$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/3440cb5f-1319-3147-b863-7ed8d9d9a1c8.roa File: 3440cb5f-1319-3147-b863-7ed8d9d9a1c8.roa (raw, json) Hash identifier: kmLirBnLIvTw3f6mwQQE2whpZ22oobVHrGIa1gimKQs= Subject key identifier: 68:73:5E:97:AB:E9:88:1C:91:0F:EA:94:70:BE:0F:AE:BF:EE:F8:59 Certificate issuer: /CN=eba568bc-caf4-4df4-8adb-9955051bdf42 Certificate serial: 010D0C9F4328584F7DC67AFE394054FB840EC8C0 Authority key identifier: 30:DE:CF:37:91:F5:66:2C:2A:08:8F:87:CB:11:5B:65:FB:F6:5C:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/3440cb5f-1319-3147-b863-7ed8d9d9a1c8.roa Signing time: Tue 13 Oct 2026 18:51:24 +0000 ROA not before: Tue 13 Oct 2026 18:51:24 +0000 ROA not after: Mon 11 Jan 2027 19:51:24 +0000 asID: 26968 IP address blocks: 74.121.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:c6:7a:fe:39:40:54:fb:84:0e:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eba568bc-caf4-4df4-8adb-9955051bdf42 Validity Not Before: Oct 13 18:51:24 2026 GMT Not After : Jan 11 19:51:24 2027 GMT Subject: CN=578e89aa-c9ed-41c0-bfa8-fbb1b31af306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:76:3c:b4:25:ce:4a:90:6b:e4:1c:48:27: b0:e3:12:ba:c0:d7:38:9f:c1:92:5f:61:f7:35:40: 8f:00:c9:49:90:a8:b5:23:5d:b6:e5:9e:6f:cd:35: 88:65:33:73:2b:c1:7f:8e:c1:f3:16:f9:d9:b8:cc: 82:40:39:51:ec:01:81:17:31:8e:03:a4:93:d1:e7: 97:34:f8:5e:ad:93:55:fc:72:10:0f:26:c9:24:48: b0:b3:c6:e2:92:73:37:6e:51:50:f0:2a:6e:bc:fb: 43:d4:b4:3b:39:64:f3:fe:af:1f:0a:10:c7:4d:f6: 97:9a:ce:a2:c6:d2:9a:cb:4b:2b:ef:71:7d:e2:76: 0e:6f:ab:5e:14:7e:0f:2f:4c:ed:41:cb:4d:b0:69: f4:4a:28:c3:9e:4b:fb:80:e6:40:25:f8:8f:06:cb: b8:cb:61:ed:72:31:42:32:21:72:f6:86:cc:97:48: 28:87:22:4e:59:6c:55:8b:c1:90:d3:98:87:dd:4d: 24:1c:31:0f:a0:c5:19:cd:69:79:b0:00:49:a4:6e: e0:c9:58:fd:11:85:d2:3c:ab:12:6f:6d:29:f7:14: 6e:19:94:80:7e:ae:f6:1c:62:12:e8:7f:d4:24:80: b2:27:df:67:28:8e:6a:6a:c5:af:76:24:82:3f:57: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:73:5E:97:AB:E9:88:1C:91:0F:EA:94:70:BE:0F:AE:BF:EE:F8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/3440cb5f-1319-3147-b863-7ed8d9d9a1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.crl X509v3 Authority Key Identifier: keyid:30:DE:CF:37:91:F5:66:2C:2A:08:8F:87:CB:11:5B:65:FB:F6:5C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer sbgp-ipAddrBlock: critical IPv4: 74.121.