$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5db5bb7f-cdf4-3cad-a693-e7165ec71610.roa File: 5db5bb7f-cdf4-3cad-a693-e7165ec71610.roa (raw, json) Hash identifier: W9QLA8/84FCrPqmtI90yvNJU6vE+/3VJhEoAMRjrp6I= Subject key identifier: 47:59:6C:2D:96:C0:3C:BE:54:82:3A:BE:76:CC:44:BD:7A:6D:BB:4B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3FAD2859DF35A98141EC9A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5db5bb7f-cdf4-3cad-a693-e7165ec71610.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 74.2.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:28:59:df:35:a9:81:41:ec:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=bae57a41-030e-4685-8736-5d295dbcd092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:40:7f:2c:71:96:22:69:d0:34:9e:ea:e2: c7:c9:42:a6:0b:73:04:8d:68:32:e4:3c:0b:0f:d3: b1:f6:8d:8e:11:09:86:6d:04:82:62:af:ad:de:87: 5d:96:e4:ed:87:15:16:4b:17:ff:84:78:b2:fe:dc: 2c:cd:b1:c2:e9:c7:f2:d1:4e:6c:98:4c:25:05:85: 7d:fb:4c:07:6d:82:cb:14:6c:cf:99:19:18:34:c5: 9e:70:71:da:05:1c:7e:5b:54:f6:26:d1:ac:ec:a3: cf:fe:c3:59:4a:dc:b5:fc:81:2a:0f:2b:68:37:58: 3b:a4:4d:f0:c5:83:c2:f2:8a:6c:f3:a1:de:4f:b2: 62:7f:3d:de:52:dc:cb:03:ce:6b:45:e5:62:80:cc: 3b:cb:e4:de:94:a3:fa:55:38:01:69:82:68:18:86: a5:e0:8b:52:af:93:bf:f4:cc:73:13:d9:6e:41:e7: f7:ed:25:70:a4:a7:d3:8c:11:5b:a2:40:ba:6a:ac: 96:53:c2:47:a5:63:12:b0:15:ae:39:68:37:d7:b4: 72:cd:0c:65:f2:50:4c:f8:29:8b:b7:28:c4:6e:27: cb:c0:c4:7f:e9:f0:c4:7f:ca:99:3f:75:93:50:19: 43:24:f7:f8:42:38:46:88:c5:4a:a5:9b:48:61:3c: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:59:6C:2D:96:C0:3C:BE:54:82:3A:BE:76:CC:44:BD:7A:6D:BB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5db5bb7f-cdf4-3cad-a693-e7165ec71610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:18:4a:1c:c6:82:ec:88:1b:c0:81:d2:e5:a3:f7:0e:82:3f: 55:49:e1:7d:7a:bd:37:1f:cc:25:bc:1b:23:85:74:2b:a9:a6: f4:2a:02:8d:73:51:a1:df:51:d8:ed:79:03:89:d9:2e:e3:4f: ad:5c:4b:4c:80:7c:ac:18:d3:d2:4f:df:bb:7b:c3:ef:9d:f6: 4c:4c:6c:21:36:58:c2:d5:01:83:0d:63:e6:4a:19:0c:4d:9c: e1:51:2e:c4:9f:57:0d:f1:f6:fc:a1:21:2e:83:9e:e5:f0:00: fa:91:37:72:e8:00:ac:a2:1b:f9:f3:d5:92:01:58:92:6e:db: f1:b6:f8:f7:67:26:8d:90:a7:fc:5d:9c:bd:79:0e:ea:2c:44: d2:f4:11:95:c2:ef:50:21:26:76:ca:21:6a:38:9c:a5:42:3e: 07:fe:59:55:e9:a9:91:55:7f:65:d9:05:23:d6:da:b5:1d:a3: 3a:16:64:92:62:58:96:b0:97:e4:b3:f5:2e:b4:01:cf:e3:54: e2:94:aa:b3:82:cc:a8:c2:5b:23:3c:aa:18:9c:6f:15:36:ba: 0f:3b:95:99:d9:f4:80:5e:ac:0d:bf:92:d3:1b:b0:99:a8:32: 8f:99:89:51:45:c2:1d:cd:6f:f1:b7:21:ff:17:e3:19:6f:99: 09:07:26:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rShZ3zWpgUHsmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YmFlNTdhNDEtMDMwZS00Njg1LTg3MzYtNWQyOTVkYmNkMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChAfyxxliJp0DSe6uLHyUKmC3MEjWgy5DwL D9Ox9o2OEQmGbQSCYq+t3oddluTthxUWSxf/hHiy/twszbHC6cfy0U5smEwlBYV9 +0wHbYLLFGzPmRkYNMWecHHaBRx+W1T2JtGs7KPP/sNZSty1/IEqDytoN1g7pE3w xYPC8ops86HeT7Jifz3eUtzLA85rReVigMw7y+TelKP6VTgBaYJoGIal4ItSr5O/ 9MxzE9luQef37SVwpKfTjBFbokC6aqyWU8JHpWMSsBWuOWg317RyzQxl8lBM+CmL tyjEbifLwMR/6fDEf8qZP3WTUBlDJPf4QjhGiMVKpZtIYTyFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdZbC2WwDy+VII6vnbMRL16bbtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWRiNWJiN2YtY2RmNC0z Y2FkLWE2OTMtZTcxNjVlYzcxNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgYShzGguyIG8CB0uWj9w6CP1VJ4X16vTcfzCW8GyOFdCuppvQqAo1z UaHfUdjteQOJ2S7jT61cS0yAfKwY09JP37t7w++d9kxMbCE2WMLVAYMNY+ZKGQxN nOFRLsSfVw3x9vyhIS6DnuXwAPqRN3LoAKyiG/nz1ZIBWJJu2/G2+PdnJo2Qp/xd nL15DuosRNL0EZXC71AhJnbKIWo4nKVCPgf+WVXpqZFVf2XZBSPW2rUdozoWZJJi WJawl+Sz9S60Ac/jVOKUqrOCzKjCWyM8qhicbxU2ug87lZnZ9IBerA2/ktMbsJmo Mo+ZiVFFwh3Nb/G3If8X4xlvmQkHJkw= -----END CERTIFICATE-----Generated at Tue Sep 22 13:57:40 2026 by rpki-client