$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb245516-1d60-38e1-a2ee-739777c69172.roa File: bb245516-1d60-38e1-a2ee-739777c69172.roa (raw, json) Hash identifier: jmnMhYEb6fNiaQ86AdAIqnSzUtOtl1ePxxHuPBdDqhg= Subject key identifier: EA:8B:05:88:41:42:DD:A8:9A:4A:2D:1F:57:44:06:7A:C4:7B:23:6D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7E35398B1F12E893B665F580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb245516-1d60-38e1-a2ee-739777c69172.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 834 IP address blocks: 74.1.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:39:8b:1f:12:e8:93:b6:65:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=eb2d98cd-fc75-4e1d-9173-71b110ce58f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:93:21:06:b3:28:82:e5:31:5c:6b:85:61: e0:37:82:5a:3f:cb:88:6a:99:3d:94:42:d0:ad:2a: db:b2:19:f7:29:72:37:11:36:6a:fa:c0:87:ba:d0: d2:e7:2c:0c:a2:ae:db:75:85:a9:f5:11:b0:32:62: 24:2a:fa:d9:e9:10:d7:ac:54:87:8f:33:94:fa:31: ca:66:24:fc:33:5b:5e:62:d5:18:cb:5a:91:a9:b6: 08:ae:45:50:94:30:59:bd:a0:34:6e:ed:fa:89:f5: 62:44:c0:d4:3a:1c:60:f1:37:30:0a:db:4b:7c:fc: 53:30:06:ea:c4:a7:a6:ae:d2:92:8a:fc:64:52:a8: a7:21:c5:86:d9:94:48:84:9d:b4:0d:6d:92:f1:a8: ed:2f:34:e9:2a:70:c2:e0:ed:9b:06:7f:2d:16:ee: 83:ff:21:f4:56:07:35:cf:df:35:66:1d:0c:69:60: 1a:64:cd:9f:e0:c4:44:f9:ec:40:dd:26:b8:af:58: 87:6a:c9:53:ae:a4:0d:0b:88:6c:48:59:29:e6:82: 5f:bf:f9:07:6e:9d:1c:3a:46:cd:92:72:b3:7a:5c: fc:d1:67:12:52:87:19:54:56:84:32:26:75:43:99: c0:ab:a5:6f:07:ee:5b:22:d1:83:f6:6e:ef:76:94: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8B:05:88:41:42:DD:A8:9A:4A:2D:1F:57:44:06:7A:C4:7B:23:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb245516-1d60-38e1-a2ee-739777c69172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e4:63:a8:78:24:f9:8b:d0:f4:b1:07:b3:9a:a4:ec:49:2c: d1:84:74:75:1e:ed:e3:07:26:2b:61:f6:c1:96:21:2a:4e:f3: d1:06:83:bc:45:80:75:0f:5d:b2:52:e0:c0:e9:4a:a5:0f:f2: 0d:4b:ee:6e:91:b7:fa:09:29:4f:92:c3:4f:6c:27:5c:67:6c: b0:c9:e0:af:39:80:9b:5c:19:61:c0:71:02:1f:c0:37:2f:3f: e4:97:c6:5a:30:3f:09:59:60:ba:87:ba:d9:9e:53:46:1f:06: fe:99:29:64:e0:c8:9f:eb:5b:6c:3a:8f:79:cc:0e:dc:29:47: 44:1b:f5:1d:5c:03:85:91:db:e4:08:43:5f:a6:1c:76:73:8c: 68:34:f4:a0:de:53:46:d1:95:2b:d7:17:07:8a:31:ff:d1:4d: 07:07:7e:a5:06:c3:e3:1a:7c:58:2c:b4:c8:ef:c4:ac:c0:6a: 9d:04:71:4a:85:cd:77:16:bc:d4:e6:0c:36:cc:0a:86:cb:20: 29:1c:ce:99:87:79:5c:b1:1d:42:db:45:de:eb:da:11:4c:9c: 4f:65:86:8d:53:e4:8e:de:fb:e5:5f:94:eb:6a:58:f8:5b:68: d1:eb:a5:2d:e1:75:ad:a4:f4:b3:f4:4f:96:dd:bd:23:00:eb: 25:09:7b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NTmLHxLok7Zl9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk ZWIyZDk4Y2QtZmM3NS00ZTFkLTkxNzMtNzFiMTEwY2U1OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSTIQazKILlMVxrhWHgN4JaP8uIapk9lELQ rSrbshn3KXI3ETZq+sCHutDS5ywMoq7bdYWp9RGwMmIkKvrZ6RDXrFSHjzOU+jHK ZiT8M1teYtUYy1qRqbYIrkVQlDBZvaA0bu36ifViRMDUOhxg8TcwCttLfPxTMAbq xKemrtKSivxkUqinIcWG2ZRIhJ20DW2S8ajtLzTpKnDC4O2bBn8tFu6D/yH0Vgc1 z981Zh0MaWAaZM2f4MRE+exA3Sa4r1iHaslTrqQNC4hsSFkp5oJfv/kHbp0cOkbN knKzelz80WcSUocZVFaEMiZ1Q5nAq6VvB+5bItGD9m7vdpRumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqLBYhBQt2omkotH1dEBnrEeyNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmIyNDU1MTYtMWQ2MC0z OGUxLWEyZWUtNzM5Nzc3YzY5MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXkY6h4JPmL0PSxB7OapOxJLNGEdHUe7eMHJith9sGWISpO89EGg7xF gHUPXbJS4MDpSqUP8g1L7m6Rt/oJKU+Sw09sJ1xnbLDJ4K85gJtcGWHAcQIfwDcv P+SXxlowPwlZYLqHutmeU0YfBv6ZKWTgyJ/rW2w6j3nMDtwpR0Qb9R1cA4WR2+QI Q1+mHHZzjGg09KDeU0bRlSvXFweKMf/RTQcHfqUGw+MafFgstMjvxKzAap0EcUqF zXcWvNTmDDbMCobLICkczpmHeVyxHULbRd7r2hFMnE9lho1T5I7e++VflOtqWPhb aNHrpS3hda2k9LP0T5bdvSMA6yUJe2c= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:51 2026 by rpki-client