$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/8e63faf4-30a9-3172-8d5f-4977395d97e3.roa File: 8e63faf4-30a9-3172-8d5f-4977395d97e3.roa (raw, json) Hash identifier: wctPlYnhsnaj8w/2rcg666xwEcjwv9dWftrQTesr72s= Subject key identifier: EC:D0:63:7C:4B:8A:0E:15:75:1C:9E:00:95:82:1E:3B:C2:9A:09:36 Certificate issuer: /CN=f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98 Certificate serial: 010D0C9F4328584EF181FD441BA9709BF8B4F400 Authority key identifier: D0:3C:96:E1:0C:B6:6C:11:4A:A8:F4:92:61:4B:1F:28:22:B8:89:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/8e63faf4-30a9-3172-8d5f-4977395d97e3.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 9678 IP address blocks: 74.214.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:81:fd:44:1b:a9:70:9b:f8:b4:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=8342f88e-7f8a-4546-bd92-e6e02bd95254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:b6:b1:ae:a2:be:cd:e3:57:95:f1:16:20: 0a:b2:dd:71:5e:5f:14:ce:4e:3c:67:5f:31:be:cb: e5:da:57:45:cb:39:af:53:e9:bf:4e:cf:62:d1:fa: 82:a8:f7:5e:1d:f5:51:3a:75:a5:4a:94:25:65:34: 39:fc:03:e8:1a:8f:90:99:05:3d:ce:b1:36:79:e3: 8e:1c:c9:83:a8:cc:7c:ba:8b:43:df:47:6f:35:40: e6:16:0b:1b:48:17:86:a6:e6:88:e9:98:ea:06:d8: 74:cb:b2:bd:0c:26:f9:67:09:9b:a1:f3:fc:b6:7f: fa:4a:b4:9a:25:cc:7a:0c:e0:c0:42:0c:dc:6d:79: d9:d9:4f:e6:68:c2:10:95:c3:87:eb:9f:12:4d:79: bf:1b:46:7d:fa:37:62:18:73:4f:8f:94:13:6a:7d: 9f:b8:df:d0:99:c5:05:42:ee:90:6e:a7:e3:c1:74: ff:07:ac:e5:5b:7b:05:ba:2f:95:60:55:3a:88:24: de:de:d3:7e:1c:00:ff:1b:8c:67:a7:b8:fc:84:92: fa:ec:ab:f9:87:d6:23:19:fd:27:a7:00:3e:67:95: ff:7a:83:04:60:92:81:11:56:e8:cb:83:69:b2:2b: ce:84:a2:8d:03:23:66:cc:03:9c:fc:1e:2a:c8:37: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:63:7C:4B:8A:0E:15:75:1C:9E:00:95:82:1E:3B:C2:9A:09:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/8e63faf4-30a9-3172-8d5f-4977395d97e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.crl X509v3 Authority Key Identifier: keyid:D0:3C:96:E1:0C:B6:6C:11:4A:A8:F4:92:61:4B:1F:28:22:B8:89:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer sbgp-ipAddrBlock: critical IPv4: 74.214.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8f:7e:80:53:95:01:67:75:2a:17:af:b1:09:3e:60:3a:52: fa:78:f2:82:04:80:6c:86:43:a2:d1:a1:64:1a:99:81:3e:f6: 23:26:c8:4b:b2:50:4d:9a:ab:e6:07:88:cc:a5:54:1c:82:99: 5c:fc:ef:ee:d4:e0:1b:24:39:10:6f:11:31:6a:63:6f:1b:25: 61:d8:c1:82:c8:5e:13:f5:4f:0d:e4:96:2d:1d:d2:f0:60:de: 75:28:ef:4d:95:e0:2b:78:e8:f9:16:ed:64:c0:0b:13:4a:dc: ab:c1:14:bd:29:78:d9:3b:9b:f0:2d:af:ff:c5:3b:84:b9:72: 98:f7:24:2a:5a:33:bf:c0:eb:ff:b5:24:ac:d2:92:61:30:c5: 43:86:dd:a1:31:5b:0f:1f:10:41:3c:38:7d:20:aa:bc:e3:97: de:09:a2:0b:72:7b:70:92:79:8e:1e:ed:8c:fc:03:ae:93:48: a7:34:16:84:d5:49:7a:b8:67:d4:70:99:9b:5d:d0:a3:e9:ae: e9:ba:e3:46:ad:07:e4:15:41:ff:c9:7c:50:11:bc:a9:40:ff: 20:c4:a4:14:67:ca:32:3b:53:de:52:7a:80:2e:9b:03:fc:8b: 8f:1f:97:5c:d7:a8:3f:a8:67:ca:17:be:63:2c:36:8d:e6:2f: dd:e3:65:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgf1EG6lwm/i09AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU2ZmQ5ZWEtM2IwMy00YWE0LWExZmItMGU2MjZlMTdm ZTk4MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ODM0MmY4OGUtN2Y4YS00NTQ2LWJkOTItZTZlMDJiZDk1MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY22sa6ivs3jV5XxFiAKst1xXl8Uzk48Z18x vsvl2ldFyzmvU+m/Ts9i0fqCqPdeHfVROnWlSpQlZTQ5/APoGo+QmQU9zrE2eeOO HMmDqMx8uotD30dvNUDmFgsbSBeGpuaI6ZjqBth0y7K9DCb5ZwmbofP8tn/6SrSa Jcx6DODAQgzcbXnZ2U/maMIQlcOH658STXm/G0Z9+jdiGHNPj5QTan2fuN/QmcUF Qu6QbqfjwXT/B6zlW3sFui+VYFU6iCTe3tN+HAD/G4xnp7j8hJL67Kv5h9YjGf0n pwA+Z5X/eoMEYJKBEVboy4NpsivOhKKNAyNmzAOc/B4qyDf7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzQY3xLig4VdRyeAJWCHjvCmgk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNTZm ZDllYS0zYjAzLTRhYTQtYTFmYi0wZTYyNmUxN2ZlOTgvOGU2M2ZhZjQtMzBhOS0z MTcyLThkNWYtNDk3NzM5NWQ5N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjU2ZmQ5ZWEtM2IwMy00YWE0LWEx ZmItMGU2MjZlMTdmZTk4L2Y1NmZkOWVhLTNiMDMtNGFhNC1hMWZiLTBlNjI2ZTE3 ZmU5OC5jcmwwHwYDVR0jBBgwFoAU0DyW4Qy2bBFKqPSSYUsfKCK4iWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mNTZmZDllYS0zYjAzLTRhYTQtYTFmYi0wZTYy NmUxN2ZlOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2PfoBTlQFndSoXr7EJPmA6Uvp48oIEgGyGQ6LRoWQamYE+9iMmyEuy UE2aq+YHiMylVByCmVz87+7U4BskORBvETFqY28bJWHYwYLIXhP1Tw3kli0d0vBg 3nUo702V4Ct46PkW7WTACxNK3KvBFL0peNk7m/Atr//FO4S5cpj3JCpaM7/A6/+1 JKzSkmEwxUOG3aExWw8fEEE8OH0gqrzjl94Jogtye3CSeY4e7Yz8A66TSKc0FoTV SXq4Z9RwmZtd0KPprum640atB+QVQf/JfFARvKlA/yDEpBRnyjI7U95SeoAumwP8 i48fl1zXqD+oZ8oXvmMsNo3mL93jZQU= -----END CERTIFICATE-----Generated at Mon Sep 21 23:49:26 2026 by rpki-client