$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/5e0afec6-9a17-3987-9a2b-17f0565d838c.roa File: 5e0afec6-9a17-3987-9a2b-17f0565d838c.roa (raw, json) Hash identifier: 1PRAvM35en/8DE0nbkA9Eh9mnJunJxlBYWrBJTjjei8= Subject key identifier: 79:35:A0:9D:34:B3:B2:B6:C9:54:A2:F9:AC:22:E4:CC:2B:CF:D2:C3 Certificate issuer: /CN=0a4e9324-9068-4a80-b6f1-835bdc3736e4 Certificate serial: 010D0C9F4328584F49745FBCBCCC7A649A630900 Authority key identifier: C2:3B:B5:77:D1:09:F1:79:CF:D4:BE:4E:EB:65:FB:91:C8:78:B0:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/5e0afec6-9a17-3987-9a2b-17f0565d838c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62584 IP address blocks: 74.63.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/0a4e9324-9068-4a80-b6f1-835bdc3736e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/0a4e9324-9068-4a80-b6f1-835bdc3736e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:5f:bc:bc:cc:7a:64:9a:63:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4e9324-9068-4a80-b6f1-835bdc3736e4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=70fc6509-385a-4fd6-bebe-c79b2ea37de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:b1:c8:b7:8a:49:a2:98:ad:a9:c5:86:db: 08:fe:d0:13:fa:ad:3d:9a:58:e8:fd:53:7f:08:d0: 65:ec:17:f1:25:a5:e8:0e:8a:f0:dd:32:af:be:53: e9:79:17:11:da:56:5e:c4:7c:a4:49:30:ec:52:7e: 52:ff:78:a6:2c:9e:67:3a:68:2d:d9:69:95:0c:a3: b0:1f:fc:9c:77:30:00:14:51:fa:80:43:54:05:a4: be:93:eb:ed:97:16:87:e6:46:eb:85:df:bc:18:6e: 9a:ad:7c:db:1d:13:09:26:97:40:d5:24:43:29:1e: 43:c0:7b:db:bb:a2:b3:47:d9:74:b6:11:58:f6:36: fe:be:f1:e6:8a:cf:2e:62:42:49:48:40:2d:8d:1f: 4f:2d:16:54:fb:ce:33:f8:49:ac:2e:62:b6:d7:f2: 3d:8e:da:79:01:bc:8a:22:47:fb:af:7e:84:57:2f: 5a:df:f4:af:bb:d4:34:f0:ba:b2:dc:c5:a6:11:5e: 8f:ff:5b:83:b2:3e:22:8e:9c:58:af:37:f4:53:36: b6:2f:43:ba:bc:0c:1e:03:95:dc:bc:3a:7f:60:31: 87:fe:6e:32:5e:b6:b6:6d:98:8c:21:c0:fb:0b:13: eb:bd:73:aa:40:ca:05:20:16:4b:29:65:45:f2:4d: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:35:A0:9D:34:B3:B2:B6:C9:54:A2:F9:AC:22:E4:CC:2B:CF:D2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/5e0afec6-9a17-3987-9a2b-17f0565d838c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/0a4e9324-9068-4a80-b6f1-835bdc3736e4.crl X509v3 Authority Key Identifier: keyid:C2:3B:B5:77:D1:09:F1:79:CF:D4:BE:4E:EB:65:FB:91:C8:78:B0:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4.cer sbgp-ipAddrBlock: critical IPv4: 74.63.