$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3987c3e3-8033-3fe3-8772-4e4fb2a7ac78.roa File: 3987c3e3-8033-3fe3-8772-4e4fb2a7ac78.roa (raw, json) Hash identifier: G3IArrzJszlAvPNrenRJFcALV9oMAT42PSpOOH8G/Jw= Subject key identifier: D9:B9:E8:3C:2A:DE:C4:78:EA:C2:74:B0:33:25:CE:47:A9:6C:49:BA Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Certificate serial: 010D0C9F4328584E9BDAAE878657B72E255CD680 Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3987c3e3-8033-3fe3-8772-4e4fb2a7ac78.roa Signing time: Fri 24 Jul 2026 20:39:25 +0000 ROA not before: Fri 24 Jul 2026 20:39:25 +0000 ROA not after: Thu 22 Oct 2026 20:39:25 +0000 asID: 198949 IP address blocks: 74.201.100.0/24 maxlen: 24 74.201.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:da:ae:87:86:57:b7:2e:25:5c:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Validity Not Before: Jul 24 20:39:25 2026 GMT Not After : Oct 22 20:39:25 2026 GMT Subject: CN=d2e57279-8ccb-445b-8a0f-d6193ae45ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:7a:0d:11:e2:b8:0c:12:52:60:7e:e0:f6: f6:53:d2:1b:09:ec:fe:c6:ef:d3:8e:6b:3a:5a:d0: e0:4b:31:04:05:10:47:32:8b:60:de:2e:c1:bc:08: 36:ee:a7:df:43:84:c9:ca:5e:9c:59:d9:01:b7:82: 65:e8:3c:56:41:45:36:77:b0:c6:92:77:27:22:b3: f2:ea:6a:db:c3:9c:84:1d:c6:4c:cb:53:9a:90:09: 03:6f:3c:b3:08:68:2b:77:90:3c:f1:3b:d3:31:53: 6b:fd:0e:89:e1:11:cf:03:ad:30:f1:8a:8d:5f:b0: 6d:96:10:eb:a2:b1:38:f0:69:4e:3d:19:00:87:62: e5:60:25:15:17:5f:13:3a:74:32:1d:6c:85:24:f0: bb:03:8a:e5:3a:c6:45:8b:17:c7:e8:bf:98:98:76: 40:63:f5:69:6e:b8:9e:5e:ff:d0:97:0a:b6:0b:4c: 8b:79:b0:99:5e:7d:4c:3f:1a:1a:3d:b0:d8:da:bb: 60:2c:11:0e:a2:8a:7e:bb:55:71:1c:ef:16:02:7a: 4b:89:1e:5e:13:ff:20:f1:90:de:a6:ef:a3:de:76: 30:5d:ba:ed:e6:0a:72:35:96:59:47:26:6f:b9:c3: 27:1a:c9:18:a6:68:a1:f7:a4:43:09:0d:2c:5c:62: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B9:E8:3C:2A:DE:C4:78:EA:C2:74:B0:33:25:CE:47:A9:6C:49:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3987c3e3-8033-3fe3-8772-4e4fb2a7ac78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl X509v3 Authority Key Identifier: keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer sbgp-ipAddrBlock: critical IPv4: 74.201.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d6:00:ec:73:1a:0e:d4:92:50:78:6d:68:f0:64:5b:39:93: c0:28:ed:e5:2e:5c:54:41:b0:55:8a:7b:ae:bb:69:42:32:d5: e8:36:a0:f7:ce:dc:74:85:eb:29:85:c9:80:90:05:81:01:a4: cf:7e:9f:d5:60:a2:3e:49:cd:6b:82:d9:08:b2:3f:f3:d0:37: 1a:9c:b8:4b:14:7b:83:b0:f9:c1:37:3b:83:c4:13:0c:97:e9: a5:e7:ec:94:fa:92:aa:a1:b1:bd:6a:91:e5:58:2c:6b:a7:7e: 20:5b:43:ff:12:25:e2:ec:f1:a1:c1:e2:67:c6:7a:35:c2:1a: 5c:ed:85:d9:ca:2a:30:71:e9:8e:ae:cc:be:5a:b6:c1:4d:ac: ba:17:d9:45:e1:1e:72:7f:4c:fa:03:c7:cf:b1:f1:1c:aa:d6: 45:44:ab:b8:e0:26:57:39:05:bb:71:92:00:36:85:51:9e:de: e9:12:da:e0:1c:62:07:e4:24:60:1c:4a:86:ca:a4:c8:de:4f: 00:55:4b:4d:83:08:ce:6e:64:cf:33:f6:39:b4:43:28:fc:0b: 6f:4f:e8:79:37:b3:fd:8f:db:b1:ca:5f:00:f1:50:b7:5d:42: e9:60:de:c9:b1:d5:e9:60:ec:08:59:d4:70:6b:a8:39:e9:56: 1c:9c:50:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b2q6Hhle3LiVc1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni M2U4MB4XDTI2MDcyNDIwMzkyNVoXDTI2MTAyMjIwMzkyNVowLzEtMCsGA1UEAxMk ZDJlNTcyNzktOGNjYi00NDViLThhMGYtZDYxOTNhZTQ1YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHd6DRHiuAwSUmB+4Pb2U9IbCez+xu/Tjms6 WtDgSzEEBRBHMotg3i7BvAg27qffQ4TJyl6cWdkBt4Jl6DxWQUU2d7DGkncnIrPy 6mrbw5yEHcZMy1OakAkDbzyzCGgrd5A88TvTMVNr/Q6J4RHPA60w8YqNX7BtlhDr orE48GlOPRkAh2LlYCUVF18TOnQyHWyFJPC7A4rlOsZFixfH6L+YmHZAY/Vpbrie Xv/Qlwq2C0yLebCZXn1MPxoaPbDY2rtgLBEOoop+u1VxHO8WAnpLiR5eE/8g8ZDe pu+j3nYwXbrt5gpyNZZZRyZvucMnGskYpmih96RDCQ0sXGITgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm56Dwq3sR46sJ0sDMlzkepbEm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1 YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvMzk4N2MzZTMtODAzMy0z ZmUzLTg3NzItNGU0ZmIyYTdhYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5 MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm OWQ3Y2IzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSslkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjWAOxzGg7UklB4bWjwZFs5k8Ao7eUuXFRBsFWKe667aUIy1eg2oPfO 3HSF6ymFyYCQBYEBpM9+n9Vgoj5JzWuC2QiyP/PQNxqcuEsUe4Ow+cE3O4PEEwyX 6aXn7JT6kqqhsb1qkeVYLGunfiBbQ/8SJeLs8aHB4mfGejXCGlzthdnKKjBx6Y6u zL5atsFNrLoX2UXhHnJ/TPoDx8+x8Ryq1kVEq7jgJlc5BbtxkgA2hVGe3ukS2uAc YgfkJGAcSobKpMjeTwBVS02DCM5uZM8z9jm0Qyj8C29P6Hk3s/2P27HKXwDxULdd Qulg3smx1elg7AhZ1HBrqDnpVhycUOY= -----END CERTIFICATE-----Generated at Wed Jul 29 00:48:38 2026 by rpki-client