$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/621fd33b-dd16-3453-bd6c-70e5ea38c926.roa File: 621fd33b-dd16-3453-bd6c-70e5ea38c926.roa (raw, json) Hash identifier: r2H6+OJeJSQHqbV6P50EyLp/BZ0AcifQvTE+hsh5zlc= Subject key identifier: BE:D2:10:A4:E6:ED:43:64:30:2D:5E:B6:C8:00:9E:00:6A:A1:05:66 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CF9EDFC8811FB68F593268B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/621fd33b-dd16-3453-bd6c-70e5ea38c926.roa Signing time: Wed 25 Feb 2026 03:50:26 +0000 ROA not before: Wed 25 Feb 2026 03:50:26 +0000 ROA not after: Tue 26 May 2026 02:50:26 +0000 asID: 13737 IP address blocks: 74.1.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:ed:fc:88:11:fb:68:f5:93:26:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 25 03:50:26 2026 GMT Not After : May 26 02:50:26 2026 GMT Subject: CN=3db33881-b4e9-41a6-bc00-1be35deaccc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:c1:c9:e9:55:86:eb:0f:82:ea:01:3a:f8: b9:18:de:af:43:5d:56:a6:a1:ef:a6:7a:4d:11:ea: 04:37:28:83:bd:91:f9:d1:3c:1b:b8:8c:26:5c:18: 27:be:c0:4f:05:99:6d:68:d3:6c:64:2d:3c:a6:24: cd:7d:8a:aa:6e:67:cc:4e:f3:e6:34:a3:8d:df:41: 00:67:7c:41:b8:6b:32:d4:35:fb:42:bf:d0:c5:88: 06:1c:4e:9c:a3:ab:d3:9d:2d:c1:0f:09:e2:c5:8b: 7a:c3:9a:32:f1:6f:a4:86:7f:30:50:ad:ff:48:b4: f1:75:5c:d5:4e:77:9b:0c:74:cd:69:95:9f:2b:67: b5:45:0e:b9:90:7c:af:b8:88:ba:15:e7:33:38:ec: 53:c7:dc:0c:01:c1:96:23:53:ae:0e:0a:87:99:4d: 72:ad:eb:3a:f7:2e:42:6a:dd:96:c7:ab:f3:7b:3a: fd:8b:88:34:bd:81:14:a3:c8:f0:e9:39:5c:15:b6: fa:b8:4c:b9:0e:56:ff:40:9b:71:1f:83:f4:61:9c: b2:35:08:5e:f3:73:40:c6:55:48:40:9a:66:de:17: 63:81:a9:18:52:92:a2:74:02:7a:83:85:2d:a9:0d: f3:ea:90:22:07:97:4c:cf:f1:0d:3a:eb:6a:2d:72: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:10:A4:E6:ED:43:64:30:2D:5E:B6:C8:00:9E:00:6A:A1:05:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/621fd33b-dd16-3453-bd6c-70e5ea38c926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ed:a8:c4:d5:ee:a0:9b:ae:59:23:68:10:7e:4d:34:09:65: 2d:00:e3:0f:d1:41:f0:14:d8:bf:ee:ab:4c:ae:9b:b6:dc:2e: 7d:09:13:ba:fb:47:a3:33:8e:7b:76:68:11:b5:fa:92:10:91: d1:3c:8b:a8:9e:3a:de:4d:a7:14:79:07:4e:8c:7c:05:77:8f: 39:e9:4e:c3:7a:6f:dd:ef:5f:03:eb:a6:03:1a:54:91:fb:62: 7a:e6:1d:eb:c5:65:87:52:26:e2:58:7d:c7:f9:11:e2:1b:82: 68:7a:a9:06:c2:0d:78:bc:9f:0d:ec:5a:a9:67:bb:c8:d5:73: 9c:73:3d:b8:49:ec:c0:9d:21:3f:2a:f9:91:9b:8d:55:d0:e9: 24:c3:1c:e7:81:59:ec:a9:38:71:48:c3:fb:0e:7d:b1:e8:b2: cb:04:3e:c9:d3:e3:ea:15:dc:78:98:99:55:05:98:b5:7d:82: ff:47:5a:99:6a:61:ef:6d:14:3a:e0:f4:d0:09:7d:e7:16:86: 9f:79:7e:39:e0:39:ef:74:2a:bf:40:54:88:ae:7f:4e:34:29: c0:35:d6:6b:80:74:f6:02:06:db:fc:ed:e1:6a:14:f4:28:5f: 63:c9:ce:12:24:36:09:55:41:42:50:59:33:1e:59:b9:8f:2a: ce:28:48:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz57fyIEfto9ZMmi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyNTAzNTAyNloXDTI2MDUyNjAyNTAyNlowLzEtMCsGA1UEAxMk M2RiMzM4ODEtYjRlOS00MWE2LWJjMDAtMWJlMzVkZWFjY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR3ByelVhusPguoBOvi5GN6vQ11WpqHvpnpN EeoENyiDvZH50TwbuIwmXBgnvsBPBZltaNNsZC08piTNfYqqbmfMTvPmNKON30EA Z3xBuGsy1DX7Qr/QxYgGHE6co6vTnS3BDwnixYt6w5oy8W+khn8wUK3/SLTxdVzV TnebDHTNaZWfK2e1RQ65kHyvuIi6FeczOOxTx9wMAcGWI1OuDgqHmU1yres69y5C at2Wx6vzezr9i4g0vYEUo8jw6TlcFbb6uEy5Dlb/QJtxH4P0YZyyNQhe83NAxlVI QJpm3hdjgakYUpKidAJ6g4UtqQ3z6pAiB5dMz/ENOutqLXK7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7SEKTm7UNkMC1etsgAngBqoQVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjIxZmQzM2ItZGQxNi0z NDUzLWJkNmMtNzBlNWVhMzhjOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGztqMTV7qCbrlkjaBB+TTQJZS0A4w/RQfAU2L/uq0yum7bcLn0JE7r7 R6Mzjnt2aBG1+pIQkdE8i6ieOt5NpxR5B06MfAV3jznpTsN6b93vXwPrpgMaVJH7 YnrmHevFZYdSJuJYfcf5EeIbgmh6qQbCDXi8nw3sWqlnu8jVc5xzPbhJ7MCdIT8q +ZGbjVXQ6STDHOeBWeypOHFIw/sOfbHosssEPsnT4+oV3HiYmVUFmLV9gv9HWplq Ye9tFDrg9NAJfecWhp95fjngOe90Kr9AVIiuf040KcA11muAdPYCBtv87eFqFPQo X2PJzhIkNglVQUJQWTMeWbmPKs4oSHY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:56:26 2026 by rpki-client