$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa File: ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa (raw, json) Hash identifier: EHZLMqCD+fhPTucWnDICYgOegVdbBv1KkYM5bwZiidU= Subject key identifier: 33:2D:03:6C:A3:FF:89:1C:65:08:34:2C:B4:08:DC:F8:F1:70:1C:03 Certificate issuer: /CN=c68f99cd-e059-4345-ac58-8ebecccac84e Certificate serial: 010D0C9F4328584F8DD898CFFF34E9EEE2627800 Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 74.123.52.0/24 maxlen: 24 74.123.53.0/24 maxlen: 24 74.123.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:98:cf:ff:34:e9:ee:e2:62:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=71ec87fe-9d72-4b8a-b2da-e5c9389081e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:9b:e7:22:bf:cd:31:b3:87:76:49:47:a5: c9:25:64:f1:5c:bb:55:06:e1:f4:99:d2:8d:06:7e: 8c:2d:17:e2:8d:6a:3e:90:b4:05:2b:e5:77:2c:ab: 22:cc:5a:61:cd:d3:54:09:8a:42:58:5c:5f:67:c8: 73:1c:11:61:48:e6:63:83:4a:b4:ea:6b:22:6b:f4: 63:d3:15:e6:4f:86:6b:1e:30:0b:81:69:72:76:97: a6:c2:93:31:1f:16:fe:b7:f4:7c:70:e5:3b:20:8b: 02:e0:8c:34:0e:64:07:4e:b8:0b:d4:51:52:b6:24: 42:63:c1:f6:90:27:a8:9a:11:3b:8f:8d:60:a9:10: 55:ae:6c:8d:c5:c2:72:9a:c5:4a:08:0e:14:60:a3: f8:e1:cd:41:52:44:25:85:52:d9:e1:4a:9b:20:56: da:60:4c:63:3c:eb:44:3a:45:d5:4a:16:0e:a6:c3: 25:fb:8e:99:63:3b:15:93:37:94:c3:6d:a3:ef:be: 3b:fe:aa:8e:01:84:ac:eb:9e:45:f1:ff:bd:08:ba: b0:4b:32:10:3b:a8:ff:56:9a:82:e8:9b:dc:e7:3d: 6f:62:d5:04:da:2d:19:04:22:1c:9b:fc:0f:63:9a: 44:81:f4:10:e8:8b:0a:9d:af:2d:dd:5d:9f:55:16: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:03:6C:A3:FF:89:1C:65:08:34:2C:B4:08:DC:F8:F1:70:1C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl X509v3 Authority Key Identifier: keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer sbgp-ipAddrBlock: critical IPv4: 74.123.52.0-74.123.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1d:a4:d0:7c:14:0b:db:16:42:7d:0c:68:9b:86:f2:62:00: 56:61:67:3f:a5:ba:b4:cb:0a:ce:0c:b5:fe:eb:04:78:c1:32: ae:b4:4a:3c:73:fa:16:7f:c8:53:65:d7:e9:87:0f:77:96:55: 7b:29:68:e1:2a:fb:78:eb:7b:59:52:7b:d8:18:5b:4d:b9:fa: 05:25:8f:91:27:89:9e:a6:56:49:6b:2c:69:da:22:ba:8d:22: 0c:bc:1b:12:ce:5c:2d:1d:76:a7:4c:24:2d:a9:50:a2:f8:72: 06:de:14:af:93:b3:a2:57:6f:30:a3:46:80:f1:f4:8c:dc:21: c8:90:23:59:fd:85:58:21:3b:4d:28:e9:24:62:0e:31:76:ba: 9c:98:38:3e:8f:e4:cf:15:31:b0:e2:79:7a:f6:18:28:bb:a4: b7:05:7a:50:a5:15:3f:a6:4d:ef:c6:57:d9:86:0e:25:90:11: e3:aa:e7:f7:74:35:dd:58:d3:b3:e9:98:a6:49:48:e9:d8:ea: ee:e3:fd:aa:9b:13:26:30:2b:16:ec:64:de:50:92:47:ec:7c: dd:b8:43:6b:71:7e:6f:b7:8e:8a:9a:40:22:e6:c8:b6:4b:2f: 0b:88:0d:98:26:f1:5c:e0:c0:ad:ea:dd:69:61:c0:63:79:1b: cb:8a:ae:cf -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE+N2JjP/zTp7uJieAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj ODRlMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NzFlYzg3ZmUtOWQ3Mi00YjhhLWIyZGEtZTVjOTM4OTA4MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKCb5yK/zTGzh3ZJR6XJJWTxXLtVBuH0mdKN Bn6MLRfijWo+kLQFK+V3LKsizFphzdNUCYpCWFxfZ8hzHBFhSOZjg0q06msia/Rj 0xXmT4ZrHjALgWlydpemwpMxHxb+t/R8cOU7IIsC4Iw0DmQHTrgL1FFStiRCY8H2 kCeomhE7j41gqRBVrmyNxcJymsVKCA4UYKP44c1BUkQlhVLZ4UqbIFbaYExjPOtE OkXVShYOpsMl+46ZYzsVkzeUw22j7747/qqOAYSs655F8f+9CLqwSzIQO6j/VpqC 6Jvc5z1vYtUE2i0ZBCIcm/wPY5pEgfQQ6IsKna8t3V2fVRaZWwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDMtA2yj/4kcZQg0LLQI3PjxcBwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvZmYzZDllYWEtZWRkNS0z MmZiLWIzZDYtNGM3NTI2YjhiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl Y2NjYWM4NGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJKezQD BABKezYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKh2k0HwUC9sWQn0MaJuG8mIAVmFnP6W6tMsKzgy1/usE eMEyrrRKPHP6Fn/IU2XX6YcPd5ZVeylo4Sr7eOt7WVJ72BhbTbn6BSWPkSeJnqZW SWssadoiuo0iDLwbEs5cLR12p0wkLalQovhyBt4Ur5OzoldvMKNGgPH0jNwhyJAj Wf2FWCE7TSjpJGIOMXa6nJg4Po/kzxUxsOJ5evYYKLuktwV6UKUVP6ZN78ZX2YYO JZAR46rn93Q13VjTs+mYpklI6djq7uP9qpsTJjArFuxk3lCSR+x83bhDa3F+b7eO ippAIubItksvC4gNmCbxXODArerdaWHAY3kby4quzw== -----END CERTIFICATE-----Generated at Sun Nov 8 17:38:08 2026 by rpki-client