$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa File: 1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa (raw, json) Hash identifier: KI6RYDsaWPm+YxW5Fkvf+cRRHwu5Pa4cwTNlHmUY4Uc= Subject key identifier: AC:3A:AA:8B:50:92:91:16:FF:95:2E:90:AF:20:B5:BC:0B:79:B8:15 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CB6B7164F7E0B7E2B25FBF780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 212238 IP address blocks: 74.0.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:16:4f:7e:0b:7e:2b:25:fb:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=39b94be5-6443-423c-87f1-21b398896c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:8a:11:95:ad:ec:0e:bc:9a:ca:89:4b:6e: 88:99:66:1f:c6:77:bb:2b:81:3c:70:7d:e0:6b:de: b3:a2:a7:16:0f:19:3b:bf:53:76:35:d0:18:72:b4: b6:f5:0b:c6:ff:5b:b0:52:e4:54:d9:3e:6b:86:3a: 1f:c3:6c:b3:66:f8:86:83:46:5e:f4:34:25:1d:ad: fd:84:ba:bc:82:11:40:0a:15:0a:4f:22:44:97:ca: fe:e9:90:7c:19:ee:a6:32:9e:cc:a8:ba:8d:64:b4: 25:f5:eb:55:41:2a:00:95:eb:75:42:fc:04:aa:14: fd:cc:fc:09:da:ce:46:ee:7f:22:5d:bc:60:8c:a6: 7f:e3:67:87:2a:1a:9c:dd:c9:c1:24:03:95:c9:ec: 70:26:b0:96:e9:65:55:e2:19:2f:ec:ee:10:6e:07: 22:69:41:a5:f4:40:0e:6e:89:55:e7:d0:e4:a4:c8: 38:bd:6f:a9:25:26:2b:e9:e9:11:16:09:4d:37:4f: 19:fd:18:64:9c:c2:47:47:f6:40:47:b4:6c:5c:2a: 66:c1:53:c5:95:02:1c:f6:55:bc:c7:42:ec:83:ee: b8:ee:2f:74:ec:d5:be:f7:85:e5:d8:a1:9a:93:ca: c2:f8:7e:42:0d:f4:c4:06:af:e9:11:86:af:99:55: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:AA:8B:50:92:91:16:FF:95:2E:90:AF:20:B5:BC:0B:79:B8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1895c75a-73a6-3f25-8db5-c9c68e0d2c99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2e:cb:76:fb:76:a2:64:67:05:70:ca:52:af:f6:4c:b4:40: ac:3f:d0:3b:d2:44:7a:4f:17:8c:6f:ee:1c:75:05:5a:65:1c: f4:fa:8c:c6:23:05:ca:26:8b:10:2e:f2:15:51:9f:fb:f7:00: 24:be:8f:4d:86:70:aa:39:1c:47:00:24:29:29:e8:3c:c2:2d: 9c:85:cc:15:56:1b:bc:33:f4:dc:b1:b7:e6:dd:69:2d:59:5c: 3f:f5:ab:62:3a:33:fa:44:d5:e5:c0:b3:25:75:cb:a6:dc:63: 09:0a:4f:9d:a7:b2:c2:ed:2e:82:00:48:ec:4b:d9:d2:aa:6a: 99:10:56:52:31:fb:4b:96:4c:7f:12:c6:dd:6a:08:9c:03:59: dc:2b:60:9d:4c:1b:ea:52:f0:02:5a:d7:22:a2:79:68:a4:52: 1c:30:18:36:04:20:0c:53:30:3b:5c:1e:80:ce:81:3f:b1:a6: 83:ac:59:48:18:15:66:39:e3:c9:55:0b:0a:86:bf:1c:c5:15: cc:aa:36:2c:f5:b1:3d:3a:91:bb:4e:8b:8e:ad:cf:fb:85:26: b7:5f:10:61:93:d0:73:fc:bf:ed:16:61:42:0d:42:8b:a9:9b: 5e:8a:0e:b8:93:4c:a5:71:d5:8b:e2:4c:b0:99:4d:f8:7f:7b: e5:4e:ae:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2txZPfgt+KyX794AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzliOTRiZTUtNjQ0My00MjNjLTg3ZjEtMjFiMzk4ODk2YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6OKEZWt7A68msqJS26ImWYfxne7K4E8cH3g a96zoqcWDxk7v1N2NdAYcrS29QvG/1uwUuRU2T5rhjofw2yzZviGg0Ze9DQlHa39 hLq8ghFAChUKTyJEl8r+6ZB8Ge6mMp7MqLqNZLQl9etVQSoAlet1QvwEqhT9zPwJ 2s5G7n8iXbxgjKZ/42eHKhqc3cnBJAOVyexwJrCW6WVV4hkv7O4QbgciaUGl9EAO bolV59DkpMg4vW+pJSYr6ekRFglNN08Z/RhknMJHR/ZAR7RsXCpmwVPFlQIc9lW8 x0Lsg+647i907NW+94Xl2KGak8rC+H5CDfTEBq/pEYavmVVnEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw6qotQkpEW/5UukK8gtbwLebgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTg5NWM3NWEtNzNhNi0z ZjI1LThkYjUtYzljNjhlMGQyYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKguy3b7dqJkZwVwylKv9ky0QKw/0DvSRHpPF4xv7hx1BVplHPT6jMYj BcomixAu8hVRn/v3ACS+j02GcKo5HEcAJCkp6DzCLZyFzBVWG7wz9Nyxt+bdaS1Z XD/1q2I6M/pE1eXAsyV1y6bcYwkKT52nssLtLoIASOxL2dKqapkQVlIx+0uWTH8S xt1qCJwDWdwrYJ1MG+pS8AJa1yKieWikUhwwGDYEIAxTMDtcHoDOgT+xpoOsWUgY FWY548lVCwqGvxzFFcyqNiz1sT06kbtOi46tz/uFJrdfEGGT0HP8v+0WYUINQoup m16KDriTTKVx1YviTLCZTfh/e+VOrng= -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:56 2026 by rpki-client