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c5:78:9c:ce:45:5c:8c:a9:a4:cb:de:27:55:49:e6:fc:6c: e0:3b:95:dc:d9:4a:50:17:c0:10:70:8e:dd:a7:76:bd:ef:11: 4c:9a:fd:87:4f:bf:76:cc:00:78:0d:5e:40:97:89:98:74:c6: 5b:5a:0d:67:c0:ba:4c:42:76:1a:5e:5d:7b:ed:41:c0:5a:53: 5c:be:14:d2:21:01:bc:f2:4f:0e:a9:7f:03:0c:ca:e7:84:0e: f5:d9:88:f1:5e:54:57:77:e3:d3:7c:fe:29:dc:9b:e6:14:63: 34:d6:06:97:4b:9f:95:6a:64:05:14:6a:03:47:2c:de:33:75: 1d:f6:ce:bc:1a:56:f5:b1:f0:31:45:e9:54:fc:77:12:a6:4a: 40:1b:24:f0:1b:9e:ff:4a:a6:9b:9a:45:9e:a0:75:0b:c7:4a: de:1e:11:2d:76:64:4b:b6:9c:b3:e5:d7:a6:f3:c2:7e:c3:71: d9:68:93:a3:be:ea:18:56:cb:58:ba:94:80:ab:2a:c9:7a:ed: d6:60:1a:ea:5a:71:2b:33:67:41:8b:04:3e:d9:b3:67:5d:ce: 2b:cf:9c:45:d1:f8:f8:18:c4:0b:01:55:91:6d:6a:f7:ab:83: 9c:fa:45:59:9f:4e:5c:ec:43:8c:c6:4d:87:ef:df:15:75:3a: a9:23:89:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdF+8vMx6ZJpjCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0ZTkzMjQtOTA2OC00YTgwLWI2ZjEtODM1YmRjMzcz NmU0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzBmYzY1MDktMzg1YS00ZmQ2LWJlYmUtYzc5YjJlYTM3ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WqxyLeKSaKYranFhtsI/tAT+q09mljo/VN/ CNBl7BfxJaXoDorw3TKvvlPpeRcR2lZexHykSTDsUn5S/3imLJ5nOmgt2WmVDKOw H/ycdzAAFFH6gENUBaS+k+vtlxaH5kbrhd+8GG6arXzbHRMJJpdA1SRDKR5DwHvb u6KzR9l0thFY9jb+vvHmis8uYkJJSEAtjR9PLRZU+84z+EmsLmK21/I9jtp5AbyK Ikf7r36EVy9a3/Svu9Q08Lqy3MWmEV6P/1uDsj4ijpxYrzf0Uza2L0O6vAweA5Xc vDp/YDGH/m4yXra2bZiMIcD7CxPrvXOqQMoFIBZLKWVF8k0J+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk1oJ00s7K2yVSi+awi5Mwrz9LDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTRl OTMyNC05MDY4LTRhODAtYjZmMS04MzViZGMzNzM2ZTQvNWUwYWZlYzYtOWExNy0z OTg3LTlhMmItMTdmMDU2NWQ4MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGE0ZTkzMjQtOTA2OC00YTgwLWI2 ZjEtODM1YmRjMzczNmU0LzBhNGU5MzI0LTkwNjgtNGE4MC1iNmYxLTgzNWJkYzM3 MzZlNC5jcmwwHwYDVR0jBBgwFoAUwju1d9EJ8XnP1L5O62X7kch4sNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTRlOTMyNC05MDY4LTRhODAtYjZmMS04MzVi ZGMzNzM2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSj8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjFeJzORVyMqaTL3idVSeb8bOA7ldzZSlAXwBBwjt2ndr3vEUya/YdP v3bMAHgNXkCXiZh0xltaDWfAukxCdhpeXXvtQcBaU1y+FNIhAbzyTw6pfwMMyueE DvXZiPFeVFd349N8/incm+YUYzTWBpdLn5VqZAUUagNHLN4zdR32zrwaVvWx8DFF 6VT8dxKmSkAbJPAbnv9KppuaRZ6gdQvHSt4eES12ZEu2nLPl16bzwn7Dcdlok6O+ 6hhWy1i6lICrKsl67dZgGupacSszZ0GLBD7Zs2ddzivPnEXR+PgYxAsBVZFtaver g5z6RVmfTlzsQ4zGTYfv3xV1OqkjiXs= -----END CERTIFICATE-----Generated at Mon Sep 28 22:35:03 2026 by rpki-client