$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa File: 6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (raw, json) Hash identifier: ls7M0dz2R3cDi1frJfM9dU2Fdn+2nChHDo/zAZvb6/s= Subject key identifier: 21:59:1B:0B:09:40:BC:F0:2B:34:37:5A:5C:63:F9:46:30:B7:8C:E5 Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584CB28729FCA0A3B09C53150BC0 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 19528 IP address blocks: 74.209.184.0/22 maxlen: 24 74.209.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:29:fc:a0:a3:b0:9c:53:15:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=3fc424b3-d86d-4aa8-8a70-08f0ef57f6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:1b:0b:fd:7a:fa:0e:3e:cd:a6:b8:fb:f7: 46:fd:f5:6c:1f:c7:47:94:7d:eb:fd:5a:27:76:7a: 8b:ef:ab:28:34:ea:74:9b:b7:03:6e:db:0d:f4:44: ad:5a:7d:2a:bf:ed:04:33:bc:07:90:ff:11:18:37: 3a:a6:51:5b:90:c5:d4:e5:1e:42:ee:8f:ea:76:76: 24:68:9f:53:2b:ed:50:d0:9c:81:ce:18:3e:db:46: 3e:47:aa:b4:6d:00:5a:c0:c6:22:7b:c9:ff:08:a8: b4:fa:a3:ce:b7:ff:bf:80:e3:33:89:ae:eb:ec:6d: d6:47:d8:ad:09:2c:4b:38:24:ef:7f:52:84:c0:1d: 26:be:a1:19:74:43:82:c9:61:51:0b:53:71:38:0f: f5:21:0f:fe:42:87:07:82:12:0d:db:7d:99:aa:7b: 7d:5b:b8:8f:21:cd:57:81:8f:52:c3:e6:f4:83:ac: 0b:85:a7:89:61:22:d4:11:6c:16:fe:fa:18:c1:29: e4:24:7f:f9:60:a8:ee:fb:17:bd:9a:04:da:77:f2: a2:76:38:b5:64:e1:67:86:28:67:f5:63:47:8c:cb: 76:c2:cb:bc:30:6d:5f:c8:c5:e6:c3:ea:80:37:da: 89:0f:29:49:00:69:bb:d4:73:3f:82:65:af:28:14: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:59:1B:0B:09:40:BC:F0:2B:34:37:5A:5C:63:F9:46:30:B7:8C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e8:8b:ff:80:96:c7:e8:6a:b4:84:06:d7:c1:33:f5:7b:1f: 6c:9f:ec:16:b3:89:03:60:82:fc:4e:cb:29:a0:32:bc:60:32: 6c:d2:9a:c4:fe:98:da:af:50:1c:04:1a:73:6a:21:08:f2:88: d1:00:49:81:e1:1c:09:bc:53:08:0e:e2:f1:b0:1d:c8:36:8d: 6f:3c:eb:45:18:fc:78:20:6b:71:ff:ed:d1:69:fb:ad:d8:80: ce:3c:91:f3:be:a1:79:6e:c2:bd:92:fe:56:2b:ec:74:7f:b5: 2a:44:be:4f:61:a4:1c:d2:84:b1:2c:2e:f9:df:e7:16:6f:7e: 20:e9:2c:9a:d5:80:78:d4:21:b7:9c:7f:92:28:d2:5b:54:de: 64:0d:e2:86:13:68:8e:d6:41:d8:77:35:54:82:27:8e:25:eb: c0:12:89:6e:36:0a:9e:9a:86:db:d8:ba:f4:6e:cf:6c:c0:3a: e7:ea:6c:25:6e:76:f8:f6:7b:45:84:a5:d8:21:af:cd:0a:86: 45:5d:70:01:b7:2b:68:55:f7:d3:ef:0b:43:e0:2b:16:ca:e7: be:9c:48:65:52:ff:8e:9f:33:b9:50:46:b6:1e:fd:0c:27:62: b3:26:50:dd:b2:8c:f7:cd:84:71:d3:7e:33:01:43:cc:43:f3: 76:b9:ae:30 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyyhyn8oKOwnFMVC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk M2ZjNDI0YjMtZDg2ZC00YWE4LThhNzAtMDhmMGVmNTdmNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw8bC/16+g4+zaa4+/dG/fVsH8dHlH3r/Von dnqL76soNOp0m7cDbtsN9EStWn0qv+0EM7wHkP8RGDc6plFbkMXU5R5C7o/qdnYk aJ9TK+1Q0JyBzhg+20Y+R6q0bQBawMYie8n/CKi0+qPOt/+/gOMzia7r7G3WR9it CSxLOCTvf1KEwB0mvqEZdEOCyWFRC1NxOA/1IQ/+QocHghIN232Zqnt9W7iPIc1X gY9Sw+b0g6wLhaeJYSLUEWwW/voYwSnkJH/5YKju+xe9mgTad/Kidji1ZOFnhihn 9WNHjMt2wsu8MG1fyMXmw+qAN9qJDylJAGm71HM/gmWvKBSFPQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCFZGwsJQLzwKzQ3Wlxj+UYwt4zlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvNmQ0NWIzYjctMjNhMC0z YzU1LWE2NzYtNGIyNmJkYTkzOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANK0bgD BABK0bwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZuiL/4CWx+hqtIQG18Ez9XsfbJ/sFrOJA2CC/E7LKaAy vGAybNKaxP6Y2q9QHAQac2ohCPKI0QBJgeEcCbxTCA7i8bAdyDaNbzzrRRj8eCBr cf/t0Wn7rdiAzjyR876heW7CvZL+VivsdH+1KkS+T2GkHNKEsSwu+d/nFm9+IOks mtWAeNQht5x/kijSW1TeZA3ihhNojtZB2Hc1VIInjiXrwBKJbjYKnpqG29i69G7P bMA65+psJW52+PZ7RYSl2CGvzQqGRV1wAbcraFX30+8LQ+ArFsrnvpxIZVL/jp8z uVBGth79DCdisyZQ3bKM982EcdN+MwFDzEPzdrmuMA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:47:57 2026 by rpki-client