$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa File: c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa (raw, json) Hash identifier: GXXkTS4s0COaxzEReO0QGZRGknJJM/dNcNIJpuChjMg= Subject key identifier: A3:43:E9:C1:42:58:E7:25:B3:B7:35:44:26:B7:A3:27:FA:0F:65:63 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE28855C07B564A58063440 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 74.112.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:88:55:c0:7b:56:4a:58:06:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=1aa66e6a-08bc-476d-bf84-38ccc18599f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:62:c2:08:a0:f9:06:13:2b:80:6f:96:4c: 0d:e7:4c:32:c1:b6:11:9d:18:80:cf:6f:70:b6:1f: fe:f9:92:6c:46:5a:b3:34:45:0a:19:97:a8:b5:dd: 6f:c0:22:d5:f5:45:8f:d7:cf:08:4b:f1:95:f4:fe: fe:f5:4d:ce:65:4b:c1:d7:36:14:85:bd:2d:9c:e5: d7:18:e1:62:9b:b9:ff:3a:98:c4:87:4b:5b:28:2d: 76:bc:7d:7b:72:7c:c8:49:6f:92:4c:1b:9d:9a:4c: 0b:41:df:15:c5:66:18:95:99:9d:62:24:6d:05:4d: 3b:1d:cc:c7:97:ab:f9:a3:44:77:79:59:0e:9e:db: 45:7d:29:f5:6a:c0:c0:e3:8a:69:de:0d:e4:b5:48: b8:50:35:37:92:f9:62:9e:c6:c6:03:0a:41:3d:ea: 3e:76:f9:6a:5a:cf:9b:83:ae:15:e0:cd:a9:be:15: 6b:0d:1f:39:1e:e2:e0:62:58:93:35:f6:e2:c6:71: 48:85:b2:38:0b:e7:75:0e:bd:8d:76:0b:c3:20:05: 01:2c:a1:41:ea:de:02:b7:d9:63:e2:16:69:17:17: b4:9c:af:fb:38:a6:df:bf:eb:0e:66:ba:85:6d:bd: c9:10:64:40:34:50:81:96:04:18:ed:15:a8:69:7f: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:43:E9:C1:42:58:E7:25:B3:B7:35:44:26:B7:A3:27:FA:0F:65:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.112.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1a:90:74:9b:a4:8f:55:d7:f6:d3:af:78:4d:83:db:0e:29: b9:1f:f6:a1:55:2c:b7:a5:72:f2:d2:82:52:7e:1e:b9:63:d9: 96:d7:1f:44:e2:8e:84:0e:a3:bf:37:c8:35:bc:23:62:28:e6: 21:8c:0d:62:7d:a1:e8:bc:2a:89:5d:f6:9d:91:83:21:d1:5f: 67:69:80:7c:98:0a:55:0c:91:8f:2f:68:4b:f4:16:91:a6:bc: 8f:76:48:c4:fd:f3:7e:08:55:73:b0:1f:b1:11:b9:97:ed:38: 19:ac:6b:2c:7a:23:58:d8:6e:ec:ba:7b:a7:ad:99:4f:ba:72: e2:fe:23:29:75:77:6a:3e:e0:be:cc:79:fe:72:c0:5a:e2:6f: c0:4c:9a:2b:18:14:52:68:d9:64:2c:03:94:ae:91:29:a3:5b: 05:e9:d4:be:38:ee:da:c2:66:26:1e:8c:b9:18:ae:9f:82:88: 1f:81:53:66:fb:ce:49:a6:80:c0:fa:78:e8:b6:b9:68:12:60: 6a:5c:27:6d:6b:98:69:90:45:fa:ee:e7:6b:73:a4:24:87:d5: ed:38:70:9a:27:19:07:7f:e9:32:c4:0f:6f:99:97:11:94:8a: 75:2d:05:eb:03:15:a2:d3:43:58:4c:3d:e0:ad:e4:3b:e2:0b: 6a:99:1c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884ohVwHtWSlgGNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MWFhNjZlNmEtMDhiYy00NzZkLWJmODQtMzhjY2MxODU5OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJFiwgig+QYTK4BvlkwN50wywbYRnRiAz29w th/++ZJsRlqzNEUKGZeotd1vwCLV9UWP188IS/GV9P7+9U3OZUvB1zYUhb0tnOXX GOFim7n/OpjEh0tbKC12vH17cnzISW+STBudmkwLQd8VxWYYlZmdYiRtBU07HczH l6v5o0R3eVkOnttFfSn1asDA44pp3g3ktUi4UDU3kvlinsbGAwpBPeo+dvlqWs+b g64V4M2pvhVrDR85HuLgYliTNfbixnFIhbI4C+d1Dr2NdgvDIAUBLKFB6t4Ct9lj 4hZpFxe0nK/7OKbfv+sOZrqFbb3JEGRANFCBlgQY7RWoaX+ACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKND6cFCWOcls7c1RCa3oyf6D2VjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzkzNDQ2NjEtOGJjZi0z ZDRlLTgxOTYtNDFmN2YwZjRhZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUakHSbpI9V1/bTr3hNg9sOKbkf9qFVLLelcvLSglJ+Hrlj2ZbXH0Ti joQOo783yDW8I2Io5iGMDWJ9oei8Kold9p2RgyHRX2dpgHyYClUMkY8vaEv0FpGm vI92SMT9834IVXOwH7ERuZftOBmsayx6I1jYbuy6e6etmU+6cuL+Iyl1d2o+4L7M ef5ywFrib8BMmisYFFJo2WQsA5SukSmjWwXp1L447trCZiYejLkYrp+CiB+BU2b7 zkmmgMD6eOi2uWgSYGpcJ21rmGmQRfru52tzpCSH1e04cJonGQd/6TLED2+ZlxGU inUtBesDFaLTQ1hMPeCt5DviC2qZHD0= -----END CERTIFICATE-----Generated at Sun Sep 27 05:38:55 2026 by rpki-client