$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa File: a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa (raw, json) Hash identifier: pdwb1l8MWTPNN1m/BQN+G+XpemnnAb7WmrbIrj4m25Y= Subject key identifier: 22:FB:05:A3:1F:E1:06:3B:32:1A:C7:1E:8A:C5:44:0A:F8:AC:F3:6B Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Certificate serial: 010D0C9F4328584C8046CE9DB1A85ABE89F6D980 Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 33465 IP address blocks: 74.51.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:ce:9d:b1:a8:5a:be:89:f6:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=30ad108e-8c64-491f-bcf2-3c50cc6da471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:2d:70:eb:5d:2a:7a:bc:ad:5c:7d:e8:74: 47:de:d1:9c:b2:d9:a4:fc:9f:73:5b:0e:9d:b8:14: 25:2c:bf:6f:79:4a:6a:1f:1f:5e:61:e1:a7:36:df: 34:67:38:03:f8:54:0e:19:9b:fc:a9:18:ed:a4:86: 95:5a:14:b6:d8:75:c7:ec:49:eb:41:ef:ff:bb:d9: 99:fb:10:9a:55:a0:8c:e1:30:d0:21:69:d1:e2:f5: 48:02:21:69:e1:bd:78:f9:d8:5e:a7:97:a6:02:f7: fa:6e:93:2d:56:7c:17:81:a9:27:f0:8f:1d:35:2f: 56:1b:6d:19:c7:5f:45:d6:a2:62:97:3f:f7:a3:3b: b7:d6:7e:cc:4e:8d:9f:79:a6:8e:04:ac:ea:1f:c5: 87:35:4f:f9:92:39:b1:f4:fa:ed:cb:28:f3:0e:51: 74:53:22:85:68:30:af:3a:5d:2a:8a:7a:f9:b7:29: b9:e8:a2:76:30:3a:14:d3:6a:3e:e9:39:d2:bd:1d: af:f2:0c:24:c3:3c:c5:e6:d9:dc:03:52:ee:83:b0: 92:3c:00:35:ce:3a:b9:b3:2f:da:ae:0b:84:54:90: 8f:6f:6f:51:d8:c1:98:a1:e6:f4:aa:7c:d8:09:05: f7:78:ea:c7:64:85:3d:03:d7:a3:3b:35:f8:c2:7f: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FB:05:A3:1F:E1:06:3B:32:1A:C7:1E:8A:C5:44:0A:F8:AC:F3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl X509v3 Authority Key Identifier: keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer sbgp-ipAddrBlock: critical IPv4: 74.51.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:83:49:86:dd:65:22:c0:94:48:cf:0a:50:55:a5:72:40:1e: ec:6d:50:27:5f:69:99:3c:4e:91:63:7a:89:f2:d6:8f:47:5e: da:8e:9c:f9:8b:a5:3e:39:f3:f2:d2:8a:d1:46:b6:20:bb:a2: 0a:da:64:60:a8:67:5c:99:7c:9b:8d:18:2c:f8:f1:26:d5:cb: 39:c6:49:d8:72:d9:1f:1c:49:48:66:4c:a0:0a:f5:4b:8a:a5: da:f3:36:74:26:2d:ff:36:ed:59:3a:55:40:ec:1c:6d:73:24: 10:e3:b9:a4:1a:f8:a3:f7:c2:2c:1b:fa:b7:b4:0c:6c:0a:ba: 91:4d:b7:4e:e0:59:db:9e:62:fe:fa:3f:79:e4:0c:76:58:5a: 52:85:34:b6:aa:8e:a7:7d:d8:eb:83:e6:dd:13:b3:fb:4c:71: ed:24:7f:eb:cb:77:71:23:99:cb:04:5f:45:61:13:01:b4:72: 73:c8:84:c5:7c:72:6f:3c:2d:d8:fd:ae:d8:9c:7c:1e:67:c5: 27:6a:0e:b4:c1:70:b1:d0:aa:6d:b0:3e:49:42:21:20:d8:69: 2a:db:42:9d:0b:9e:f3:c7:58:f4:7b:8e:3f:f9:36:12:92:e0: 1e:9c:ae:01:97:b9:57:25:00:7a:44:a5:7c:91:7a:fd:71:1b: 79:aa:0c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARs6dsahavon22YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1N2E0ZTQtNDc3MS00Yjg3LWJlNmEtZTNiMjdmNWFj NWRkMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk MzBhZDEwOGUtOGM2NC00OTFmLWJjZjItM2M1MGNjNmRhNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTwtcOtdKnq8rVx96HRH3tGcstmk/J9zWw6d uBQlLL9veUpqHx9eYeGnNt80ZzgD+FQOGZv8qRjtpIaVWhS22HXH7EnrQe//u9mZ +xCaVaCM4TDQIWnR4vVIAiFp4b14+dhep5emAvf6bpMtVnwXgakn8I8dNS9WG20Z x19F1qJilz/3ozu31n7MTo2feaaOBKzqH8WHNU/5kjmx9PrtyyjzDlF0UyKFaDCv Ol0qinr5tym56KJ2MDoU02o+6TnSvR2v8gwkwzzF5tncA1Lug7CSPAA1zjq5sy/a rguEVJCPb29R2MGYoeb0qnzYCQX3eOrHZIU9A9ejOzX4wn9e6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL7BaMf4QY7MhrHHorFRAr4rPNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3 YTRlNC00NzcxLTRiODctYmU2YS1lM2IyN2Y1YWM1ZGQvYTNiMjQ5NDUtOGVhNS0z MTBlLTllYzYtYTI1N2RjZjUzZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM1N2E0ZTQtNDc3MS00Yjg3LWJl NmEtZTNiMjdmNWFjNWRkL2FjNTdhNGU0LTQ3NzEtNGI4Ny1iZTZhLWUzYjI3ZjVh YzVkZC5jcmwwHwYDVR0jBBgwFoAU1dmHxFHPdgJ2FWwY2sXGD83J/ckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3YTRlNC00NzcxLTRiODctYmU2YS1lM2Iy N2Y1YWM1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmDSYbdZSLAlEjPClBVpXJAHuxtUCdfaZk8TpFjeony1o9HXtqOnPmL pT458/LSitFGtiC7ograZGCoZ1yZfJuNGCz48SbVyznGSdhy2R8cSUhmTKAK9UuK pdrzNnQmLf827Vk6VUDsHG1zJBDjuaQa+KP3wiwb+re0DGwKupFNt07gWdueYv76 P3nkDHZYWlKFNLaqjqd92OuD5t0Ts/tMce0kf+vLd3EjmcsEX0VhEwG0cnPIhMV8 cm88Ldj9rticfB5nxSdqDrTBcLHQqm2wPklCISDYaSrbQp0LnvPHWPR7jj/5NhKS 4B6crgGXuVclAHpEpXyRev1xG3mqDBo= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:25 2026 by rpki-client