$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffa8b131-9b26-37ce-8ba9-55d991da108f.roa File: ffa8b131-9b26-37ce-8ba9-55d991da108f.roa (raw, json) Hash identifier: TIYd0Ufu5SwjqA3tqxkfdO9i75vU3PFym4JKvmnW4HM= Subject key identifier: 29:3E:5B:A8:94:51:4F:00:5C:82:0D:2E:05:A4:69:27:6A:57:1E:92 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7D8686FB1F0700F2C8451500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffa8b131-9b26-37ce-8ba9-55d991da108f.roa Signing time: Mon 13 Apr 2026 07:08:40 +0000 ROA not before: Mon 13 Apr 2026 07:08:40 +0000 ROA not after: Sun 12 Jul 2026 07:08:40 +0000 asID: 209104 IP address blocks: 74.1.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:86:86:fb:1f:07:00:f2:c8:45:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 13 07:08:40 2026 GMT Not After : Jul 12 07:08:40 2026 GMT Subject: CN=268423ca-e0f8-4986-8af5-c6aa4ce7c6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:6a:0d:71:52:57:10:52:dc:b6:f5:40:2a: 42:3c:07:4d:8b:7f:1f:a7:1c:7f:65:c2:c1:15:57: a2:40:f4:47:95:ba:23:8e:99:fd:d3:b5:ab:e3:e7: 2a:ca:bd:0c:77:5e:04:fd:d2:29:21:12:00:63:ff: eb:ae:02:71:13:4c:57:0e:c1:70:76:63:f9:f7:a5: 3c:99:b4:54:82:9b:5f:e5:3d:6b:bb:c4:07:9d:a4: a5:6a:17:6b:a6:6d:6e:4e:e6:70:91:3e:cb:93:59: 73:c5:fc:52:63:a1:7c:24:ff:61:08:02:f9:24:1d: bb:63:f6:5d:da:62:59:bc:5c:0f:b9:45:72:b6:fb: 8e:33:78:9e:f0:f2:0d:72:90:f9:6d:e4:2b:5f:e4: 02:35:f1:44:a2:02:bf:f9:50:18:69:73:1d:5e:e1: d3:c6:8d:7c:3f:1f:a7:eb:d2:aa:31:5f:8f:39:11: dd:6c:81:e0:24:93:22:de:b3:32:60:0f:fd:82:7c: 85:13:f0:b3:fd:b6:0a:22:1a:44:16:af:f2:0f:c6: 70:4b:07:90:99:2b:69:eb:01:dd:8c:2f:4a:45:b0: bd:88:b1:fb:8a:66:cd:be:94:08:c5:c0:e2:0a:39: b9:f6:94:86:1c:bd:ad:b7:75:e9:e8:61:c6:8d:42: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3E:5B:A8:94:51:4F:00:5C:82:0D:2E:05:A4:69:27:6A:57:1E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ffa8b131-9b26-37ce-8ba9-55d991da108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c4:3c:26:e4:5f:e4:a5:c5:fd:c1:6a:c1:e3:4b:cf:40:69: 28:57:c3:00:49:36:fd:b5:8a:aa:a7:d2:ca:2a:75:63:e7:ff: cc:a3:14:b1:b8:d6:e7:9c:f3:13:29:ee:f9:f7:8e:98:3d:bd: b0:85:6b:f9:0f:33:a0:4a:54:1e:fb:0e:7c:70:76:c5:1b:99: b6:33:89:ab:83:10:cb:9c:36:95:ca:64:00:6a:23:54:24:5d: f7:78:f7:da:ea:9b:44:1d:f6:c2:b1:db:72:83:2d:db:b3:72: 81:e5:21:79:3b:7b:ad:73:a7:42:cd:5b:a8:70:aa:af:d8:ea: e7:86:5e:40:46:52:dc:e0:37:c0:64:b7:11:3a:b7:9a:47:f5: 6c:cb:13:eb:6b:6c:19:09:2e:d3:f8:e8:c6:e1:71:c4:bf:c7: c1:a8:8d:42:3f:49:1f:b7:78:31:5e:36:4a:e1:5e:69:a8:c8: cd:43:55:55:45:d6:5a:a5:33:60:39:79:4c:3d:c1:95:42:7b: 72:ad:f3:d0:70:f1:fa:c6:7e:f0:2d:1f:b0:0c:30:34:3e:11: 08:2d:a9:aa:69:21:c7:98:db:50:e6:e9:72:b9:64:26:aa:5b: f8:78:a3:95:b3:30:68:f7:87:9e:ae:10:c1:aa:c7:10:02:79: 46:cc:93:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE19hob7HwcA8shFFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxMzA3MDg0MFoXDTI2MDcxMjA3MDg0MFowLzEtMCsGA1UEAxMk MjY4NDIzY2EtZTBmOC00OTg2LThhZjUtYzZhYTRjZTdjNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIBqDXFSVxBS3Lb1QCpCPAdNi38fpxx/ZcLB FVeiQPRHlbojjpn907Wr4+cqyr0Md14E/dIpIRIAY//rrgJxE0xXDsFwdmP596U8 mbRUgptf5T1ru8QHnaSlahdrpm1uTuZwkT7Lk1lzxfxSY6F8JP9hCAL5JB27Y/Zd 2mJZvFwPuUVytvuOM3ie8PINcpD5beQrX+QCNfFEogK/+VAYaXMdXuHTxo18Px+n 69KqMV+PORHdbIHgJJMi3rMyYA/9gnyFE/Cz/bYKIhpEFq/yD8ZwSweQmStp6wHd jC9KRbC9iLH7imbNvpQIxcDiCjm59pSGHL2tt3Xp6GHGjUIMWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk+W6iUUU8AXIINLgWkaSdqVx6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmZhOGIxMzEtOWIyNi0z N2NlLThiYTktNTVkOTkxZGExMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXEPCbkX+Slxf3BasHjS89AaShXwwBJNv21iqqn0soqdWPn/8yjFLG4 1uec8xMp7vn3jpg9vbCFa/kPM6BKVB77DnxwdsUbmbYziauDEMucNpXKZABqI1Qk Xfd499rqm0Qd9sKx23KDLduzcoHlIXk7e61zp0LNW6hwqq/Y6ueGXkBGUtzgN8Bk txE6t5pH9WzLE+trbBkJLtP46MbhccS/x8GojUI/SR+3eDFeNkrhXmmoyM1DVVVF 1lqlM2A5eUw9wZVCe3Kt89Bw8frGfvAtH7AMMDQ+EQgtqappIceY21Dm6XK5ZCaq W/h4o5WzMGj3h56uEMGqxxACeUbMk6Y= -----END CERTIFICATE-----Generated at Fri Apr 17 22:11:00 2026 by rpki-client