$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa File: e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa (raw, json) Hash identifier: fXXKg09i/afzqpe6sMEwfNchmchEKjChJZNS5gzPNmw= Subject key identifier: 43:72:27:61:82:44:CE:81:10:A8:27:30:FB:C9:0B:F2:34:EA:62:C7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA794EA24B73DE28133FDDBC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 209242 IP address blocks: 74.49.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:ea:24:b7:3d:e2:81:33:fd:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8994112c-ee72-41d7-bfde-d14dc4c45d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:ae:e8:aa:79:03:24:91:e1:ed:a9:a0:56: b0:a4:b4:71:78:8f:bd:02:a7:a3:1c:26:66:b9:95: 34:6a:5e:a4:4a:e5:4a:14:40:e6:04:fc:94:61:c7: dc:b5:e6:3e:50:4a:fa:e2:f8:9f:78:96:c8:ce:6f: c6:27:03:62:34:d8:f1:3d:33:38:f0:2c:48:2b:f4: 9c:e4:9e:0f:b3:a2:31:24:20:34:31:44:50:2c:de: dc:e2:25:46:0d:a6:d1:72:a4:4d:b8:eb:4c:70:68: 2d:46:1a:ef:7d:e6:c5:78:a8:cd:be:59:20:f1:f4: c3:d1:ed:b4:b2:a6:c9:17:52:83:12:29:15:88:7d: fa:d2:39:5c:b7:ab:97:51:1d:9a:7e:42:e9:5c:da: 99:80:35:2a:4f:23:14:7b:58:25:47:93:4a:f6:b5: 64:82:ae:f0:c6:e3:a5:35:66:73:e7:16:eb:08:41: ce:52:64:0c:c4:fe:44:8c:47:0e:26:83:63:44:dc: 7c:31:28:5d:32:4c:d0:b5:0f:0d:04:0b:d5:c1:20: 06:60:41:9b:5a:02:73:3b:2b:0f:83:58:c6:d6:67: 2e:8c:fb:e3:1b:c6:84:a8:ab:87:ee:36:57:0b:5e: ee:57:95:49:6b:aa:e8:1a:ac:77:4d:79:7c:03:53: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:72:27:61:82:44:CE:81:10:A8:27:30:FB:C9:0B:F2:34:EA:62:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e970b6c1-380b-34ca-8a6a-2b5709d9d4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:2a:bc:30:7a:3e:ef:fb:8b:90:7a:c9:c6:39:53:c4:03:5d: e6:76:8f:38:0a:f3:6a:83:bb:34:a5:23:f1:c5:f2:8e:63:cf: d5:08:9a:2d:0f:92:c4:0d:cf:fd:87:13:de:fe:1e:2e:27:b2: 66:3b:48:71:ea:ff:11:9d:38:6e:27:4d:cf:ee:5a:67:47:63: 60:fd:77:55:2a:3f:86:7c:a7:51:8a:67:90:d7:57:16:b2:c8: 68:83:78:ac:2f:08:f2:0b:c1:4a:d9:d0:b0:e8:05:04:9e:fb: 05:03:eb:a0:83:00:38:00:6e:1b:cc:1d:02:39:6c:3a:3a:1d: ba:4c:8b:da:dd:9b:00:a3:ed:57:f8:df:c9:89:e8:4d:6c:bd: 3d:27:d1:e6:f3:59:46:31:3e:1f:1e:45:39:bc:c7:55:a3:ed: 27:90:eb:f4:66:62:8d:46:89:23:67:2a:5b:e0:bb:42:1b:b7: 5d:4e:ef:0b:4b:93:89:71:4f:02:bd:96:5b:b2:95:52:21:43: fb:12:2b:1a:94:33:07:1b:ca:da:77:95:cc:f2:75:7a:e5:b8: de:56:7c:96:46:4a:d7:81:2d:c0:d0:c5:b9:5e:5c:9e:5c:f9: 97:de:c3:29:3b:fc:b1:e1:d3:91:0a:92:27:22:16:1e:7c:73: fa:1c:7a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlOoktz3igTP928AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODk5NDExMmMtZWU3Mi00MWQ3LWJmZGUtZDE0ZGM0YzQ1ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW+u6Kp5AySR4e2poFawpLRxeI+9AqejHCZm uZU0al6kSuVKFEDmBPyUYcfcteY+UEr64vifeJbIzm/GJwNiNNjxPTM48CxIK/Sc 5J4Ps6IxJCA0MURQLN7c4iVGDabRcqRNuOtMcGgtRhrvfebFeKjNvlkg8fTD0e20 sqbJF1KDEikViH360jlct6uXUR2afkLpXNqZgDUqTyMUe1glR5NK9rVkgq7wxuOl NWZz5xbrCEHOUmQMxP5EjEcOJoNjRNx8MShdMkzQtQ8NBAvVwSAGYEGbWgJzOysP g1jG1mcujPvjG8aEqKuH7jZXC17uV5VJa6roGqx3TXl8A1P8+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENyJ2GCRM6BEKgnMPvJC/I06mLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTk3MGI2YzEtMzgwYi0z NGNhLThhNmEtMmI1NzA5ZDlkNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSjHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcqvDB6Pu/7i5B6ycY5U8QDXeZ2jzgK82qDuzSlI/HF8o5jz9UImi0P ksQNz/2HE97+Hi4nsmY7SHHq/xGdOG4nTc/uWmdHY2D9d1UqP4Z8p1GKZ5DXVxay yGiDeKwvCPILwUrZ0LDoBQSe+wUD66CDADgAbhvMHQI5bDo6HbpMi9rdmwCj7Vf4 38mJ6E1svT0n0ebzWUYxPh8eRTm8x1Wj7SeQ6/RmYo1GiSNnKlvgu0Ibt11O7wtL k4lxTwK9lluylVIhQ/sSKxqUMwcbytp3lczydXrluN5WfJZGSteBLcDQxbleXJ5c +Zfewyk7/LHh05EKkiciFh58c/ocetA= -----END CERTIFICATE-----Generated at Wed Jul 29 07:31:25 2026 by rpki-client