$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: YTt92sX+FM5AwZMJTesr1tqH/yMrt6+l44BTzwkihVE= Subject key identifier: 92:C4:50:89:CD:12:FA:CA:C6:D8:35:CD:66:33:7B:96:62:86:5D:B6 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584DDA55CF0128A92F6022E6D680 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:cf:01:28:a9:2f:60:22:e6:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=8c7a7b73-768c-4ead-a42f-3b4b3436247e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9d:32:9c:46:81:79:9f:71:cf:37:97:69:95: f8:8b:29:2d:a5:46:2e:6c:bf:b7:56:71:ff:8a:f2: 6b:85:e4:f4:b9:ed:72:7b:2b:93:0b:58:8b:83:41: 76:ea:7c:d9:96:3e:2a:eb:26:f5:18:e0:24:7c:8e: e3:0c:cf:44:d7:b7:3a:a1:95:44:1b:42:c4:39:65: 94:c4:a3:51:84:4e:4c:7f:6a:ea:8e:12:88:be:87: e6:2f:66:b9:36:ae:7c:a1:ff:ce:1a:7f:e8:7c:c4: ed:62:a9:83:a2:95:8e:36:50:70:83:13:5b:17:40: 0a:2d:37:65:0e:85:39:63:9d:c9:f7:8f:79:a6:77: 49:b9:b7:9c:f4:97:1e:b9:d3:3d:37:97:92:ee:40: ea:7a:7a:2b:48:bf:5c:aa:0a:31:a1:e7:df:c1:19: d7:aa:e0:f6:9a:e1:c0:a4:19:56:a8:bc:d9:a6:55: ab:cc:8f:66:ab:20:12:7e:83:28:cd:28:43:3e:86: 25:54:15:25:39:19:8a:49:b6:b7:cf:86:ea:75:8a: 88:f6:cb:87:35:f2:d9:26:e7:0a:51:f8:8d:e3:2e: 07:24:41:a4:b7:9b:28:5f:48:b9:c0:64:52:dc:5e: f2:84:e7:c9:3f:d1:50:79:b1:12:8c:c3:d5:78:c9: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C4:50:89:CD:12:FA:CA:C6:D8:35:CD:66:33:7B:96:62:86:5D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:12:e3:2e:6d:41:a0:56:85:c5:7a:9e:45:47:3e:64:fc:d7: 80:5e:2b:14:6e:6a:9c:28:a7:4f:6d:11:73:69:3d:81:93:45: dd:1e:df:2f:79:a9:24:c2:b4:92:49:a2:19:cb:3e:87:8c:7b: 1d:33:ad:3e:39:dd:c8:ee:29:7e:71:f3:db:34:88:0a:ca:8a: b8:21:1a:ee:4b:72:f2:d0:2c:bb:f4:81:ec:b7:f9:2f:c9:e7: d2:c5:bd:e5:f3:d6:53:c5:4d:c5:c0:ca:9f:4c:6c:1f:89:ee: d2:16:4c:97:8f:4d:02:c0:b2:ac:c3:ea:b1:29:77:31:1d:80: de:c3:44:07:67:3e:a4:88:40:6e:82:ec:6b:d8:7d:3a:13:23: 1d:d9:79:bc:ad:bd:ff:62:fa:a9:ad:bf:af:08:a1:79:96:0d: ef:58:95:dd:ea:4d:34:46:fb:95:b4:97:aa:67:3f:16:59:89: f8:39:55:b9:ca:69:0a:10:95:9a:cc:b1:5a:b3:ed:f3:10:65: 5c:d8:16:e4:4f:06:2b:45:c1:f5:39:9f:8c:8e:44:71:69:0e: 3e:3f:13:46:2c:55:d6:59:72:b8:02:c5:29:b2:75:7c:34:04: 4b:45:b5:64:44:d5:45:71:00:da:3b:ff:29:82:51:ec:b3:ff: 22:a6:f6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3aVc8BKKkvYCLm1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk OGM3YTdiNzMtNzY4Yy00ZWFkLWE0MmYtM2I0YjM0MzYyNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ0ynEaBeZ9xzzeXaZX4iyktpUYubL+3VnH/ ivJrheT0ue1yeyuTC1iLg0F26nzZlj4q6yb1GOAkfI7jDM9E17c6oZVEG0LEOWWU xKNRhE5Mf2rqjhKIvofmL2a5Nq58of/OGn/ofMTtYqmDopWONlBwgxNbF0AKLTdl DoU5Y53J9495pndJubec9JceudM9N5eS7kDqenorSL9cqgoxoeffwRnXquD2muHA pBlWqLzZplWrzI9mqyASfoMozShDPoYlVBUlORmKSba3z4bqdYqI9suHNfLZJucK UfiN4y4HJEGkt5soX0i5wGRS3F7yhOfJP9FQebESjMPVeMlJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLEUInNEvrKxtg1zWYze5Zihl22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoS4y5tQaBWhcV6nkVHPmT814BeKxRuapwop09tEXNpPYGTRd0e3y95 qSTCtJJJohnLPoeMex0zrT453cjuKX5x89s0iArKirghGu5LcvLQLLv0gey3+S/J 59LFveXz1lPFTcXAyp9MbB+J7tIWTJePTQLAsqzD6rEpdzEdgN7DRAdnPqSIQG6C 7GvYfToTIx3Zebytvf9i+qmtv68IoXmWDe9Yld3qTTRG+5W0l6pnPxZZifg5VbnK aQoQlZrMsVqz7fMQZVzYFuRPBitFwfU5n4yORHFpDj4/E0YsVdZZcrgCxSmydXw0 BEtFtWRE1UVxANo7/ymCUeyz/yKm9lM= -----END CERTIFICATE-----Generated at Sun Jun 14 00:12:27 2026 by rpki-client