$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a5931a9-7f98-3181-81c4-fd2d55af97df.roa File: 8a5931a9-7f98-3181-81c4-fd2d55af97df.roa (raw, json) Hash identifier: EylCfmmBjC1pb5il1TH14FLslzy6GqoAV0GjT1CDfac= Subject key identifier: 0D:CA:79:AF:C8:44:CC:E5:E6:57:0E:30:4B:A2:32:09:4C:2C:9D:9C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F9028D8CD6FAD1A8800071DA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a5931a9-7f98-3181-81c4-fd2d55af97df.roa Signing time: Tue 20 Oct 2026 08:54:09 +0000 ROA not before: Tue 20 Oct 2026 08:54:09 +0000 ROA not after: Mon 18 Jan 2027 09:54:09 +0000 asID: 14618 IP address blocks: 74.1.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:28:d8:cd:6f:ad:1a:88:00:07:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 20 08:54:09 2026 GMT Not After : Jan 18 09:54:09 2027 GMT Subject: CN=82c89ed5-df5e-43a9-a9d5-4380cece4ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f9:8a:c9:1a:91:aa:08:36:3d:4c:8d:fe:95: 76:d9:2c:e1:91:6f:28:70:78:04:43:72:fd:9f:c3: 6e:7e:de:2e:41:c5:88:c9:d3:fa:26:c1:eb:d5:87: 7c:87:45:69:a3:08:40:a3:46:15:e5:be:bd:e6:f1: 37:d4:52:19:55:41:fe:22:94:88:52:bd:c3:e4:ff: f6:51:1b:0f:56:a7:1d:89:fa:9b:bd:25:1b:6c:5c: 20:66:8a:b1:e8:33:39:6c:3e:1c:12:60:33:1a:d0: 3d:39:b5:a5:c8:db:67:29:c9:40:fd:07:63:1a:9d: 0b:4e:92:a4:01:16:bc:64:49:28:9f:fa:43:b3:3f: ba:16:e8:22:7a:3e:81:89:ae:d3:77:de:8e:5b:98: f6:be:02:0b:63:75:6e:8a:a9:85:bd:fc:16:f2:28: e3:1c:ad:01:f4:0b:76:15:19:ad:13:67:c7:e8:72: e8:91:a6:f6:70:b4:5d:39:01:3d:e9:2b:67:ca:20: c9:b1:b9:a9:a0:a7:90:47:37:17:31:33:6c:ac:e6: 88:0b:f0:2f:2c:0e:9b:ff:28:dd:e2:c2:bd:bc:c7: c5:6c:4f:74:cf:c8:61:02:ba:e2:2f:00:20:65:88: 62:1b:9e:2c:19:d9:c5:15:da:e1:ca:c7:f7:5b:c3: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CA:79:AF:C8:44:CC:E5:E6:57:0E:30:4B:A2:32:09:4C:2C:9D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a5931a9-7f98-3181-81c4-fd2d55af97df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8c:11:9c:33:40:d8:03:e3:9e:1c:55:89:c4:c9:d5:1f:a2: 29:3a:50:76:78:18:25:fc:73:6b:8c:bb:9c:fe:4a:23:8c:14: aa:81:a9:2d:7d:23:e4:dc:7f:a3:30:a1:53:88:68:ef:ca:d8: d9:6f:a7:50:c4:80:fe:ed:33:b2:24:72:6d:96:06:e0:27:85: 26:94:09:2f:92:18:65:e1:31:61:49:a2:c5:e6:1e:88:ae:90: 75:79:dd:6a:98:ab:1d:68:de:78:19:a9:4a:fa:db:fb:ae:94: 1a:95:59:0a:11:e0:53:37:f4:6c:1c:ed:91:7a:05:97:ae:ce: c2:22:70:1a:db:00:1b:77:1c:65:dc:68:a0:63:d4:eb:f4:5f: 4d:e5:ae:87:b7:96:83:02:a7:51:4d:f9:91:90:68:e1:b3:6d: f7:fd:e8:93:ce:17:1f:0c:05:4b:2f:ce:32:9c:48:42:d1:47: cb:52:1e:26:db:3b:1e:a9:da:9c:8a:10:81:3c:89:66:a6:e7: 5a:ef:c5:07:c3:b0:c8:e6:52:3a:d9:89:70:97:80:9e:e2:d3: f9:de:0d:e7:d5:f4:42:3f:0e:59:44:10:57:ea:3a:fc:ce:37: 98:34:a8:25:98:7e:01:1d:ac:9f:e0:90:2b:41:86:93:f5:e5: e3:23:a4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QKNjNb60aiAAHHaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyMDA4NTQwOVoXDTI3MDExODA5NTQwOVowLzEtMCsGA1UEAxMk ODJjODllZDUtZGY1ZS00M2E5LWE5ZDUtNDM4MGNlY2U0ZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PmKyRqRqgg2PUyN/pV22SzhkW8ocHgEQ3L9 n8Nuft4uQcWIydP6JsHr1Yd8h0VpowhAo0YV5b695vE31FIZVUH+IpSIUr3D5P/2 URsPVqcdifqbvSUbbFwgZoqx6DM5bD4cEmAzGtA9ObWlyNtnKclA/QdjGp0LTpKk ARa8ZEkon/pDsz+6Fugiej6Bia7Td96OW5j2vgILY3VuiqmFvfwW8ijjHK0B9At2 FRmtE2fH6HLokab2cLRdOQE96StnyiDJsbmpoKeQRzcXMTNsrOaIC/AvLA6b/yjd 4sK9vMfFbE90z8hhArriLwAgZYhiG54sGdnFFdrhysf3W8ML2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3Kea/IRMzl5lcOMEuiMglMLJ2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGE1OTMxYTktN2Y5OC0z MTgxLTgxYzQtZmQyZDU1YWY5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaMEZwzQNgD454cVYnEydUfoik6UHZ4GCX8c2uMu5z+SiOMFKqBqS19 I+Tcf6MwoVOIaO/K2Nlvp1DEgP7tM7Ikcm2WBuAnhSaUCS+SGGXhMWFJosXmHoiu kHV53WqYqx1o3ngZqUr62/uulBqVWQoR4FM39Gwc7ZF6BZeuzsIicBrbABt3HGXc aKBj1Ov0X03lroe3loMCp1FN+ZGQaOGzbff96JPOFx8MBUsvzjKcSELRR8tSHibb Ox6p2pyKEIE8iWam51rvxQfDsMjmUjrZiXCXgJ7i0/neDefV9EI/DllEEFfqOvzO N5g0qCWYfgEdrJ/gkCtBhpP15eMjpDQ= -----END CERTIFICATE-----Generated at Thu Nov 5 04:40:57 2026 by rpki-client