$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ca11e80-530a-32c5-8126-63f4cfd031a0.roa File: 1ca11e80-530a-32c5-8126-63f4cfd031a0.roa (raw, json) Hash identifier: a6HI0OmEkn+WjFmh+WZf0yqAshZwdonNObekFVwePvA= Subject key identifier: F4:EA:AC:BB:0B:5C:AB:0D:C1:9D:EE:BE:38:21:92:8D:46:81:12:F3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F2957D269D6B38FC2932E0980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ca11e80-530a-32c5-8126-63f4cfd031a0.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 834 IP address blocks: 74.2.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:d2:69:d6:b3:8f:c2:93:2e:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=c04583fd-1c6c-4c0c-806f-055f9a888b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:35:50:a4:3b:c4:c7:ac:35:76:eb:4d:7a: 4c:06:44:3f:0e:79:b2:27:f2:66:29:98:5d:11:71: d7:ab:d1:07:1b:19:03:c2:d7:f5:bb:31:55:63:03: b5:58:33:15:a1:94:e4:d8:13:e4:4d:bc:c6:81:e1: 20:0f:db:e6:9e:15:37:c0:3b:4b:ca:68:2b:9c:75: 6a:65:56:dc:e3:32:49:0d:6c:e5:cc:81:f2:e9:5e: 58:26:09:48:7d:11:ea:be:ae:69:15:3c:06:99:26: de:9c:23:78:af:f4:32:0b:d8:56:6b:04:a8:92:af: 3a:cd:67:25:c3:70:e3:e6:d2:98:44:7a:6c:db:ad: ab:e4:26:30:fb:2c:de:d8:42:22:ca:f7:de:63:86: cc:76:21:da:22:9b:b7:c0:bd:ee:08:2b:a6:10:1c: a6:90:a7:4d:57:30:12:d1:b0:e8:e1:be:e0:ac:bc: a8:e1:24:8f:21:25:47:5f:6a:db:39:57:08:a2:2d: 3f:ff:34:09:d3:d2:91:87:e4:05:6d:14:71:14:c0: 67:d0:97:ff:49:b5:bd:5a:27:9e:c2:11:ee:cd:f7: 39:af:dc:fc:14:bc:41:42:f7:d6:56:ee:b0:f2:f0: 4b:fb:82:d2:b2:66:e5:36:df:3c:9b:40:ef:aa:a7: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EA:AC:BB:0B:5C:AB:0D:C1:9D:EE:BE:38:21:92:8D:46:81:12:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ca11e80-530a-32c5-8126-63f4cfd031a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:33:b8:cc:af:1c:d4:ad:2a:d3:88:68:ac:d4:5d:f8:39:ae: 1a:cc:99:2b:07:fb:bf:1d:21:8b:55:c7:33:ed:72:f4:91:cf: b0:7f:dd:5e:d0:85:10:45:bb:0c:c9:55:84:ea:c7:d2:e7:30: f9:23:61:66:96:2a:47:29:78:4f:9e:12:e2:27:24:11:b6:57: d8:a1:8c:a5:57:b4:db:f6:6c:87:ce:a2:57:36:76:0b:26:12: 54:c6:5c:8f:51:9a:4d:4b:40:9f:35:c9:db:bc:64:d4:84:c3: 20:7f:ba:92:ac:21:84:09:8b:55:e7:ff:66:0d:b8:9b:7b:8c: f5:5b:c0:3d:7e:d7:62:55:9e:6b:d2:76:f8:dd:29:36:df:c8: 19:96:34:a0:80:dc:4c:e9:e9:9c:d2:d0:fe:6c:67:63:ce:ba: 91:01:28:8b:b2:4f:e0:78:e1:9d:bb:48:e1:ef:ae:28:7f:95: fc:5d:1e:5d:05:f8:18:4f:1c:a0:ef:57:92:a1:fd:9b:68:52: c1:0a:c4:42:e5:50:a9:21:1b:00:7f:16:2f:a0:0c:bb:4e:92: dc:23:d8:a3:d4:91:c5:f1:07:2f:fe:b7:a5:fe:bb:15:44:51: 23:12:5d:1a:cb:29:10:09:f0:2f:13:3f:18:c6:93:43:e0:64: ef:25:5c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV9Jp1rOPwpMuCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YzA0NTgzZmQtMWM2Yy00YzBjLTgwNmYtMDU1ZjlhODg4YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU41UKQ7xMesNXbrTXpMBkQ/DnmyJ/JmKZhd EXHXq9EHGxkDwtf1uzFVYwO1WDMVoZTk2BPkTbzGgeEgD9vmnhU3wDtLymgrnHVq ZVbc4zJJDWzlzIHy6V5YJglIfRHqvq5pFTwGmSbenCN4r/QyC9hWawSokq86zWcl w3Dj5tKYRHps262r5CYw+yze2EIiyvfeY4bMdiHaIpu3wL3uCCumEBymkKdNVzAS 0bDo4b7grLyo4SSPISVHX2rbOVcIoi0//zQJ09KRh+QFbRRxFMBn0Jf/SbW9Wiee whHuzfc5r9z8FLxBQvfWVu6w8vBL+4LSsmblNt88m0Dvqqf5BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTqrLsLXKsNwZ3uvjghko1GgRLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWNhMTFlODAtNTMwYS0z MmM1LTgxMjYtNjNmNGNmZDAzMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHozuMyvHNStKtOIaKzUXfg5rhrMmSsH+78dIYtVxzPtcvSRz7B/3V7Q hRBFuwzJVYTqx9LnMPkjYWaWKkcpeE+eEuInJBG2V9ihjKVXtNv2bIfOolc2dgsm ElTGXI9Rmk1LQJ81ydu8ZNSEwyB/upKsIYQJi1Xn/2YNuJt7jPVbwD1+12JVnmvS dvjdKTbfyBmWNKCA3Ezp6ZzS0P5sZ2POupEBKIuyT+B44Z27SOHvrih/lfxdHl0F +BhPHKDvV5Kh/ZtoUsEKxELlUKkhGwB/Fi+gDLtOktwj2KPUkcXxBy/+t6X+uxVE USMSXRrLKRAJ8C8TPxjGk0PgZO8lXPQ= -----END CERTIFICATE-----Generated at Sat Oct 3 11:05:41 2026 by rpki-client