$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/a0c9abd3-ad95-3318-9bae-d90ac27f5096.roa File: a0c9abd3-ad95-3318-9bae-d90ac27f5096.roa (raw, json) Hash identifier: 2J+AZmNuYlKNZO3hbuiXUJcISqJY+Cm34gS1+FyVWSk= Subject key identifier: ED:CB:6E:3B:D5:FF:72:4A:FC:59:52:5A:9C:A1:C3:B3:69:DE:DC:39 Certificate issuer: /CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Certificate serial: 010D0C9F4328584F31B7CEE9DEDE5EF0857B1980 Authority key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/a0c9abd3-ad95-3318-9bae-d90ac27f5096.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 53820 IP address blocks: 74.114.16.0/21 maxlen: 21 165.140.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:ce:e9:de:de:5e:f0:85:7b:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=8fefafea-836c-4d11-9b8f-84fa81090ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1a:67:01:30:21:c8:7f:21:b2:72:99:70:9a: b7:40:ab:e2:61:f8:1c:96:11:8c:dd:b4:2c:5c:e3: 43:e0:ae:35:d2:bb:02:ac:bc:01:ff:ad:c8:90:d2: 96:33:a8:93:da:29:d2:3a:f0:f5:46:35:0d:53:d5: 0d:88:74:61:80:8f:a0:89:97:d2:37:0d:4d:17:fa: 82:52:42:80:03:38:1f:a5:4d:ed:41:1d:55:2d:55: 49:b7:06:0f:53:67:af:5e:29:49:72:ec:78:20:9c: 57:19:0d:0f:2c:cf:ea:7a:d4:33:d6:c0:63:08:78: 4d:d9:d2:88:e5:cd:f5:c0:c4:40:0a:5e:fb:53:7f: 8f:96:9a:9a:e0:c6:de:16:6b:6a:e5:39:82:59:3a: c7:13:55:57:98:c6:62:2d:cc:1b:92:97:60:89:ad: 10:14:02:e9:de:81:5d:92:f7:bc:20:39:48:cb:dd: a9:b1:93:c7:ee:6f:fc:59:1c:81:6d:f2:40:92:c0: 85:79:9b:eb:58:22:b6:09:00:7c:ff:2a:45:03:6e: 98:7a:37:90:26:d7:44:73:0f:a2:eb:f1:29:4a:b1: 1d:2f:f9:3c:ed:ca:f3:db:2d:08:f8:83:9d:d9:9a: 75:8c:7a:c2:5e:a7:92:10:ce:c7:ea:37:e0:74:39: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:6E:3B:D5:FF:72:4A:FC:59:52:5A:9C:A1:C3:B3:69:DE:DC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/a0c9abd3-ad95-3318-9bae-d90ac27f5096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl X509v3 Authority Key Identifier: keyid:EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer sbgp-ipAddrBlock: critical IPv4: 74.114.16.0/21 165.140.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:93:fa:dd:8c:0b:dc:e4:10:39:0b:e5:b3:0b:52:6a:25:16: 3a:54:83:49:5f:cb:37:c7:31:a5:13:5d:60:85:b7:51:39:c5: 29:46:ce:5d:a8:65:85:b1:5c:28:03:59:b6:b6:2a:b7:43:0b: 4c:7e:28:19:1b:14:8d:9e:a0:a3:5b:89:68:ac:de:75:65:bc: 97:28:59:3d:35:f5:da:d6:be:c2:96:c9:4d:4d:22:9b:fe:99: c5:67:e0:05:fb:94:f3:7b:73:76:a4:fb:82:a0:df:5e:42:77: b9:5e:55:39:a1:16:66:7a:5b:85:a9:75:a0:75:80:8d:c6:3c: 57:64:21:5c:18:25:79:3b:c0:77:ec:63:1b:c8:fe:e0:8a:1d: a6:2c:21:8f:41:5d:7e:9d:fa:7e:32:6e:c1:87:af:1b:7d:9c: 77:d7:ad:e7:f1:07:dc:7c:ca:69:0a:d9:5f:84:00:4f:64:37: a2:b7:93:84:30:bf:dc:29:c0:f7:da:15:74:d3:b0:7c:8a:70: 62:5b:3d:9f:98:40:47:93:24:54:cc:f0:81:af:2d:49:7a:ef: 8c:6c:c3:98:21:b7:43:ed:26:08:79:1d:48:c0:52:0c:83:71: 9e:54:10:30:15:8f:2e:5f:ab:7f:65:58:be:7e:8d:a2:5d:d6: e2:cc:ea:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8xt87p3t5e8IV7GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiNjIwZGMtOGEyZS00ZTk3LWIzY2QtZjk1ZjgzMTdi ZGVmMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OGZlZmFmZWEtODM2Yy00ZDExLTliOGYtODRmYTgxMDkwZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBpnATAhyH8hsnKZcJq3QKviYfgclhGM3bQs XOND4K410rsCrLwB/63IkNKWM6iT2inSOvD1RjUNU9UNiHRhgI+giZfSNw1NF/qC UkKAAzgfpU3tQR1VLVVJtwYPU2evXilJcux4IJxXGQ0PLM/qetQz1sBjCHhN2dKI 5c31wMRACl77U3+Plpqa4MbeFmtq5TmCWTrHE1VXmMZiLcwbkpdgia0QFALp3oFd kve8IDlIy92psZPH7m/8WRyBbfJAksCFeZvrWCK2CQB8/ypFA26YejeQJtdEcw+i 6/EpSrEdL/k87crz2y0I+IOd2Zp1jHrCXqeSEM7H6jfgdDke8QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO3LbjvV/3JK/FlSWpyhw7Np3tw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWI2 MjBkYy04YTJlLTRlOTctYjNjZC1mOTVmODMxN2JkZWYvYTBjOWFiZDMtYWQ5NS0z MzE4LTliYWUtZDkwYWMyN2Y1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGFiNjIwZGMtOGEyZS00ZTk3LWIz Y2QtZjk1ZjgzMTdiZGVmLzRhYjYyMGRjLThhMmUtNGU5Ny1iM2NkLWY5NWY4MzE3 YmRlZi5jcmwwHwYDVR0jBBgwFoAU6uo04wo5tOnabHctXSweBmjmsPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80YWI2MjBkYy04YTJlLTRlOTctYjNjZC1mOTVm ODMxN2JkZWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSnIQAwQC pYysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABKT+t2MC9zkEDkL5bMLUmolFjpUg0lfyzfHMaUTXWCFt1E5 xSlGzl2oZYWxXCgDWba2KrdDC0x+KBkbFI2eoKNbiWis3nVlvJcoWT019drWvsKW yU1NIpv+mcVn4AX7lPN7c3ak+4Kg315Cd7leVTmhFmZ6W4WpdaB1gI3GPFdkIVwY JXk7wHfsYxvI/uCKHaYsIY9BXX6d+n4ybsGHrxt9nHfXrefxB9x8ymkK2V+EAE9k N6K3k4Qwv9wpwPfaFXTTsHyKcGJbPZ+YQEeTJFTM8IGvLUl674xsw5ght0PtJgh5 HUjAUgyDcZ5UEDAVjy5fq39lWL5+jaJd1uLM6sg= -----END CERTIFICATE-----Generated at Sun Sep 20 12:29:57 2026 by rpki-client