$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08e947b1-ed0c-3d5a-98be-0ac24dd0bd29.roa File: 08e947b1-ed0c-3d5a-98be-0ac24dd0bd29.roa (raw, json) Hash identifier: 3Ih3ZKGcmJU/jGK8xcT2bCWyXWR+H19TPiw03L2Q9Ls= Subject key identifier: 5A:44:DC:10:3A:7A:A3:9D:09:D9:56:9D:05:46:15:19:B4:87:82:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CB28719EEF9B8E627E84B4080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08e947b1-ed0c-3d5a-98be-0ac24dd0bd29.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 399989 IP address blocks: 74.0.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:19:ee:f9:b8:e6:27:e8:4b:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=7ad7e54c-b433-4ca0-8207-1918a73caa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c0:a0:a4:8b:8a:e1:aa:bf:27:32:ae:a4:ca: 75:9c:cf:4a:06:ad:d5:a0:d8:20:3d:32:58:e3:f8: 44:62:2d:3c:a8:48:98:9f:45:c5:a8:5c:15:96:e6: 86:f4:d1:5b:49:ef:27:44:93:1e:5a:fa:16:31:f9: 2b:eb:94:24:29:3c:f7:d9:f9:b5:f9:2b:38:80:e1: 4f:8a:54:3e:69:35:bd:d2:02:7e:f4:ff:6d:f6:41: e3:28:68:21:35:71:6c:4f:57:f9:12:0f:ff:77:27: 0e:40:62:18:27:1d:28:b4:90:55:9d:a8:b2:3f:0b: ca:d6:82:39:27:f0:4b:30:4e:20:c9:04:9a:c5:64: 1c:c6:39:17:e9:f9:90:84:9b:00:8a:be:71:74:2d: 53:a9:65:b3:0a:42:73:80:47:00:ab:f7:a9:ec:5e: fd:4c:c3:d8:fd:83:f5:e4:70:b7:8d:b9:48:90:60: 4d:58:99:55:44:3c:40:6a:2c:6d:7e:1f:39:48:0b: 68:fe:26:36:04:75:b8:b2:2f:1f:b9:52:fd:25:fc: 81:e6:a1:8d:61:da:01:10:91:57:60:5e:05:b9:fb: d5:eb:f9:a9:b7:ec:d5:ed:7a:44:3e:48:a2:ac:f6: bf:79:9e:d2:1a:1a:e3:96:7c:af:f1:4b:76:e7:7f: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:44:DC:10:3A:7A:A3:9D:09:D9:56:9D:05:46:15:19:B4:87:82:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08e947b1-ed0c-3d5a-98be-0ac24dd0bd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:b4:38:0b:e9:b2:56:2c:b9:e6:ea:52:20:c7:38:55:cb:89: 03:37:c8:e1:18:1b:f5:d7:88:a9:03:cf:e7:49:88:91:37:37: 22:53:be:9b:35:64:59:38:18:a8:32:46:36:3b:17:5a:29:f2: f6:96:d4:4c:29:95:4d:08:f4:fb:9b:cc:33:c5:45:d4:33:0e: 09:bc:00:57:fb:9a:2a:27:f2:f6:29:8e:02:4b:8e:84:d3:4b: f6:b9:9c:40:4c:e0:96:eb:f7:d3:73:16:bc:a9:50:d0:46:d5: 11:82:f6:00:10:62:45:18:01:d1:73:bc:b2:b0:ab:b5:3e:3a: 19:16:20:92:e7:8e:2f:17:57:1b:3b:55:7a:ce:4d:0c:2a:13: 3a:71:84:38:06:86:71:31:8b:2b:aa:5f:96:68:ca:0d:2f:8c: 4d:65:87:df:dc:9c:df:3c:5c:c3:80:df:75:14:b1:38:0a:d6: 6e:01:61:dc:a7:35:a1:fe:01:58:01:e3:88:14:8f:66:d6:6d: 10:39:ab:b8:4c:c3:c1:1b:5c:0c:83:cc:16:d3:7b:69:f4:e3: ea:61:55:14:b8:e4:62:a4:c4:d0:8f:0a:17:fe:2a:a6:8e:d6: 2f:90:a2:a2:9e:a4:19:e7:ab:a6:a1:22:fc:ad:77:37:6c:07: a1:6e:9a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhxnu+bjmJ+hLQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk N2FkN2U1NGMtYjQzMy00Y2EwLTgyMDctMTkxOGE3M2NhYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98CgpIuK4aq/JzKupMp1nM9KBq3VoNggPTJY 4/hEYi08qEiYn0XFqFwVluaG9NFbSe8nRJMeWvoWMfkr65QkKTz32fm1+Ss4gOFP ilQ+aTW90gJ+9P9t9kHjKGghNXFsT1f5Eg//dycOQGIYJx0otJBVnaiyPwvK1oI5 J/BLME4gyQSaxWQcxjkX6fmQhJsAir5xdC1TqWWzCkJzgEcAq/ep7F79TMPY/YP1 5HC3jblIkGBNWJlVRDxAaixtfh85SAto/iY2BHW4si8fuVL9JfyB5qGNYdoBEJFX YF4FufvV6/mpt+zV7XpEPkiirPa/eZ7SGhrjlnyv8Ut253/30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpE3BA6eqOdCdlWnQVGFRm0h4KyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDhlOTQ3YjEtZWQwYy0z ZDVhLTk4YmUtMGFjMjRkZDBiZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK60OAvpslYsuebqUiDHOFXLiQM3yOEYG/XXiKkDz+dJiJE3NyJTvps1 ZFk4GKgyRjY7F1op8vaW1EwplU0I9PubzDPFRdQzDgm8AFf7mion8vYpjgJLjoTT S/a5nEBM4Jbr99NzFrypUNBG1RGC9gAQYkUYAdFzvLKwq7U+OhkWIJLnji8XVxs7 VXrOTQwqEzpxhDgGhnExiyuqX5Zoyg0vjE1lh9/cnN88XMOA33UUsTgK1m4BYdyn NaH+AVgB44gUj2bWbRA5q7hMw8EbXAyDzBbTe2n04+phVRS45GKkxNCPChf+KqaO 1i+QoqKepBnnq6ahIvytdzdsB6FumtQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:46 2026 by rpki-client