$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa File: d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa (raw, json) Hash identifier: HHT5slGwgnvlx8qinHtwWF4xtK1DB2fYXC8eY28h/P0= Subject key identifier: A6:C8:0E:A3:0F:69:AC:3D:03:80:72:EB:1E:B1:96:81:E3:DF:E5:65 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584F6F22F72275F79C1047823440 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 12208 IP address blocks: 74.209.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:f7:22:75:f7:9c:10:47:82:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=721be505-f82b-43d6-979f-373521e38d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:f0:8d:d7:9e:6d:02:25:0d:03:cd:a7:f2: b9:84:a1:dc:3c:fa:02:3f:2a:6b:2f:e9:3f:10:7c: 2b:b1:30:21:33:a1:a4:c3:9a:89:eb:be:9e:27:4b: 11:27:4c:8c:50:85:70:93:cb:08:c4:6e:09:43:b4: d4:51:e5:aa:c4:8d:0d:15:77:bc:98:8c:5f:fa:13: b1:2a:79:0e:52:75:9f:de:95:5a:b6:d3:ac:ca:63: 01:87:fe:6f:a7:81:51:cf:ab:e0:3c:a1:50:08:17: db:a5:d9:d6:64:be:83:3b:b9:b5:35:c4:65:0b:b5: 8a:ee:45:8b:9f:be:cf:cc:84:8e:01:ba:d3:88:e3: b7:a6:a9:18:05:2e:01:b1:b4:93:7f:b0:be:7e:8c: dd:e9:30:7f:b6:f0:30:b7:cb:cd:cb:7a:28:e8:25: d9:fe:8e:cd:4a:64:bd:0b:01:e3:a1:cf:50:05:01: f6:3d:be:9c:39:1d:d4:e4:fb:08:70:d6:2e:90:f3: 07:ac:d5:31:85:c1:af:16:f2:2d:1b:3d:25:5f:26: 4f:f0:76:8c:ab:b0:5a:a4:17:ad:ff:43:8c:83:44: 3d:ea:97:7f:09:0c:38:28:35:3f:f8:62:52:a8:34: a3:ac:92:39:89:83:e8:bc:03:02:ba:3f:0a:3e:03: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C8:0E:A3:0F:69:AC:3D:03:80:72:EB:1E:B1:96:81:E3:DF:E5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 74.209.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:47:d9:f7:c5:6b:6b:c0:f6:6f:7b:1e:05:38:15:42:20:6c: 68:56:d2:f4:4b:e0:ca:73:d8:24:85:f7:87:18:36:91:18:11: 37:50:4b:8a:b4:c4:aa:0a:8d:c6:65:87:80:4d:27:32:fc:f7: bb:91:cb:da:2e:c9:85:6c:ba:47:0f:fc:0e:12:be:60:a0:49: c8:34:ad:05:60:70:82:29:bb:e4:bb:a7:0b:b1:bc:7a:ab:ae: 7e:47:99:c6:57:ad:bd:17:a1:dd:f2:e7:74:1d:8c:29:74:fb: 25:78:a7:a9:89:30:a1:eb:3d:33:74:39:f8:13:f5:68:1c:8c: 9f:d1:11:3b:5f:97:15:bb:cc:34:f6:e0:a5:01:b5:1c:e0:86: 13:96:e4:53:61:c7:b6:f7:74:d9:3d:9e:4a:db:30:66:5e:c7: b5:b9:3d:c3:8b:83:8a:30:58:7f:a8:23:09:50:85:38:66:3f: 95:d5:9c:2a:3c:3a:0f:07:7f:1e:4d:76:ed:1b:38:d0:ff:c3: f6:98:79:8f:54:05:3b:ff:b6:89:63:42:cb:65:a2:94:69:79: b5:ef:90:6b:f0:70:22:f6:37:00:8a:12:0b:50:81:8d:91:3e: 6f:3d:73:fe:ac:93:80:7f:f4:bd:83:f6:00:15:a6:d1:89:ce: 37:3a:e0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvcidfecEEeCNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzIxYmU1MDUtZjgyYi00M2Q2LTk3OWYtMzczNTIxZTM4ZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aXwjdeebQIlDQPNp/K5hKHcPPoCPyprL+k/ EHwrsTAhM6Gkw5qJ676eJ0sRJ0yMUIVwk8sIxG4JQ7TUUeWqxI0NFXe8mIxf+hOx KnkOUnWf3pVattOsymMBh/5vp4FRz6vgPKFQCBfbpdnWZL6DO7m1NcRlC7WK7kWL n77PzISOAbrTiOO3pqkYBS4BsbSTf7C+fozd6TB/tvAwt8vNy3oo6CXZ/o7NSmS9 CwHjoc9QBQH2Pb6cOR3U5PsIcNYukPMHrNUxhcGvFvItGz0lXyZP8HaMq7BapBet /0OMg0Q96pd/CQw4KDU/+GJSqDSjrJI5iYPovAMCuj8KPgMVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbIDqMPaaw9A4By6x6xloHj3+VlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvZDI4YzBkOTEtMzlhOS0z ZGEyLThmYWQtZDFjYmQwOWY4MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVH2ffFa2vA9m97HgU4FUIgbGhW0vRL4Mpz2CSF94cYNpEYETdQS4q0 xKoKjcZlh4BNJzL897uRy9ouyYVsukcP/A4SvmCgScg0rQVgcIIpu+S7pwuxvHqr rn5HmcZXrb0Xod3y53QdjCl0+yV4p6mJMKHrPTN0OfgT9WgcjJ/RETtflxW7zDT2 4KUBtRzghhOW5FNhx7b3dNk9nkrbMGZex7W5PcOLg4owWH+oIwlQhThmP5XVnCo8 Og8Hfx5Ndu0bOND/w/aYeY9UBTv/toljQstlopRpebXvkGvwcCL2NwCKEgtQgY2R Pm89c/6sk4B/9L2D9gAVptGJzjc64Ls= -----END CERTIFICATE-----Generated at Sun Oct 11 03:48:19 2026 by rpki-client