$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/7b5872da-1fbb-338c-b627-c76119fe3e7d.roa File: 7b5872da-1fbb-338c-b627-c76119fe3e7d.roa (raw, json) Hash identifier: rDeW1K2mUcvLJ0YjLMLSQopUZATT+SykTUuqe6zEDSk= Subject key identifier: 32:42:3C:9F:AA:BF:1B:FE:70:67:AD:77:35:67:4A:4B:ED:79:18:C6 Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36 Certificate serial: 010D0C9F4328584F2ABD20AAC44EA298988D5380 Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/7b5872da-1fbb-338c-b627-c76119fe3e7d.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 6142 IP address blocks: 74.85.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:20:aa:c4:4e:a2:98:98:8d:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=20ca9d73-1a45-4bf5-9896-3cb5e7f8d2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:93:46:05:91:3d:bd:1c:e3:d9:25:82:29: 0e:28:db:10:4e:cc:4b:0d:a1:8e:57:57:bf:1b:6d: bc:85:56:2d:35:78:52:08:4a:9f:b3:d5:28:70:49: 6d:58:de:00:a5:5c:73:24:fd:9b:75:1b:89:e2:bc: 04:b9:f5:2d:75:57:4e:74:ae:d5:e2:76:99:50:cf: 48:c0:57:36:56:3a:05:e9:63:4c:cd:69:66:73:2d: cc:09:5d:89:ec:4b:1c:6e:db:8c:17:b1:f7:4e:b1: cd:27:29:4b:e4:89:07:c7:ca:08:de:20:44:12:d8: 48:83:16:a7:d8:d5:af:27:06:5e:97:66:40:ba:b9: 70:09:b9:71:8c:1d:37:06:25:1f:ff:8e:b8:81:a4: ab:58:b4:f4:16:21:99:5a:cd:4a:12:63:83:a7:44: 19:c7:b9:da:64:f1:30:aa:a9:17:e6:68:eb:c3:04: 15:37:82:26:62:37:69:9f:9d:78:e1:63:a7:88:b7: 6f:c2:86:97:b4:27:f1:75:9f:8e:37:1b:e6:b3:0b: 3b:26:16:b0:14:78:7b:dc:44:b2:5b:ad:62:c9:4a: 40:cf:20:5c:50:d0:a2:66:24:9e:34:6c:e9:be:8c: c1:5b:2b:37:9a:3d:15:e0:3d:ef:e0:2e:74:a3:24: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:42:3C:9F:AA:BF:1B:FE:70:67:AD:77:35:67:4A:4B:ED:79:18:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/7b5872da-1fbb-338c-b627-c76119fe3e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl X509v3 Authority Key Identifier: keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer sbgp-ipAddrBlock: critical IPv4: 74.85.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:16:57:0b:55:29:31:34:26:24:76:ec:38:7d:22:6f:41:50: 01:2f:90:8a:fb:c3:9f:fa:fa:9d:34:1f:f5:08:7d:ef:37:02: cc:68:84:df:7e:66:28:a7:b0:f0:48:31:52:a8:1e:c6:97:8e: e2:b8:63:b4:66:2b:62:88:0d:db:d8:9d:75:4f:fa:42:18:63: ff:65:67:20:72:e7:a6:5f:bb:ac:cc:91:01:51:63:ca:36:24: fd:07:d4:a4:fa:ee:5e:36:0a:26:1f:a8:a9:af:26:89:6f:39: e7:cf:37:70:b9:fe:d5:3f:b9:0b:92:f8:bf:8e:b0:93:20:d0: 53:8e:82:7c:b0:e7:ab:e8:7d:9b:9e:1e:9b:de:55:f9:e6:f7: 5c:5d:9c:05:19:f3:38:1c:c0:cb:37:73:4f:2a:af:ce:d5:f3: 44:97:4a:49:f9:bc:2f:76:72:f9:96:58:ed:0b:3f:82:c4:1a: e2:b3:29:f5:2c:d7:93:b0:a6:21:4a:36:02:22:e2:08:34:7e: 37:08:92:c6:71:5a:55:e3:b8:87:62:a6:0a:d7:2f:7b:67:bb: 84:fa:f1:b0:15:a6:92:29:26:11:9e:f7:42:6a:ef:42:1a:05: 4c:4f:47:c6:68:e3:97:e0:b4:ca:9f:55:ca:57:f0:f9:ca:ac: 08:ff:4b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSCqxE6imJiNU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQxMmYwMzUtYjM3Ni00ODA3LWE4YWMtZTk4NjgwYWIw ZTM2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MjBjYTlkNzMtMWE0NS00YmY1LTk4OTYtM2NiNWU3ZjhkMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKTRgWRPb0c49klgikOKNsQTsxLDaGOV1e/ G228hVYtNXhSCEqfs9UocEltWN4ApVxzJP2bdRuJ4rwEufUtdVdOdK7V4naZUM9I wFc2VjoF6WNMzWlmcy3MCV2J7EscbtuMF7H3TrHNJylL5IkHx8oI3iBEEthIgxan 2NWvJwZel2ZAurlwCblxjB03BiUf/464gaSrWLT0FiGZWs1KEmODp0QZx7naZPEw qqkX5mjrwwQVN4ImYjdpn5144WOniLdvwoaXtCfxdZ+ONxvmsws7JhawFHh73ESy W61iyUpAzyBcUNCiZiSeNGzpvozBWys3mj0V4D3v4C50oyRqHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJCPJ+qvxv+cGetdzVnSkvteRjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEy ZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2ODBhYjBlMzYvN2I1ODcyZGEtMWZiYi0z MzhjLWI2MjctYzc2MTE5ZmUzZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQxMmYwMzUtYjM3Ni00ODA3LWE4 YWMtZTk4NjgwYWIwZTM2LzA0MTJmMDM1LWIzNzYtNDgwNy1hOGFjLWU5ODY4MGFi MGUzNi5jcmwwHwYDVR0jBBgwFoAUiXGp/4PgRhbYPlvneCsT+IQp8HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEyZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2 ODBhYjBlMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8WVwtVKTE0JiR27Dh9Im9BUAEvkIr7w5/6+p00H/UIfe83AsxohN9+ ZiinsPBIMVKoHsaXjuK4Y7RmK2KIDdvYnXVP+kIYY/9lZyBy56Zfu6zMkQFRY8o2 JP0H1KT67l42CiYfqKmvJolvOefPN3C5/tU/uQuS+L+OsJMg0FOOgnyw56vofZue HpveVfnm91xdnAUZ8zgcwMs3c08qr87V80SXSkn5vC92cvmWWO0LP4LEGuKzKfUs 15OwpiFKNgIi4gg0fjcIksZxWlXjuIdipgrXL3tnu4T68bAVppIpJhGe90Jq70Ia BUxPR8Zo45fgtMqfVcpX8PnKrAj/Sxw= -----END CERTIFICATE-----Generated at Tue Sep 22 18:56:13 2026 by rpki-client