f:96:e9:83:0d:1d:37:5c:e2:56:44:f5:84:f5:16: e6:41:21:ea:ec:1c:bf:4f:3e:a8:bb:76:8a:e2:a8:43:af:d0: 28:0a:64:b5:e5:0f:1f:2f:79:f8:02:6a:a1:8f:d8:eb:a6:2c: b9:81:0e:8a:e9:73:6d:23:da:2a:ea:86:ad:2f:2f:0c:3c:16: 17:13:c5:e7:c0:84:82:01:6f:fc:f2:09:2d:4a:11:67:10:a8: e4:20:9d:f8:6d:ba:23:53:af:81:a7:17:21:9c:c7:27:d4:61: 96:19:69:ab:a0:ea:b1:c2:47:6d:e3:e5:bb:84:5f:bf:09:b5: e3:b8:ce:27:db:5c:b4:1e:43:d8:2f:50:36:a2:bc:22:63:e9: af:76:b9:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2McLQlV/dPONAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk NzliMDE2ZjMtMDNkZC00NzZlLTg2ZWYtMzZmMjgyODc1Y2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnacr7mj4U6KXEI/CI8qAvJhTPbGR7ai9gst 9r/5vTr6LRul0joworcV6J9jOuya4mqFq8X6NBrT8IdXFVJHWh2YXE4qdTdJ6DNf BXZ7zkyIMKjMCh8xxeW3x9bt/LgWNIGKYX2yfxvNCC1r+OsG8lH7106pnZ+tpDEW RVFZhyIcXOmg4QEUW3WvK9ihY72Tc9mSBfq4F/rAdGP05nvSV/Ga7qVE3TU+oPT7 GSktc88jLb4CW0NYBsonj1SXWLcv+jPhJ7zJjfWPZjwbjlhyULMD7aMYkTjxU5gY 1avCl4V3LBusLGhCUADx78RutfKiTb8Nj6/5QTVdEdXIRo9cjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNma9NYzZ3yOZl/Gvn17t7TCizNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmE4MjI5ZTItMzhhNC0z MjliLWI5MjctMWJjNTkwNzkyYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcDSREl4RjWzXffXa+BUvGcrNfGE65YQYHVfXN+Taf75KDqjXJvPWUa T14cnNnSz2KPPc6xspL7x0O7XYR4uxA7IiSmMiIGy3mKW6wUzGVdK8O6DOYRTGxf ozYu+HcUZp1r4A2TmFV4rFXhTrxJzk+W6YMNHTdc4lZE9YT1FuZBIersHL9PPqi7 doriqEOv0CgKZLXlDx8vefgCaqGP2OumLLmBDorpc20j2irqhq0vLww8FhcTxefA hIIBb/zyCS1KEWcQqOQgnfhtuiNTr4GnFyGcxyfUYZYZaaug6rHCR23j5buEX78J teO4zifbXLQeQ9gvUDaivCJj6a92uRY= -----END CERTIFICATE-----Generated at Thu Oct 8 13:51:54 2026 by rpki-client