$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa File: ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa (raw, json) Hash identifier: KyXR/N5gQ3x1uyPMlPfahG+DXLyNRiGOGxRY9yU0/rs= Subject key identifier: FF:F7:A4:C4:E9:96:C9:D5:53:C7:12:1B:4A:D3:A3:A6:58:2E:05:79 Certificate issuer: /CN=c68f99cd-e059-4345-ac58-8ebecccac84e Certificate serial: 010D0C9F4328584EEBECA385A6F291C5AC941400 Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 74.123.52.0/24 maxlen: 24 74.123.53.0/24 maxlen: 24 74.123.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:a3:85:a6:f2:91:c5:ac:94:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=684df25b-84c2-475a-9ab8-e947bbbc8504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:83:35:13:8d:2a:35:a3:3b:76:39:63:a4: b6:95:89:de:ba:2e:89:5b:ba:79:40:ca:d1:69:eb: 94:6d:c1:29:5a:ed:89:4b:3b:ae:40:9a:5b:55:b8: 9e:45:af:ac:5e:7d:a0:dd:f8:59:ad:6e:a8:17:99: 96:34:e3:2f:0f:80:54:2b:48:8e:d5:86:b9:cd:32: f9:c3:64:ba:43:25:f6:26:1f:0f:5b:72:8d:aa:3c: eb:ea:70:02:df:ad:af:dc:59:aa:6b:6d:75:88:d2: 01:f7:9a:59:47:c9:43:e1:ef:80:fa:bc:e4:ce:15: c3:19:9b:80:dd:de:48:45:33:ab:9d:8d:2c:c0:b3: 33:43:60:9f:9e:52:e8:82:05:a0:a8:fa:2e:28:01: cf:e9:3e:8d:09:89:00:32:dd:6b:28:6d:8e:02:09: 06:b8:7e:df:2d:b4:70:eb:67:b5:0f:85:f8:21:a3: 19:f2:a9:bc:4f:8a:c8:2c:4f:0d:5c:97:c0:fb:d8: 3a:6e:ec:6e:13:05:4b:c8:22:f5:52:a1:e6:e0:58: 8c:3b:21:61:22:79:c0:46:1d:e4:ab:7e:03:ff:f0: 5e:f9:7b:6e:2c:21:3e:37:20:ae:ae:cb:8d:2b:78: 6b:8a:68:e2:91:37:cf:87:3b:41:fc:f5:d5:00:4a: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F7:A4:C4:E9:96:C9:D5:53:C7:12:1B:4A:D3:A3:A6:58:2E:05:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl X509v3 Authority Key Identifier: keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer sbgp-ipAddrBlock: critical IPv4: 74.123.52.0-74.123.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b2:a7:cb:33:a1:25:e2:c4:e3:46:20:f0:37:ac:47:a4:cd: 1b:3d:1c:5c:e2:98:c0:f1:32:17:7a:51:70:04:78:df:3d:da: 0a:28:30:1e:5b:61:d6:fa:bb:00:d6:e6:3b:27:c7:84:d6:a6: cc:03:0e:1a:df:69:56:1a:ee:22:cf:29:f4:fa:1b:12:f0:79: f6:a2:5a:ea:2b:8a:a9:32:42:a2:d1:4e:32:fa:61:1b:f5:93: 04:c8:58:1f:15:9e:2a:48:5c:2a:c5:80:db:b2:00:d8:bb:e4: 8b:be:3f:a2:50:43:b0:63:4b:80:4a:1d:68:0a:4f:dd:d3:a9: b9:9b:ff:9e:1b:39:9d:34:fd:5a:e6:dd:3e:55:00:c9:20:b2: 12:32:cf:31:e3:4b:51:fc:77:25:f0:ef:ca:19:b1:ca:f6:ea: a7:ef:92:c5:c9:66:4f:f5:55:55:38:c2:83:4a:8e:6d:ca:75: 14:a9:94:73:65:48:f4:6c:64:c7:f3:de:10:3e:3e:94:f2:66: 3a:27:92:bc:82:52:8c:2a:03:c9:d8:7d:9a:2a:52:9b:9c:b9: e8:77:24:90:0e:52:ad:50:be:17:90:3e:09:18:35:0e:d0:17: c3:c7:d8:db:8c:55:b5:71:8c:a6:24:4f:dd:e2:62:cc:1a:03: 9e:76:ce:08 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7r7KOFpvKRxayUFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj ODRlMB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk Njg0ZGYyNWItODRjMi00NzVhLTlhYjgtZTk0N2JiYmM4NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLqDNRONKjWjO3Y5Y6S2lYneui6JW7p5QMrR aeuUbcEpWu2JSzuuQJpbVbieRa+sXn2g3fhZrW6oF5mWNOMvD4BUK0iO1Ya5zTL5 w2S6QyX2Jh8PW3KNqjzr6nAC362v3Fmqa211iNIB95pZR8lD4e+A+rzkzhXDGZuA 3d5IRTOrnY0swLMzQ2CfnlLoggWgqPouKAHP6T6NCYkAMt1rKG2OAgkGuH7fLbRw 62e1D4X4IaMZ8qm8T4rILE8NXJfA+9g6buxuEwVLyCL1UqHm4FiMOyFhInnARh3k q34D//Be+XtuLCE+NyCursuNK3hrimjikTfPhztB/PXVAErCMwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP/3pMTplsnVU8cSG0rTo6ZYLgV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvZmYzZDllYWEtZWRkNS0z MmZiLWIzZDYtNGM3NTI2YjhiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl Y2NjYWM4NGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJKezQD BABKezYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABrKnyzOhJeLE40Yg8DesR6TNGz0cXOKYwPEyF3pRcAR4 3z3aCigwHlth1vq7ANbmOyfHhNamzAMOGt9pVhruIs8p9PobEvB59qJa6iuKqTJC otFOMvphG/WTBMhYHxWeKkhcKsWA27IA2Lvki74/olBDsGNLgEodaApP3dOpuZv/ nhs5nTT9WubdPlUAySCyEjLPMeNLUfx3JfDvyhmxyvbqp++SxclmT/VVVTjCg0qO bcp1FKmUc2VI9Gxkx/PeED4+lPJmOieSvIJSjCoDydh9mipSm5y56HckkA5SrVC+ F5A+CRg1DtAXw8fY24xVtXGMpiRP3eJizBoDnnbOCA== -----END CERTIFICATE-----Generated at Mon Sep 21 15:57:40 2026 by rpki-client