$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa File: 8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa (raw, json) Hash identifier: o3vqMAXjHC8HsScMg7vRzPT8A0tXXI/lqTtHvFGq0JU= Subject key identifier: 8A:2D:3F:47:7A:81:4F:0F:B6:F7:82:50:22:C8:F1:2E:9D:32:E4:4D Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE28831F29D045F82CC288F Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 74.112.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:88:31:f2:9d:04:5f:82:cc:28:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=a4c38f5d-b75e-48e2-9fc3-c0e0002be1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:90:3a:59:f1:da:ab:22:c7:6d:fa:e3:61:fe: db:ea:20:22:25:1f:97:47:87:48:75:29:3c:7c:7c: 89:20:b6:22:7f:cc:e1:75:6c:9e:e0:c4:64:e4:fb: a2:6a:6d:c4:b5:b9:07:0d:96:e7:44:f4:0d:70:b4: 99:e9:99:f2:eb:a1:e6:b8:91:a9:e9:3f:b4:a8:7d: 97:ae:4e:e7:30:27:42:de:0c:53:29:d9:0c:e1:4e: 57:1e:a9:22:ae:09:29:4e:57:b4:f5:9f:fb:23:9e: 90:4e:61:25:0a:37:55:82:e6:c0:bf:85:42:02:08: ce:8e:fa:59:44:44:6a:91:84:41:1b:f8:a6:0b:36: 02:e5:eb:a3:74:0d:79:d1:ea:96:95:f1:90:eb:6e: 20:03:76:8a:48:a2:62:6a:5b:8c:7b:8a:97:69:84: b3:38:0a:e3:99:6d:f4:0d:45:3c:a1:f7:d7:73:be: 3e:c9:a3:42:ec:7f:36:be:24:55:5c:f1:d1:69:c6: 5c:56:fb:8e:e0:09:a5:7b:40:01:b1:b4:f4:3e:5e: d3:91:3b:c8:89:d6:cd:95:e9:77:98:3c:d6:0a:8a: 02:fc:ec:cc:94:a7:36:39:ae:da:01:9b:0a:d8:64: cf:3e:e9:94:2c:34:fd:42:27:b9:a7:dd:e7:52:75: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:3F:47:7A:81:4F:0F:B6:F7:82:50:22:C8:F1:2E:9D:32:E4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c3c9b70-d2fb-34d1-bf84-cdf07845c3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.112.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a9:7e:09:fd:8d:84:e9:6a:0d:d5:64:ec:6d:a4:93:c1:8b: d9:fc:6a:e7:c2:f5:66:e7:e8:f9:1a:30:70:f8:7c:f6:94:1c: d3:f6:a7:d3:c7:b4:99:69:dc:69:65:e9:2c:26:c8:10:b8:f0: 77:e5:d9:e9:77:8c:e2:0a:11:bc:3e:fa:bf:31:a8:67:ec:8b: cb:2a:66:cd:79:c1:58:93:4a:d1:b4:a8:4f:6c:71:46:10:bb: 17:ca:7c:38:1c:a2:e0:78:5f:52:72:53:aa:e3:ad:05:00:bc: d2:d6:cb:c3:dc:5d:79:94:1f:d5:bd:1f:2d:f9:89:59:e7:f5: 45:59:fe:de:7d:77:9a:d8:39:48:2e:02:55:63:c0:9d:87:29: 1d:6b:d0:d8:49:49:b8:24:b9:ed:c9:80:f3:4b:c9:89:57:56: 9f:0e:d5:79:6a:cd:7e:be:32:f5:0a:b0:f7:c8:f6:78:e7:a3: 7d:46:16:a4:ee:06:c6:3e:27:84:5b:8d:3a:2c:e0:c9:c1:da: 20:dc:73:e2:ee:eb:2b:ca:ed:58:87:51:b4:b6:a0:91:db:4a: 38:d0:fb:8e:84:69:f3:20:19:5c:53:3f:ac:17:a2:d5:14:3b: f7:45:cb:87:cc:c4:e6:7f:96:e9:c1:d7:59:bb:4a:3e:4c:cc: d6:c5:b4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884ogx8p0EX4LMKI8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YTRjMzhmNWQtYjc1ZS00OGUyLTlmYzMtYzBlMDAwMmJlMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pA6WfHaqyLHbfrjYf7b6iAiJR+XR4dIdSk8 fHyJILYif8zhdWye4MRk5Puiam3EtbkHDZbnRPQNcLSZ6Zny66HmuJGp6T+0qH2X rk7nMCdC3gxTKdkM4U5XHqkirgkpTle09Z/7I56QTmElCjdVgubAv4VCAgjOjvpZ RERqkYRBG/imCzYC5eujdA150eqWlfGQ624gA3aKSKJialuMe4qXaYSzOArjmW30 DUU8offXc74+yaNC7H82viRVXPHRacZcVvuO4Amle0ABsbT0Pl7TkTvIidbNlel3 mDzWCooC/OzMlKc2Oa7aAZsK2GTPPumULDT9Qie5p93nUnXqbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIotP0d6gU8PtveCUCLI8S6dMuRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOGMzYzliNzAtZDJmYi0z NGQxLWJmODQtY2RmMDc4NDVjM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSpfgn9jYTpag3VZOxtpJPBi9n8aufC9Wbn6PkaMHD4fPaUHNP2p9PH tJlp3Gll6SwmyBC48Hfl2el3jOIKEbw++r8xqGfsi8sqZs15wViTStG0qE9scUYQ uxfKfDgcouB4X1JyU6rjrQUAvNLWy8PcXXmUH9W9Hy35iVnn9UVZ/t59d5rYOUgu AlVjwJ2HKR1r0NhJSbgkue3JgPNLyYlXVp8O1XlqzX6+MvUKsPfI9njno31GFqTu BsY+J4RbjTos4MnB2iDcc+Lu6yvK7ViHUbS2oJHbSjjQ+46EafMgGVxTP6wXotUU O/dFy4fMxOZ/lunB11m7Sj5MzNbFtMQ= -----END CERTIFICATE-----Generated at Sun Sep 20 23:36:40 2026 by rpki-client