$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/447f68b7-34d9-3872-8c3e-6eda4049c94e.roa File: 447f68b7-34d9-3872-8c3e-6eda4049c94e.roa (raw, json) Hash identifier: xcttCBhp6xKovuuFrGDzA3VoQvQ7+xByTmxpOXFbn1g= Subject key identifier: 04:0A:D5:D3:86:C8:C8:72:D6:CB:19:CF:E4:ED:29:E1:2C:52:EC:41 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F74B82D2A59ED8E31C9C46CB0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/447f68b7-34d9-3872-8c3e-6eda4049c94e.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 74.2.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2d:2a:59:ed:8e:31:c9:c4:6c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=bb8bba2c-bd44-4bba-8ccd-81238de8a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:75:d4:8d:10:d4:f4:f1:ac:33:a6:eb:3b: bd:2f:7f:7c:52:89:4a:20:c0:b4:68:e4:98:7e:69: c3:96:4b:ce:71:cd:62:e8:14:7a:9f:ac:b1:ae:28: a7:64:c8:cb:12:7a:5b:27:77:b0:a8:ab:5f:70:33: 90:68:5d:f2:0c:21:7c:76:ab:9e:16:b5:4c:38:33: 6d:b1:ad:6f:38:00:76:bc:fa:09:35:b3:9f:4c:c5: 14:5f:a5:d6:f8:26:23:29:7a:02:bc:01:a0:8a:6a: ac:93:1d:fc:92:96:49:b7:41:b3:44:68:69:7a:12: 74:9b:94:e5:67:5a:6a:ed:4b:3c:21:02:ac:41:40: 8c:17:9c:5e:2b:27:03:e0:99:70:05:08:7a:76:b2: 66:91:51:9e:03:78:4e:42:61:fe:b5:80:6e:fc:4a: 74:f0:98:75:e6:51:34:80:e9:5a:64:22:b9:82:e7: 0b:79:40:59:8d:6a:da:1d:0b:7d:9a:c2:52:4e:0a: 2d:7d:1c:85:fc:38:56:49:10:38:53:35:40:42:b5: 91:e6:08:58:f4:e0:40:71:2b:85:38:1f:69:ff:c0: 09:1b:07:85:b2:03:8e:1d:13:ba:e1:c5:6d:63:da: 9a:77:d8:06:32:c4:8a:ad:de:db:ec:d9:5b:14:a4: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:D5:D3:86:C8:C8:72:D6:CB:19:CF:E4:ED:29:E1:2C:52:EC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/447f68b7-34d9-3872-8c3e-6eda4049c94e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d5:fe:00:ba:d2:b3:c4:6b:16:b8:c9:1b:c5:60:35:63:99: ac:e3:e9:2f:98:eb:28:4d:c1:c6:b9:dc:c4:8b:76:aa:c0:06: 18:6a:b7:f1:bc:33:45:3d:0f:a5:9e:0d:c9:65:b8:ea:1a:33: aa:1e:af:ea:9f:a0:f7:0b:ab:01:e5:94:f3:24:54:e0:39:e4: 2f:2a:ec:60:37:eb:48:d9:c2:8e:a3:5b:b0:5d:df:2c:86:75: 81:a7:c1:f6:51:83:2f:e1:cb:8d:ee:f8:8c:6b:18:ae:f3:8d: 7e:30:9b:3d:41:58:1e:8d:71:cd:de:1b:48:2f:e6:d3:fe:96: 62:ad:8d:e2:c3:3d:83:6d:f5:12:2a:d8:95:e8:f5:9e:5c:b9: 71:51:ce:be:db:4b:18:d0:0e:19:81:01:95:c8:55:45:be:92: 20:a6:c9:92:3a:25:e9:3c:ab:3e:41:35:09:fc:6f:72:6f:84: 8f:83:ce:a1:ae:b3:b1:07:48:c6:55:f2:51:42:f7:eb:d6:68: dc:de:a9:24:4a:4f:8c:bc:6d:30:d4:94:89:97:a2:b5:73:88: ce:d0:dd:6a:5a:a4:e1:8e:1c:11:ea:0d:8e:12:99:53:f8:e2: 66:cc:22:1c:77:a6:c3:05:77:b8:0d:10:28:94:a8:1d:58:f5: d7:35:39:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uC0qWe2OMcnEbLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk YmI4YmJhMmMtYmQ0NC00YmJhLThjY2QtODEyMzhkZThhMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2et11I0Q1PTxrDOm6zu9L398UolKIMC0aOSY fmnDlkvOcc1i6BR6n6yxriinZMjLEnpbJ3ewqKtfcDOQaF3yDCF8dqueFrVMODNt sa1vOAB2vPoJNbOfTMUUX6XW+CYjKXoCvAGgimqskx38kpZJt0GzRGhpehJ0m5Tl Z1pq7Us8IQKsQUCMF5xeKycD4JlwBQh6drJmkVGeA3hOQmH+tYBu/Ep08Jh15lE0 gOlaZCK5gucLeUBZjWraHQt9msJSTgotfRyF/DhWSRA4UzVAQrWR5ghY9OBAcSuF OB9p/8AJGweFsgOOHRO64cVtY9qad9gGMsSKrd7b7NlbFKR1dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQK1dOGyMhy1ssZz+TtKeEsUuxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDQ3ZjY4YjctMzRkOS0z ODcyLThjM2UtNmVkYTQwNDljOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHV/gC60rPEaxa4yRvFYDVjmazj6S+Y6yhNwca53MSLdqrABhhqt/G8 M0U9D6WeDclluOoaM6oer+qfoPcLqwHllPMkVOA55C8q7GA360jZwo6jW7Bd3yyG dYGnwfZRgy/hy43u+IxrGK7zjX4wmz1BWB6Ncc3eG0gv5tP+lmKtjeLDPYNt9RIq 2JXo9Z5cuXFRzr7bSxjQDhmBAZXIVUW+kiCmyZI6Jek8qz5BNQn8b3JvhI+DzqGu s7EHSMZV8lFC9+vWaNzeqSRKT4y8bTDUlImXorVziM7Q3WpapOGOHBHqDY4SmVP4 4mbMIhx3psMFd7gNECiUqB1Y9dc1OZw= -----END CERTIFICATE-----Generated at Sun Oct 11 15:03:13 2026 by rpki-client