$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa File: 3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa (raw, json) Hash identifier: zeBRWuauVzsDzKL8/Dfy8RDawmL56LNXIiJMp5MrF8w= Subject key identifier: 4D:97:31:D7:A9:C7:0F:87:B5:E7:4F:48:5D:B4:EA:83:10:DE:45:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BCB8A9C8D3BDCA6B0BBFE0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 74.84.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b8:a9:c8:d3:bd:ca:6b:0b:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cb21e507-9e43-4066-ada8-d44fcfe7c164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:6c:71:d3:a6:10:e0:55:2e:b5:28:48:af: 91:a3:a0:bf:48:60:ae:ea:d4:65:4a:d8:92:77:d9: 0f:96:41:6a:22:a6:ef:cf:bd:78:e0:8e:dd:62:9e: e2:41:21:23:d1:ca:34:06:57:c9:cf:25:03:6d:e7: 5f:11:8e:ba:c5:b6:79:a7:0a:c0:96:a1:a5:73:87: 50:08:12:37:06:12:87:4d:66:b3:dd:c1:f5:19:14: 04:95:34:37:24:aa:9a:3f:ce:ec:35:be:ce:14:38: df:71:1d:c0:2b:bf:c7:3e:3e:a1:67:fc:9d:e5:90: 53:58:60:14:14:be:18:0c:ba:8d:55:be:5b:00:2d: e8:dd:54:3c:68:79:08:2c:74:02:8a:19:de:4c:69: 0c:42:26:71:dd:eb:f7:7e:3b:fd:a8:df:97:ab:60: 1b:f6:05:ec:25:44:11:6c:55:79:61:aa:e5:1e:b4: 00:cc:63:35:20:52:20:c6:28:ba:e0:7e:44:a6:9a: 20:07:0b:90:7e:41:f8:e5:d8:67:54:63:15:1b:33: 74:51:bb:50:ad:4f:f8:3d:87:bd:d3:ac:2f:54:4e: 9f:e6:50:d8:07:89:3b:ba:cd:35:f8:1b:ac:a6:ed: 67:77:c2:d1:cc:36:0f:93:de:aa:8e:47:1a:e0:5b: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:97:31:D7:A9:C7:0F:87:B5:E7:4F:48:5D:B4:EA:83:10:DE:45:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3da24f01-ea5a-33ea-b85a-a225cddf2a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:39:f2:3b:28:42:18:6d:d1:05:41:87:c1:97:86:75:75:a6: 95:71:70:95:ba:e9:42:b8:45:10:34:95:9e:5e:dc:55:83:79: 07:04:07:d6:b1:dc:d1:01:f7:dc:c4:8f:20:ce:bf:c3:52:a0: 03:b5:89:51:c6:a9:2e:b5:30:7f:90:9c:42:bb:e2:da:ad:04: c7:e0:34:fa:7e:0f:ca:6f:04:90:d2:23:42:55:cd:84:31:a2: 48:1f:ae:a8:84:15:bb:0a:0f:6a:80:ba:c3:1e:c7:b7:5b:58: 7f:a2:6a:50:29:8a:b1:5d:28:58:31:d9:a4:63:8d:3e:f5:bc: b0:f6:70:07:75:64:15:cb:8c:6d:16:b7:5c:07:50:85:83:01: 2b:f0:3f:03:a8:39:92:ba:ae:e8:60:dc:65:7f:23:59:b6:13: 42:8e:55:b4:87:b7:d2:de:39:58:53:0f:db:ee:86:60:c1:56: 78:68:ba:60:f7:a2:eb:10:f0:ef:99:1a:ad:78:26:fa:85:f3: 70:ff:87:2b:1c:ca:75:71:1c:b1:16:8d:d7:83:e8:19:d2:b2: 47:ce:0e:c9:6c:3a:f8:17:b2:38:83:62:87:9d:96:ab:d5:4a: f8:7b:68:a2:49:a9:01:c3:34:d1:95:3b:cd:cf:e1:71:31:46: 6f:3f:b8:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLipyNO9ymsLv+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2IyMWU1MDctOWU0My00MDY2LWFkYTgtZDQ0ZmNmZTdjMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnJscdOmEOBVLrUoSK+Ro6C/SGCu6tRlStiS d9kPlkFqIqbvz7144I7dYp7iQSEj0co0BlfJzyUDbedfEY66xbZ5pwrAlqGlc4dQ CBI3BhKHTWaz3cH1GRQElTQ3JKqaP87sNb7OFDjfcR3AK7/HPj6hZ/yd5ZBTWGAU FL4YDLqNVb5bAC3o3VQ8aHkILHQCihneTGkMQiZx3ev3fjv9qN+Xq2Ab9gXsJUQR bFV5YarlHrQAzGM1IFIgxii64H5EppogBwuQfkH45dhnVGMVGzN0UbtQrU/4PYe9 06wvVE6f5lDYB4k7us01+Buspu1nd8LRzDYPk96qjkca4FsS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2XMdepxw+HtedPSF206oMQ3kX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RhMjRmMDEtZWE1YS0z M2VhLWI4NWEtYTIyNWNkZGYyYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlR9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo58jsoQhht0QVBh8GXhnV1ppVxcJW66UK4RRA0lZ5e3FWDeQcEB9ax 3NEB99zEjyDOv8NSoAO1iVHGqS61MH+QnEK74tqtBMfgNPp+D8pvBJDSI0JVzYQx okgfrqiEFbsKD2qAusMex7dbWH+ialApirFdKFgx2aRjjT71vLD2cAd1ZBXLjG0W t1wHUIWDASvwPwOoOZK6ruhg3GV/I1m2E0KOVbSHt9LeOVhTD9vuhmDBVnhoumD3 ousQ8O+ZGq14JvqF83D/hyscynVxHLEWjdeD6BnSskfODslsOvgXsjiDYoedlqvV Svh7aKJJqQHDNNGVO83P4XExRm8/uEs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:02 2026 by rpki-client