$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/353a0b77-917f-3c34-885e-a1c22ef38c7d.roa File: 353a0b77-917f-3c34-885e-a1c22ef38c7d.roa (raw, json) Hash identifier: xhlfb2QkTC8WldSikxwrR588AugIYBAULHJ3wWD0hU4= Subject key identifier: F7:B1:8D:76:6F:75:FF:19:78:33:5C:A1:29:07:6C:52:6F:1A:70:1D Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584DA8157622FC42F4E7127C85C0 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/353a0b77-917f-3c34-885e-a1c22ef38c7d.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 63399 IP address blocks: 209.127.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:76:22:fc:42:f4:e7:12:7c:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=c9991d15-afc6-4079-bb37-42e780fd1e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:1f:d8:50:ae:e9:78:e6:f1:fe:06:06:74: db:e2:70:5d:f7:7d:88:83:be:df:10:8c:df:e1:02: 7f:59:f7:02:0b:57:b5:bd:34:91:13:32:78:31:fa: 9e:f4:c5:66:a4:89:c4:cf:82:50:7c:32:a3:af:c9: 07:d9:37:7f:fd:43:3a:30:e0:ab:db:38:c2:b5:16: 98:d3:11:3e:78:2f:14:fc:ce:73:60:60:6a:97:0e: a2:8a:fb:ac:0e:c1:0d:6f:56:a4:2c:48:8e:dc:ad: 7e:cd:b3:13:cd:bf:a4:a3:7b:0c:58:9b:31:e0:8d: 9a:0c:e3:2e:af:94:65:eb:67:36:a6:d9:2a:95:09: dc:65:0b:f2:f5:65:8d:81:b3:94:3a:8c:7a:be:0e: 83:e7:8d:74:6a:6e:92:90:0b:46:8b:3f:dc:08:8f: b4:4b:4f:a4:10:54:ed:ed:2c:84:85:60:55:4e:7f: b5:bc:bf:4d:60:00:87:d0:8a:09:40:1e:6e:ef:98: 00:05:2d:85:7c:0f:94:be:1a:4d:05:10:93:a8:f9: 48:a3:3b:48:7e:37:f5:b6:49:17:2e:a8:37:c5:59: 47:76:26:dd:da:bd:f2:52:d2:36:82:6d:40:4a:aa: 86:65:02:ef:d2:b4:43:23:4d:0a:4c:c6:46:df:88: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:8D:76:6F:75:FF:19:78:33:5C:A1:29:07:6C:52:6F:1A:70:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/353a0b77-917f-3c34-885e-a1c22ef38c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 209.127.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e7:73:38:e0:bf:af:fc:cc:4c:72:60:78:04:b5:7e:20:5e: db:4f:56:38:52:cc:66:49:cc:ff:ae:a6:6d:0a:56:d3:b1:17: 85:7b:04:77:e8:f9:88:6b:dd:d2:e9:6a:2d:7a:f5:fd:a8:4a: fa:c1:95:89:23:7f:b3:b3:a2:b1:74:6d:34:e5:34:53:ba:3a: 0e:11:31:9f:02:70:d5:23:31:4c:a3:90:2a:24:df:2d:12:e5: 19:1f:5e:1a:d7:1c:db:b1:a6:b5:9a:fe:34:4d:7a:a7:0f:5d: d9:61:4e:64:03:fd:6e:67:4c:23:93:4c:d6:01:86:46:3b:75: 3c:61:ee:9e:97:fb:5a:5f:7f:24:92:59:99:eb:d1:16:25:48: 48:ef:ed:c1:d2:06:81:e4:4b:29:35:43:c3:34:f5:03:f2:b9: 9f:5a:d4:72:ea:13:8b:08:0e:da:2e:bd:7b:4f:19:cc:85:e2: 74:46:0e:81:fd:30:49:24:15:6a:ef:08:b6:91:ab:e0:20:48: 2e:9e:2f:3a:1a:8c:5a:f7:13:1b:05:6e:17:33:94:bd:3c:cf: ae:2a:d7:d1:9c:ec:d3:eb:96:c2:83:f9:bf:75:aa:09:5b:ed: 2c:34:98:64:7c:78:26:ed:0a:d8:09:20:fd:65:9b:33:d9:78: c0:0f:9f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXYi/EL05xJ8hcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk Yzk5OTFkMTUtYWZjNi00MDc5LWJiMzctNDJlNzgwZmQxZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzAf2FCu6Xjm8f4GBnTb4nBd932Ig77fEIzf 4QJ/WfcCC1e1vTSREzJ4Mfqe9MVmpInEz4JQfDKjr8kH2Td//UM6MOCr2zjCtRaY 0xE+eC8U/M5zYGBqlw6iivusDsENb1akLEiO3K1+zbMTzb+ko3sMWJsx4I2aDOMu r5Rl62c2ptkqlQncZQvy9WWNgbOUOox6vg6D5410am6SkAtGiz/cCI+0S0+kEFTt 7SyEhWBVTn+1vL9NYACH0IoJQB5u75gABS2FfA+UvhpNBRCTqPlIoztIfjf1tkkX Lqg3xVlHdibd2r3yUtI2gm1ASqqGZQLv0rRDI00KTMZG34irAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPexjXZvdf8ZeDNcoSkHbFJvGnAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvMzUzYTBiNzctOTE3Zi0z YzM0LTg4NWUtYTFjMjJlZjM4YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0X9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbnczjgv6/8zExyYHgEtX4gXttPVjhSzGZJzP+upm0KVtOxF4V7BHfo +Yhr3dLpai169f2oSvrBlYkjf7OzorF0bTTlNFO6Og4RMZ8CcNUjMUyjkCok3y0S 5RkfXhrXHNuxprWa/jRNeqcPXdlhTmQD/W5nTCOTTNYBhkY7dTxh7p6X+1pffySS WZnr0RYlSEjv7cHSBoHkSyk1Q8M09QPyuZ9a1HLqE4sIDtouvXtPGcyF4nRGDoH9 MEkkFWrvCLaRq+AgSC6eLzoajFr3ExsFbhczlL08z64q19Gc7NPrlsKD+b91qglb 7Sw0mGR8eCbtCtgJIP1lmzPZeMAPn9c= -----END CERTIFICATE-----Generated at Wed May 13 08:57:51 2026 by rpki-client