$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3ca243d9-e310-3dbe-9585-ad2db61082b2.roa File: 3ca243d9-e310-3dbe-9585-ad2db61082b2.roa (raw, json) Hash identifier: 6vSqbJ9NOeBMHWSzRn7nXXQQeBGyxQX8iuj3psQ2Dnc= Subject key identifier: 6E:3D:EA:54:2C:C1:BB:4F:64:A6:84:D2:52:2E:A8:AF:31:87:35:8E Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584CB28746DD403A143520EC3C80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3ca243d9-e310-3dbe-9585-ad2db61082b2.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 6079 IP address blocks: 204.74.0.0/21 maxlen: 24 204.74.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:46:dd:40:3a:14:35:20:ec:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=714b5b58-effc-4c38-8f6f-a24e58b93c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:c6:8e:b0:ff:12:d8:6b:c6:13:62:b3:ac: 1b:23:f7:09:d9:41:aa:33:47:00:91:71:84:2f:14: 73:e8:50:7a:f2:a9:64:20:98:aa:1f:b3:9c:30:52: 25:6d:48:fa:b9:ac:7e:77:34:1b:bc:b2:00:00:72: c1:70:96:a5:9d:fd:d8:91:97:88:37:c0:86:17:4a: 22:b6:65:0d:11:aa:c2:fa:bb:34:f2:af:7f:64:7b: a6:81:05:1f:70:31:ab:76:53:62:38:83:9c:a1:75: 6f:10:36:4f:8f:65:14:54:c4:6e:b6:fd:b7:34:f3: bb:01:42:5c:dc:4e:0e:fd:55:f4:b7:28:4b:b8:d3: 1c:0f:86:0e:54:3b:65:5b:9f:af:22:5c:07:0b:1e: ef:15:3f:e9:5c:12:1c:87:04:85:cd:a6:37:29:5d: cb:b2:28:23:36:6d:a5:41:2a:05:8a:64:ac:53:dc: 3f:14:5e:11:39:9b:60:52:6e:44:c0:44:ad:96:5b: d8:c7:bf:ca:3b:23:c4:ab:92:d5:11:2b:63:48:31: 6e:2e:b9:2c:e8:38:d2:5e:34:57:22:b4:e8:58:6d: aa:aa:62:86:4d:49:9c:9a:f5:dc:83:0d:87:01:d6: 48:97:53:43:a8:91:67:b8:c3:16:dd:a0:b2:92:5c: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3D:EA:54:2C:C1:BB:4F:64:A6:84:D2:52:2E:A8:AF:31:87:35:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3ca243d9-e310-3dbe-9585-ad2db61082b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 204.74.0.0-204.74.9.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9d:6b:1a:af:61:53:31:62:45:c0:f9:48:73:7f:3c:8c:e4: 2e:86:ed:dc:23:90:f8:0a:ca:c1:22:0e:7d:1b:2e:9d:d3:ea: 37:5d:16:48:69:6a:73:02:d4:cf:46:9f:f8:da:5e:bb:18:70: d7:50:4e:4a:b2:18:c0:ee:36:da:ea:79:34:91:16:59:41:47: e2:06:f2:07:88:53:07:ef:37:85:8f:3f:8f:09:18:58:40:77: 22:0f:5a:d5:66:2c:99:0b:a8:c2:e6:f6:cd:56:da:ab:e5:d1: 05:9c:35:0f:ea:6d:70:52:54:ec:ae:b7:80:9d:3b:ce:39:2d: 15:85:3f:7e:d1:1c:ad:5a:ab:ba:56:f0:18:72:1b:1d:a4:ba: 8b:7a:41:c1:2c:14:26:a1:7a:81:65:71:29:a1:e5:17:e0:e6: f7:62:5d:44:21:66:6d:10:18:c0:4d:de:1b:4d:b7:ca:ff:6b: a9:e6:07:f4:8e:67:ed:6e:d3:58:79:e7:0b:33:8c:53:a7:4d: 9f:a4:ce:32:37:52:d2:47:c7:cb:10:04:93:80:73:01:c5:e6: 55:41:ad:bc:eb:07:11:d3:38:b9:64:1e:8c:35:f4:31:ad:a9: 19:8f:6a:5e:37:74:25:e4:16:de:c3:80:3d:bb:eb:bd:aa:e9: 38:df:34:79 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEyyh0bdQDoUNSDsPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NzE0YjViNTgtZWZmYy00YzM4LThmNmYtYTI0ZTU4YjkzYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPPGjrD/EthrxhNis6wbI/cJ2UGqM0cAkXGE LxRz6FB68qlkIJiqH7OcMFIlbUj6uax+dzQbvLIAAHLBcJalnf3YkZeIN8CGF0oi tmUNEarC+rs08q9/ZHumgQUfcDGrdlNiOIOcoXVvEDZPj2UUVMRutv23NPO7AUJc 3E4O/VX0tyhLuNMcD4YOVDtlW5+vIlwHCx7vFT/pXBIchwSFzaY3KV3LsigjNm2l QSoFimSsU9w/FF4ROZtgUm5EwEStllvYx7/KOyPEq5LVEStjSDFuLrks6DjSXjRX IrToWG2qqmKGTUmcmvXcgw2HAdZIl1NDqJFnuMMW3aCyklxGLQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFG496lQswbtPZKaE0lIuqK8xhzWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvM2NhMjQzZDktZTMxMC0z ZGJlLTk1ODUtYWQyZGI2MTA4MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHMSgME AcxKCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB6nWsar2FTMWJFwPlIc388jOQuhu3cI5D4CsrBIg59Gy6d 0+o3XRZIaWpzAtTPRp/42l67GHDXUE5KshjA7jba6nk0kRZZQUfiBvIHiFMH7zeF jz+PCRhYQHciD1rVZiyZC6jC5vbNVtqr5dEFnDUP6m1wUlTsrreAnTvOOS0VhT9+ 0RytWqu6VvAYchsdpLqLekHBLBQmoXqBZXEpoeUX4Ob3Yl1EIWZtEBjATd4bTbfK /2up5gf0jmftbtNYeecLM4xTp02fpM4yN1LSR8fLEASTgHMBxeZVQa286wcR0zi5 ZB6MNfQxrakZj2peN3Ql5Bbew4A9u+u9quk43zR5 -----END CERTIFICATE-----Generated at Mon Mar 2 01:09:08 2026 by rpki-client