$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdfc7b40-bde4-34a2-b692-96a778908a5b.roa File: cdfc7b40-bde4-34a2-b692-96a778908a5b.roa (raw, json) Hash identifier: Xr4B/LJRFSNd1KCluRuFy5UQncDEnwvZm/+oi7ET1Vk= Subject key identifier: 33:09:52:9B:58:5B:46:80:38:A8:4E:7F:7F:2C:91:F7:96:2B:B5:4C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49735C8966F8010A9AF4FA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdfc7b40-bde4-34a2-b692-96a778908a5b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 74.2.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5c:89:66:f8:01:0a:9a:f4:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af4341aa-d812-4db5-8771-b1f82c691548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:05:7d:29:f5:fd:f4:79:4b:df:48:ec:a1: c8:3c:0f:50:32:5b:fc:8f:5b:1e:32:b3:c6:47:ea: dc:27:e2:31:e6:bf:ec:8f:2b:09:48:0a:31:11:9f: 76:b2:7b:df:87:20:26:8c:a7:94:cd:c1:90:c1:df: ae:20:6d:bd:3a:3a:ae:0c:3e:d9:c2:0c:06:5d:6b: e3:41:02:8a:ff:43:9d:08:a1:bf:c2:c0:16:9f:5a: fd:16:f2:d6:2c:16:ea:ff:8a:4e:e7:2d:9d:0a:55: ce:f5:05:68:e8:a3:00:3d:9e:3c:85:4f:24:03:6d: 7a:d8:76:a9:9a:c3:26:ce:3b:b3:d3:23:d7:c1:d5: 7f:fd:f6:96:8e:df:1f:74:13:2b:7c:d1:d6:6b:19: 2c:60:25:38:11:bd:46:94:88:0e:a4:0a:ca:a3:55: 3d:86:86:32:8f:06:f1:0f:72:d2:d3:91:0c:14:ae: 2d:33:4d:71:90:ea:12:95:6b:86:af:1f:bd:ce:71: de:87:61:17:ff:8f:02:78:c7:b7:8b:55:dc:08:e9: 7d:fd:7e:cb:35:e2:88:d2:ca:19:3f:85:98:04:6d: 5f:c9:e6:56:03:6a:4b:1f:e6:35:3f:8d:ad:81:13: f3:ab:aa:3d:52:cf:22:cd:58:29:df:5c:92:e1:64: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:09:52:9B:58:5B:46:80:38:A8:4E:7F:7F:2C:91:F7:96:2B:B5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdfc7b40-bde4-34a2-b692-96a778908a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ca:c0:62:1a:3b:1b:44:4b:0c:c5:4d:43:b0:55:52:44:f1: 69:04:05:8c:ec:d0:f0:47:73:d8:c2:a6:24:d6:e3:50:50:3b: 0f:b2:6b:a9:6c:96:2b:b4:ce:a3:ec:99:1f:98:00:83:4e:70: 68:0d:e4:81:8c:82:ed:bd:93:83:6f:02:dc:f1:4d:8d:37:68: 59:94:b1:81:c8:db:76:0e:e3:b3:d8:60:5b:78:5c:26:d8:72: 3b:fc:1b:d9:5a:be:33:f8:51:5c:70:66:a1:a1:92:e1:16:7f: 75:38:6d:fd:41:8f:59:75:1f:c9:dc:bb:0e:f7:7c:d3:3a:a2: 32:51:8d:ad:2d:9a:11:d7:1f:02:80:2f:db:48:ef:0f:1a:58: dd:cf:cd:3d:96:50:b9:4a:7f:49:6b:88:a6:ca:85:37:1a:d9: d6:ef:79:72:8f:6c:fc:ec:8b:dc:c7:39:30:76:1b:fd:84:ed: 05:db:95:02:0f:81:bf:32:82:96:9a:c4:94:49:03:be:5f:76: db:3f:16:bc:26:7e:4c:e8:e8:2b:2b:06:65:d4:a0:f3:c4:30: 94:eb:f5:41:ce:a8:ef:f2:26:44:e5:d4:8a:10:87:bf:1c:9f: 35:1e:31:7c:48:aa:d4:16:0e:07:57:f3:ec:7c:0b:b1:5e:da: 05:d0:91:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1yJZvgBCpr0+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWY0MzQxYWEtZDgxMi00ZGI1LTg3NzEtYjFmODJjNjkxNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiUFfSn1/fR5S99I7KHIPA9QMlv8j1seMrPG R+rcJ+Ix5r/sjysJSAoxEZ92snvfhyAmjKeUzcGQwd+uIG29OjquDD7ZwgwGXWvj QQKK/0OdCKG/wsAWn1r9FvLWLBbq/4pO5y2dClXO9QVo6KMAPZ48hU8kA2162Hap msMmzjuz0yPXwdV//faWjt8fdBMrfNHWaxksYCU4Eb1GlIgOpArKo1U9hoYyjwbx D3LS05EMFK4tM01xkOoSlWuGrx+9znHeh2EX/48CeMe3i1XcCOl9/X7LNeKI0soZ P4WYBG1fyeZWA2pLH+Y1P42tgRPzq6o9Us8izVgp31yS4WRVdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMJUptYW0aAOKhOf38skfeWK7VMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RmYzdiNDAtYmRlNC0z NGEyLWI2OTItOTZhNzc4OTA4YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7KwGIaOxtESwzFTUOwVVJE8WkEBYzs0PBHc9jCpiTW41BQOw+ya6ls liu0zqPsmR+YAINOcGgN5IGMgu29k4NvAtzxTY03aFmUsYHI23YO47PYYFt4XCbY cjv8G9lavjP4UVxwZqGhkuEWf3U4bf1Bj1l1H8ncuw73fNM6ojJRja0tmhHXHwKA L9tI7w8aWN3PzT2WULlKf0lriKbKhTca2dbveXKPbPzsi9zHOTB2G/2E7QXblQIP gb8ygpaaxJRJA75fdts/Frwmfkzo6CsrBmXUoPPEMJTr9UHOqO/yJkTl1IoQh78c nzUeMXxIqtQWDgdX8+x8C7Fe2gXQkbU= -----END CERTIFICATE-----Generated at Sun Oct 4 11:12:04 2026 by rpki-client