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a9:14:58:74:10:c2:44:e0:7e:15:9c:ce:98:17:2f:9d:f1: 53:82:4f:1d:28:78:4f:57:9a:6f:0a:6d:a3:d9:56:9f:c9:04: 11:33:3e:85:1c:df:29:d0:a1:c2:cb:aa:3b:ea:e5:f5:a3:fa: c9:de:1e:a0:1d:30:54:51:de:0b:54:94:86:f1:68:38:02:be: ff:9d:b1:93:45:11:7a:62:6c:c8:a0:a9:a7:76:40:36:45:ea: de:4d:13:e8:2d:8a:8f:54:54:39:ce:b6:ae:6b:b7:c7:70:c2: 94:57:c9:b9:6e:b4:15:13:f7:26:3e:c5:74:b6:cb:a5:9f:c1: 93:65:1c:07:08:9e:4c:03:10:1a:2f:5e:e0:23:42:59:6c:80: 2a:0f:de:a4:98:5d:59:c4:c0:05:c0:00:b0:73:b0:01:ce:c2: cb:33:3b:38:26:9c:34:ce:bd:75:9c:65:1e:b7:11:05:05:89: eb:76:f7:5b:b2:26:70:5c:c5:e5:b9:6d:02:6d:0b:d8:ff:b9: 51:d8:1e:48:f1:ed:a1:c8:61:42:d1:a3:f4:67:06:5d:f3:31: 8a:d7:01:44:10:fd:a4:9b:a0:63:6f:1c:58:57:bd:c6:72:cb: 5f:da:bc:07:5e:8c:79:2c:8e:aa:f4:23:cb:f7:f5:c1:01:db: 91:95:ac:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99xnr+OUBU+4QOyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJhNTY4YmMtY2FmNC00ZGY0LThhZGItOTk1NTA1MWJk ZjQyMB4XDTI2MTAxMzE4NTEyNFoXDTI3MDExMTE5NTEyNFowLzEtMCsGA1UEAxMk NTc4ZTg5YWEtYzllZC00MWMwLWJmYTgtZmJiMWIzMWFmMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdx2PLQlzkqQa+QcSCew4xK6wNc4n8GSX2H3 NUCPAMlJkKi1I1225Z5vzTWIZTNzK8F/jsHzFvnZuMyCQDlR7AGBFzGOA6ST0eeX NPherZNV/HIQDybJJEiws8biknM3blFQ8CpuvPtD1LQ7OWTz/q8fChDHTfaXms6i xtKay0sr73F94nYOb6teFH4PL0ztQctNsGn0SijDnkv7gOZAJfiPBsu4y2HtcjFC MiFy9obMl0gohyJOWWxVi8GQ05iH3U0kHDEPoMUZzWl5sABJpG7gyVj9EYXSPKsS b20p9xRuGZSAfq72HGIS6H/UJICyJ99nKI5qasWvdiSCP1f7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhzXper6YgckQ/qlHC+D66/7vhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9lYmE1 NjhiYy1jYWY0LTRkZjQtOGFkYi05OTU1MDUxYmRmNDIvMzQ0MGNiNWYtMTMxOS0z MTQ3LWI4NjMtN2VkOGQ5ZDlhMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZWJhNTY4YmMtY2FmNC00ZGY0LThh ZGItOTk1NTA1MWJkZjQyL2ViYTU2OGJjLWNhZjQtNGRmNC04YWRiLTk5NTUwNTFi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUMN7PN5H1ZiwqCI+HyxFbZfv2XPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9lYmE1NjhiYy1jYWY0LTRkZjQtOGFkYi05OTU1 MDUxYmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmpFFh0EMJE4H4VnM6YFy+d8VOCTx0oeE9Xmm8KbaPZVp/JBBEzPoUc 3ynQocLLqjvq5fWj+sneHqAdMFRR3gtUlIbxaDgCvv+dsZNFEXpibMigqad2QDZF 6t5NE+gtio9UVDnOtq5rt8dwwpRXyblutBUT9yY+xXS2y6WfwZNlHAcInkwDEBov XuAjQllsgCoP3qSYXVnEwAXAALBzsAHOwsszOzgmnDTOvXWcZR63EQUFiet291uy JnBcxeW5bQJtC9j/uVHYHkjx7aHIYULRo/RnBl3zMYrXAUQQ/aSboGNvHFhXvcZy y1/avAdejHksjqr0I8v39cEB25GVrLc= -----END CERTIFICATE-----Generated at Wed Oct 14 03:13:17 2026 by rpki-client