$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccef8d40-8728-3e04-bd8f-42ec263b656a.roa File: ccef8d40-8728-3e04-bd8f-42ec263b656a.roa (raw, json) Hash identifier: k0tLpeQ/CS00GQaCXyU26D98BWSJ2X6dn4Tzi547WJ8= Subject key identifier: 01:79:FC:01:17:14:D0:96:97:24:E6:1F:47:4B:58:93:9A:3C:03:7B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BCBAE30909EF1E9CAA4C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccef8d40-8728-3e04-bd8f-42ec263b656a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 74.84.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:ba:e3:09:09:ef:1e:9c:aa:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=84e4d961-9a7d-405b-a969-1825a76515bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:78:90:c6:02:85:18:b2:46:43:b9:f2:0d:7c: 25:91:06:fb:95:c2:26:27:38:63:80:8f:2e:2a:6f: 25:9c:b7:15:61:21:5d:2d:c5:71:07:45:7e:7f:3d: 93:4e:b1:6d:f8:23:fb:6d:75:17:1f:77:5e:69:80: 2c:f3:e7:1d:4d:2a:46:cd:17:fc:a8:77:45:61:43: 86:35:eb:93:95:d2:64:2b:d3:f4:42:4c:fd:cb:40: d9:6d:54:7d:5c:58:64:97:f7:82:f3:5b:c3:d8:5a: cd:81:09:4d:64:96:21:8e:2d:d9:38:35:67:05:0f: 6b:b4:13:15:b1:f9:17:d3:de:96:6f:e1:e3:02:43: 5c:4b:11:27:1f:44:e8:40:f7:e1:9d:08:35:5d:df: e6:eb:aa:26:cf:3e:95:fc:2d:f3:4e:bf:a4:60:22: 84:2f:77:de:62:2b:08:a6:bd:a4:2f:01:23:73:2b: dc:06:1c:2a:a2:a4:e0:6f:8e:b8:b2:7f:ff:a0:4d: 4e:5c:99:d4:42:99:e1:bb:bf:13:25:e7:c3:bd:b7: 66:b8:ce:9f:31:c5:d2:00:fc:3b:b1:25:b8:1b:b2: 18:10:04:ee:12:7b:f6:2c:00:4d:a5:d6:d1:20:69: a5:41:67:2d:e4:3f:82:e9:16:68:25:7d:9d:cd:f8: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:FC:01:17:14:D0:96:97:24:E6:1F:47:4B:58:93:9A:3C:03:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccef8d40-8728-3e04-bd8f-42ec263b656a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bc:92:fb:6d:8a:5c:1c:8a:e0:6a:ab:08:cf:3d:97:aa:47: 88:7e:f0:5c:74:f3:e1:55:c8:4f:a4:61:07:c0:f1:cc:f1:57: 4a:a4:bf:e1:57:85:c5:ba:cb:17:2f:d8:0b:a3:7e:62:dc:d7: 03:e8:42:b8:b2:a4:ee:85:1d:43:ec:4b:83:f4:4a:24:0c:1a: 25:d9:b9:e4:e2:96:ba:26:63:6c:5d:b3:78:0b:bd:76:2a:f1: b2:1d:fa:01:72:da:74:ae:65:57:1a:8a:11:51:4e:57:cf:58: 6c:6a:36:44:b6:3d:dd:ae:83:e0:cc:0e:db:ba:19:2d:8d:7e: 6d:ee:7c:96:ca:65:1d:05:d2:4b:cf:f7:57:0e:10:29:4f:c9: ee:6a:ae:af:89:d4:b7:53:7d:87:35:b3:61:96:d0:85:2d:55: e2:bb:d9:76:6e:6f:b7:ba:68:a4:0f:d9:8e:ea:29:e4:af:82: aa:aa:b2:69:56:02:73:7b:0a:1c:5a:fb:5e:b4:a5:6c:2b:0d: c5:4c:66:7c:af:32:34:c8:87:b7:85:1b:d7:60:9c:0f:92:3c: 32:da:fa:16:6f:36:73:8a:4c:8a:d7:13:65:51:f4:59:5d:47: 94:81:ce:dc:3b:5f:d7:f1:6e:63:a6:f9:d3:d5:38:6b:a4:0f: 54:34:d8:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLrjCQnvHpyqTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODRlNGQ5NjEtOWE3ZC00MDViLWE5NjktMTgyNWE3NjUxNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HiQxgKFGLJGQ7nyDXwlkQb7lcImJzhjgI8u Km8lnLcVYSFdLcVxB0V+fz2TTrFt+CP7bXUXH3deaYAs8+cdTSpGzRf8qHdFYUOG NeuTldJkK9P0Qkz9y0DZbVR9XFhkl/eC81vD2FrNgQlNZJYhji3ZODVnBQ9rtBMV sfkX096Wb+HjAkNcSxEnH0ToQPfhnQg1Xd/m66omzz6V/C3zTr+kYCKEL3feYisI pr2kLwEjcyvcBhwqoqTgb464sn//oE1OXJnUQpnhu78TJefDvbdmuM6fMcXSAPw7 sSW4G7IYEATuEnv2LABNpdbRIGmlQWct5D+C6RZoJX2dzfgNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF5/AEXFNCWlyTmH0dLWJOaPAN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2NlZjhkNDAtODcyOC0z ZTA0LWJkOGYtNDJlYzI2M2I2NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm8kvttilwciuBqqwjPPZeqR4h+8Fx08+FVyE+kYQfA8czxV0qkv+FX hcW6yxcv2AujfmLc1wPoQriypO6FHUPsS4P0SiQMGiXZueTilromY2xds3gLvXYq 8bId+gFy2nSuZVcaihFRTlfPWGxqNkS2Pd2ug+DMDtu6GS2Nfm3ufJbKZR0F0kvP 91cOEClPye5qrq+J1LdTfYc1s2GW0IUtVeK72XZub7e6aKQP2Y7qKeSvgqqqsmlW AnN7Chxa+160pWwrDcVMZnyvMjTIh7eFG9dgnA+SPDLa+hZvNnOKTIrXE2VR9Fld R5SBztw7X9fxbmOm+dPVOGukD1Q02IQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:57:44 2026 by rpki-client