$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa File: 70ac99d2-7062-3ad5-a510-3591893e0831.roa (raw, json) Hash identifier: no7cNQuxjNdPx+JQ6L+ePa7agJ5+7sGExmz0I4uK6XU= Subject key identifier: 3D:13:D0:2B:45:87:6A:80:F8:1B:A6:77:90:47:43:28:92:C2:57:42 Certificate issuer: /CN=e04b8478-e14b-4dff-ae0c-707f31960618 Certificate serial: 010D0C9F4328584D3F64D9BCC84D59C3E6F269C0 Authority key identifier: 96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 74.118.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d9:bc:c8:4d:59:c3:e6:f2:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04b8478-e14b-4dff-ae0c-707f31960618 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=5017d2f8-9902-46c7-bd4c-2476e727a43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:32:67:1d:bd:04:f3:73:76:06:c1:92:90: 6a:d8:6d:77:b7:5f:21:5f:e7:30:58:9d:7a:a5:53: bc:03:84:c1:7c:14:cc:b7:fc:c1:2f:33:ba:f0:66: d1:2e:eb:1c:b1:42:45:7c:2a:81:ee:08:7c:3e:da: 6f:2f:b8:c9:1b:08:ef:2f:4a:7c:bb:02:86:29:eb: 19:f1:67:e5:9f:de:16:57:13:01:aa:71:d5:6a:be: da:14:0b:f1:ee:94:2d:bf:03:60:b6:02:fd:79:4a: 15:8f:3a:d3:b5:4f:af:22:00:d3:be:0e:b0:09:44: fb:88:83:7c:ca:49:b8:c8:1f:21:8b:5e:10:a8:4c: a3:53:84:be:68:6e:b2:55:03:bc:51:13:ea:9c:bc: e6:d2:a3:ea:0c:1d:4e:c5:d5:c4:c5:35:f3:db:39: f2:9a:84:7d:50:e6:be:d3:d6:25:31:35:02:61:12: ba:ed:1d:80:11:40:ab:14:e3:07:b0:e6:cf:a6:fd: 0a:56:8d:56:3d:9c:c6:31:2b:fc:e4:a1:3b:ab:87: e0:2b:8a:49:9e:2f:d7:a0:c4:54:22:74:da:18:07: 17:60:0a:e3:ef:62:99:57:df:ff:66:5f:fb:41:1f: d0:a2:9f:48:b4:91:2c:92:d4:9a:09:51:7b:00:56: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:D0:2B:45:87:6A:80:F8:1B:A6:77:90:47:43:28:92:C2:57:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl X509v3 Authority Key Identifier: keyid:96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer sbgp-ipAddrBlock: critical IPv4: 74.118.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:03:38:b6:e7:15:f6:91:56:de:c4:99:01:25:8f:e9:77:45: 2a:c3:cc:0d:79:7f:38:6e:e2:74:b3:55:65:87:11:fd:d6:bc: 49:e5:38:9c:9d:48:52:50:a7:e1:6b:d7:57:e8:1f:5b:c2:2c: f3:a8:b4:6c:7e:c1:39:2d:69:18:92:21:93:5b:a6:bf:d8:a6: a8:32:02:c6:29:4b:86:51:a1:8c:35:fe:a4:6c:8a:c6:59:db: dd:55:c8:4a:a0:d4:19:8b:89:0a:fa:33:10:e5:fa:b5:d4:43: f1:8f:87:69:4f:6c:53:66:ea:7f:b7:63:27:64:ea:d5:97:5e: 5c:82:3c:35:78:6e:70:ec:e8:72:df:f0:0c:ef:5d:a7:c7:e2: 44:61:26:79:d8:a3:9d:67:42:ac:fa:f7:34:ae:68:9c:7f:de: 08:e2:67:c3:3f:83:70:93:f5:2c:66:f0:3c:88:5c:01:06:3a: d5:92:80:b4:b0:71:cb:95:74:71:85:9e:7e:aa:1a:e7:c4:f4: 78:26:6d:a0:f5:56:8d:f6:23:58:88:fc:93:18:3f:cb:62:fb: e3:cd:d9:8b:09:d9:72:1d:2c:ab:ce:d5:27:5b:f6:ff:d4:18: bb:ab:71:d9:ac:bf:84:95:9a:09:0b:2e:ff:bd:76:0a:8d:6f: 03:a3:d1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNm8yE1Zw+byacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0Yjg0NzgtZTE0Yi00ZGZmLWFlMGMtNzA3ZjMxOTYw NjE4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTAxN2QyZjgtOTkwMi00NmM3LWJkNGMtMjQ3NmU3MjdhNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMQyZx29BPNzdgbBkpBq2G13t18hX+cwWJ16 pVO8A4TBfBTMt/zBLzO68GbRLuscsUJFfCqB7gh8PtpvL7jJGwjvL0p8uwKGKesZ 8Wfln94WVxMBqnHVar7aFAvx7pQtvwNgtgL9eUoVjzrTtU+vIgDTvg6wCUT7iIN8 ykm4yB8hi14QqEyjU4S+aG6yVQO8URPqnLzm0qPqDB1OxdXExTXz2znymoR9UOa+ 09YlMTUCYRK67R2AEUCrFOMHsObPpv0KVo1WPZzGMSv85KE7q4fgK4pJni/XoMRU InTaGAcXYArj72KZV9//Zl/7QR/Qop9ItJEsktSaCVF7AFYY1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0T0CtFh2qA+Bumd5BHQyiSwldCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDRi ODQ3OC1lMTRiLTRkZmYtYWUwYy03MDdmMzE5NjA2MTgvNzBhYzk5ZDItNzA2Mi0z YWQ1LWE1MTAtMzU5MTg5M2UwODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA0Yjg0NzgtZTE0Yi00ZGZmLWFl MGMtNzA3ZjMxOTYwNjE4L2UwNGI4NDc4LWUxNGItNGRmZi1hZTBjLTcwN2YzMTk2 MDYxOC5jcmwwHwYDVR0jBBgwFoAUlh3I4+WcqWtr0j3YBMBMK3JTfpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDRiODQ3OC1lMTRiLTRkZmYtYWUwYy03MDdm MzE5NjA2MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkDOLbnFfaRVt7EmQElj+l3RSrDzA15fzhu4nSzVWWHEf3WvEnlOJyd SFJQp+Fr11foH1vCLPOotGx+wTktaRiSIZNbpr/YpqgyAsYpS4ZRoYw1/qRsisZZ 291VyEqg1BmLiQr6MxDl+rXUQ/GPh2lPbFNm6n+3Yydk6tWXXlyCPDV4bnDs6HLf 8AzvXafH4kRhJnnYo51nQqz69zSuaJx/3gjiZ8M/g3CT9Sxm8DyIXAEGOtWSgLSw ccuVdHGFnn6qGufE9HgmbaD1Vo32I1iI/JMYP8ti++PN2YsJ2XIdLKvO1Sdb9v/U GLurcdmsv4SVmgkLLv+9dgqNbwOj0Yc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:49 2026 by rpki-client