$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa File: 688ac534-050c-3795-a67f-345716db725a.roa (raw, json) Hash identifier: xn5YWniA9K9CHM9gyIxw/QxpTKQT2tZM6hEu5VJqzKM= Subject key identifier: C8:A5:11:7B:FF:B4:4B:0F:2C:8A:19:5A:02:02:0D:EC:5B:2A:63:AA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D6AAAAC69AF170B287878A500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 213738 IP address blocks: 74.1.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ac:69:af:17:0b:28:78:78:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=0564699b-92b3-48cd-a732-1bd426dd4de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:25:c0:a1:58:1b:71:0d:75:d7:d5:2f:01: a5:d0:45:88:54:de:7b:cb:65:31:fa:8c:80:84:01: 68:b8:a9:41:05:ac:f3:5b:b5:a4:ca:0c:0d:0c:fb: 38:b8:a4:29:34:48:29:aa:58:93:cd:5c:f9:f8:3a: 08:5c:8c:0b:4f:64:bd:11:50:dd:86:15:86:63:06: 7f:43:f3:8e:3a:fd:b1:a3:e7:83:0f:f8:1f:48:77: 0d:87:18:3a:da:d4:bd:57:03:5b:b8:7d:76:45:af: 50:9d:0d:aa:28:c5:39:50:1c:78:98:4a:31:0a:3b: da:9e:f6:69:54:1c:21:55:11:bd:09:e1:02:72:45: 0b:7d:68:a8:6c:5c:33:6f:b3:0d:51:0d:a0:f6:d4: ff:f2:81:9b:eb:47:da:f3:13:2c:4d:67:87:a5:60: 64:9a:3a:16:d9:e6:d4:08:63:39:58:61:5f:2a:44: 19:01:4d:33:d9:2d:73:1b:fa:e1:b9:ac:31:3e:78: fc:d6:dc:9a:65:38:9f:9d:57:6e:44:e8:12:d6:44: 2e:ba:13:56:5c:ac:5f:5e:f7:d6:8a:4b:96:33:96: 8f:1c:f6:2b:8f:fb:61:ec:73:a6:c7:9a:15:e2:a5: d3:f9:fa:62:93:07:6c:21:eb:e9:5b:9b:10:44:7c: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A5:11:7B:FF:B4:4B:0F:2C:8A:19:5A:02:02:0D:EC:5B:2A:63:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f8:e0:64:79:ec:35:80:dd:19:82:be:55:0a:f9:e8:03:1e: 7e:0c:7e:3f:1d:3a:05:54:82:a9:95:48:69:30:63:e8:c3:46: 28:7f:90:b3:df:cb:dc:09:ef:9d:51:e8:12:f4:1d:d1:f0:63: 62:6b:4a:7f:5e:60:3e:0d:31:9b:ee:af:af:63:7e:30:2d:bb: 0f:1c:26:fd:1c:ae:b8:3e:67:b5:5e:16:c7:b7:d0:e0:81:56: b7:0c:ee:29:6f:ce:a3:8a:15:cc:24:cb:9d:72:bd:07:93:92: f5:4a:d9:e2:e9:5b:12:34:4c:18:c2:11:54:22:9a:85:5c:2d: 02:3d:80:9f:8d:ac:77:07:51:82:22:d9:c8:8b:5a:ea:8b:df: 1d:d0:1d:73:27:74:8c:de:03:d4:a7:3e:1c:b2:93:19:81:62: d0:c0:9e:00:c1:61:f3:f0:bc:05:19:d4:5e:00:75:e4:ef:3b: 80:fa:db:74:ed:af:cc:1e:a7:c6:22:68:51:fb:13:11:50:5e: 5f:fc:2b:6e:45:11:4c:c5:0e:3e:de:27:2e:7d:a6:a8:bf:a8: 3e:57:26:52:8d:d7:aa:4e:38:0f:ce:7f:69:ff:2a:d1:ae:7c: 71:f7:3c:78:24:35:76:30:c4:0a:ae:08:35:4e:0d:17:a0:db: 97:8d:15:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqxprxcLKHh4pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MDU2NDY5OWItOTJiMy00OGNkLWE3MzItMWJkNDI2ZGQ0ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFglwKFYG3ENddfVLwGl0EWIVN57y2Ux+oyA hAFouKlBBazzW7WkygwNDPs4uKQpNEgpqliTzVz5+DoIXIwLT2S9EVDdhhWGYwZ/ Q/OOOv2xo+eDD/gfSHcNhxg62tS9VwNbuH12Ra9QnQ2qKMU5UBx4mEoxCjvanvZp VBwhVRG9CeECckULfWiobFwzb7MNUQ2g9tT/8oGb60fa8xMsTWeHpWBkmjoW2ebU CGM5WGFfKkQZAU0z2S1zG/rhuawxPnj81tyaZTifnVduROgS1kQuuhNWXKxfXvfW ikuWM5aPHPYrj/th7HOmx5oV4qXT+fpikwdsIevpW5sQRHysXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMilEXv/tEsPLIoZWgICDexbKmOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg4YWM1MzQtMDUwYy0z Nzk1LWE2N2YtMzQ1NzE2ZGI3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr44GR57DWA3RmCvlUK+egDHn4Mfj8dOgVUgqmVSGkwY+jDRih/kLPf y9wJ751R6BL0HdHwY2JrSn9eYD4NMZvur69jfjAtuw8cJv0crrg+Z7VeFse30OCB VrcM7ilvzqOKFcwky51yvQeTkvVK2eLpWxI0TBjCEVQimoVcLQI9gJ+NrHcHUYIi 2ciLWuqL3x3QHXMndIzeA9SnPhyykxmBYtDAngDBYfPwvAUZ1F4AdeTvO4D623Tt r8wep8YiaFH7ExFQXl/8K25FEUzFDj7eJy59pqi/qD5XJlKN16pOOA/Of2n/KtGu fHH3PHgkNXYwxAquCDVODReg25eNFZw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:03:34 2026 by rpki-client