$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/e184cf88-3810-3c49-bf5d-d5964990d5d1.roa File: e184cf88-3810-3c49-bf5d-d5964990d5d1.roa (raw, json) Hash identifier: AAQ3x8hjJzJYuniOX/qDJ1H49poQWrf83LQsBCCAkGk= Subject key identifier: 3F:00:8D:0B:EB:82:E7:BB:1D:3E:7D:4E:F0:13:10:52:8F:C1:5C:59 Certificate issuer: /CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Certificate serial: 010D0C9F4328584F31B7B8D10F00671A8E649D80 Authority key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/e184cf88-3810-3c49-bf5d-d5964990d5d1.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 396879 IP address blocks: 74.114.16.0/21 maxlen: 21 165.140.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:b8:d1:0f:00:67:1a:8e:64:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=fe09482c-57e5-40f6-a43a-b60aecf7f5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:6a:41:8f:12:12:8d:7e:09:b3:64:f8:60: c9:43:c5:8d:78:bd:73:ab:bc:22:7d:36:81:05:aa: bc:40:97:c1:1c:4d:0a:36:15:37:3a:fd:32:ae:65: 8b:2c:7c:6e:40:55:22:de:45:6f:b0:09:5e:5b:11: fa:91:74:5f:fb:de:4f:a3:37:f0:57:92:4e:ff:42: 62:3a:b9:5d:a2:aa:63:b3:44:57:62:a7:2d:35:d4: 0c:eb:11:5d:db:ac:81:66:ab:15:bb:f8:49:43:fd: 39:8f:2a:71:2e:8d:ca:47:56:43:3a:5f:ab:3b:5a: af:0d:8a:27:cb:b8:40:fc:4e:8a:11:ee:a2:23:fa: d6:e9:64:57:7d:40:15:5a:63:47:a1:18:61:b2:42: 4c:18:10:4c:b0:35:e5:77:9e:0a:d8:de:92:3a:ca: f8:09:3b:05:7f:30:8c:8c:bb:bb:2a:9a:53:b0:6a: 7d:1a:b7:c3:d5:ac:3c:18:f3:68:c9:29:6c:e0:48: be:3c:70:c5:3d:3c:6e:73:b7:3c:7d:6e:78:c8:1a: 0a:84:64:a8:ea:fb:ae:d3:93:3c:48:a5:0b:07:d7: 27:c5:90:37:aa:c0:ff:10:c9:54:8a:8b:24:b2:3f: db:64:39:00:63:ad:72:9c:c2:87:88:e2:f8:89:2c: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:8D:0B:EB:82:E7:BB:1D:3E:7D:4E:F0:13:10:52:8F:C1:5C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/e184cf88-3810-3c49-bf5d-d5964990d5d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.crl X509v3 Authority Key Identifier: keyid:EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer sbgp-ipAddrBlock: critical IPv4: 74.114.16.0/21 165.140.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ef:43:fd:77:73:65:7d:50:70:e1:b2:e5:07:b3:18:38:0f: 02:d8:84:cb:60:e2:25:b6:7f:25:70:bf:d8:2f:3b:d6:02:5b: 48:24:74:65:a5:c6:a6:64:fb:60:00:3c:f5:f0:80:92:33:8f: 07:7f:2a:db:df:ed:e5:05:da:5a:1e:f0:8b:86:1d:25:76:a0: 67:15:2c:b4:d2:f8:51:88:5b:f3:5c:ad:37:1f:e5:7e:6a:a5: e6:e8:ba:14:4d:0a:ae:39:de:79:a3:b2:1b:63:23:52:a6:05: 7a:59:09:1f:c7:2d:fc:3c:34:ad:0b:84:1e:a8:38:13:4d:c1: c0:a2:20:bc:4d:d3:9f:f5:73:b2:7c:a8:f1:87:da:0c:bf:8e: 13:19:3b:88:e8:2b:1a:3e:45:38:3c:06:37:53:67:cf:1c:0c: 42:50:4b:08:fd:08:bc:49:ce:c9:ed:8f:0e:ff:1e:48:0c:d0: f9:da:56:46:89:49:fa:2e:c4:27:f9:42:a7:85:fd:97:6c:1c: 50:13:38:3b:35:88:45:05:ed:90:f6:bb:3d:2b:45:eb:6b:29: 8a:c2:9e:98:71:35:6d:32:5b:f9:e3:d3:a5:1c:75:e5:2f:6d: e9:cc:77:ae:87:38:98:22:7d:e5:0c:0f:a3:ff:06:a0:64:f1: 95:a2:af:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8xt7jRDwBnGo5knYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiNjIwZGMtOGEyZS00ZTk3LWIzY2QtZjk1ZjgzMTdi ZGVmMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmUwOTQ4MmMtNTdlNS00MGY2LWE0M2EtYjYwYWVjZjdmNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0lqQY8SEo1+CbNk+GDJQ8WNeL1zq7wifTaB Baq8QJfBHE0KNhU3Ov0yrmWLLHxuQFUi3kVvsAleWxH6kXRf+95PozfwV5JO/0Ji Orldoqpjs0RXYqctNdQM6xFd26yBZqsVu/hJQ/05jypxLo3KR1ZDOl+rO1qvDYon y7hA/E6KEe6iI/rW6WRXfUAVWmNHoRhhskJMGBBMsDXld54K2N6SOsr4CTsFfzCM jLu7KppTsGp9GrfD1aw8GPNoySls4Ei+PHDFPTxuc7c8fW54yBoKhGSo6vuu05M8 SKULB9cnxZA3qsD/EMlUiosksj/bZDkAY61ynMKHiOL4iSzXxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD8AjQvrgue7HT59TvATEFKPwVxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YWI2 MjBkYy04YTJlLTRlOTctYjNjZC1mOTVmODMxN2JkZWYvZTE4NGNmODgtMzgxMC0z YzQ5LWJmNWQtZDU5NjQ5OTBkNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGFiNjIwZGMtOGEyZS00ZTk3LWIz Y2QtZjk1ZjgzMTdiZGVmLzRhYjYyMGRjLThhMmUtNGU5Ny1iM2NkLWY5NWY4MzE3 YmRlZi5jcmwwHwYDVR0jBBgwFoAU6uo04wo5tOnabHctXSweBmjmsPcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80YWI2MjBkYy04YTJlLTRlOTctYjNjZC1mOTVm ODMxN2JkZWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSnIQAwQC pYysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFHvQ/13c2V9UHDhsuUHsxg4DwLYhMtg4iW2fyVwv9gvO9YC W0gkdGWlxqZk+2AAPPXwgJIzjwd/Ktvf7eUF2loe8IuGHSV2oGcVLLTS+FGIW/Nc rTcf5X5qpebouhRNCq453nmjshtjI1KmBXpZCR/HLfw8NK0LhB6oOBNNwcCiILxN 05/1c7J8qPGH2gy/jhMZO4joKxo+RTg8BjdTZ88cDEJQSwj9CLxJzsntjw7/HkgM 0PnaVkaJSfouxCf5QqeF/ZdsHFATODs1iEUF7ZD2uz0rRetrKYrCnphxNW0yW/nj 06UcdeUvbenMd66HOJgifeUMD6P/BqBk8ZWir5M= -----END CERTIFICATE-----Generated at Sun Sep 20 12:29:22 2026 by rpki-client