$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa File: cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa (raw, json) Hash identifier: L3CkkwUVGC3BNMNqCFqVhXC6aF5olXSY325hw+2rlUM= Subject key identifier: 0E:3B:A1:E7:D9:42:0E:6D:25:65:5F:77:A1:58:DE:09:5A:F3:85:8A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BA2EF14861C560D059EB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 74.84.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:2e:f1:48:61:c5:60:d0:59:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8438fd29-d94a-4913-aa16-45eb9a60d72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:42:a3:61:0d:a3:24:2c:f3:2e:09:51:e7: 84:77:d7:ed:d9:d9:94:24:f1:61:26:78:04:75:90: ca:bb:dd:08:b3:ba:c0:61:72:74:47:43:17:77:66: 36:34:f9:6c:16:7a:66:0c:85:d7:a1:66:49:5c:78: 61:27:09:8d:8a:0b:01:e5:a5:b6:ea:7f:3e:4d:6c: c0:4e:9f:71:a0:d3:84:83:13:e4:b3:47:a3:3e:34: d4:50:eb:c2:0f:eb:98:80:e7:c5:9e:8a:ca:3e:7a: af:e1:b4:c3:dc:8c:8d:66:ad:a9:91:40:17:93:bb: cb:c2:ac:5f:87:74:ae:b7:7d:32:d2:be:65:cf:57: 6d:99:54:1a:a9:0f:02:19:fe:79:77:b6:4e:8c:c0: bf:23:3a:b3:3e:54:58:bb:15:cc:c5:57:d2:7b:30: c2:01:a3:3a:7d:b3:c7:62:c9:4e:04:74:6d:a9:0d: 38:50:25:6c:6d:2e:19:7c:cf:d8:b8:66:66:22:7a: 29:2d:5a:93:c3:11:1f:93:df:60:a3:2d:91:fb:43: 44:34:0d:83:f5:f8:c3:45:13:b3:1e:48:6a:08:69: 76:38:23:46:3b:03:82:9d:f3:5d:35:1c:4e:e5:11: 67:dd:41:7e:51:cf:fd:70:ba:00:42:10:10:2d:83: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3B:A1:E7:D9:42:0E:6D:25:65:5F:77:A1:58:DE:09:5A:F3:85:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cdef2195-aa63-30c6-be19-81fd4e63b1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:fa:a9:a0:0f:0a:35:b3:41:8e:f6:19:2b:0d:d5:92:b3:b2: a1:6d:77:20:6f:6a:da:32:29:7b:ad:26:74:2d:08:ba:d1:fb: 87:fc:d3:5a:7d:7b:a4:16:2c:30:55:7c:4b:10:8d:a8:c5:99: 13:b2:c9:d0:8f:0b:68:ae:77:d6:b1:bd:8b:f0:ca:fa:a5:24: f3:51:b6:5a:70:c6:02:b1:d8:d7:d9:a2:2a:7f:0e:6f:d0:3a: 05:9f:43:a7:97:b5:f5:f8:ec:94:5a:71:b6:2e:fc:a2:00:bc: 57:dc:ca:a4:e6:42:8c:84:c3:7c:e6:13:2b:d1:1c:70:cf:b5: 9f:94:0a:3f:65:77:90:71:81:2e:5b:9a:ed:d2:0e:68:57:9b: 76:6f:b2:ce:29:70:45:95:a3:38:be:8a:12:6b:fe:f9:d5:49: 26:ac:60:59:7a:98:a2:3e:22:a2:44:c9:25:3f:fc:06:4c:32: 7f:ca:c3:41:bb:7f:37:d8:6f:8d:61:56:47:e2:77:40:c2:32: 93:ff:db:6e:a4:57:fc:12:6e:01:d2:6d:8b:a4:26:51:1b:e7: d1:49:0a:2d:e6:93:cc:ef:26:95:25:c8:fd:e6:1a:b6:e5:29: f8:20:54:2c:97:13:84:26:64:b0:ff:ac:58:95:54:9e:ff:cc: 0f:1f:5e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vui7xSGHFYNBZ6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODQzOGZkMjktZDk0YS00OTEzLWFhMTYtNDVlYjlhNjBkNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR9Co2ENoyQs8y4JUeeEd9ft2dmUJPFhJngE dZDKu90Is7rAYXJ0R0MXd2Y2NPlsFnpmDIXXoWZJXHhhJwmNigsB5aW26n8+TWzA Tp9xoNOEgxPks0ejPjTUUOvCD+uYgOfFnorKPnqv4bTD3IyNZq2pkUAXk7vLwqxf h3Sut30y0r5lz1dtmVQaqQ8CGf55d7ZOjMC/IzqzPlRYuxXMxVfSezDCAaM6fbPH YslOBHRtqQ04UCVsbS4ZfM/YuGZmInopLVqTwxEfk99goy2R+0NENA2D9fjDRROz HkhqCGl2OCNGOwOCnfNdNRxO5RFn3UF+Uc/9cLoAQhAQLYPG1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA47oefZQg5tJWVfd6FY3gla84WKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2RlZjIxOTUtYWE2My0z MGM2LWJlMTktODFmZDRlNjNiMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb6qaAPCjWzQY72GSsN1ZKzsqFtdyBvatoyKXutJnQtCLrR+4f801p9 e6QWLDBVfEsQjajFmROyydCPC2iud9axvYvwyvqlJPNRtlpwxgKx2NfZoip/Dm/Q OgWfQ6eXtfX47JRacbYu/KIAvFfcyqTmQoyEw3zmEyvRHHDPtZ+UCj9ld5BxgS5b mu3SDmhXm3Zvss4pcEWVozi+ihJr/vnVSSasYFl6mKI+IqJEySU//AZMMn/Kw0G7 fzfYb41hVkfid0DCMpP/226kV/wSbgHSbYukJlEb59FJCi3mk8zvJpUlyP3mGrbl KfggVCyXE4QmZLD/rFiVVJ7/zA8fXvw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:22 2026 by rpki-client