$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa File: 70ac99d2-7062-3ad5-a510-3591893e0831.roa (raw, json) Hash identifier: qplKZglMRzWygWJV+wehXcSwHG6a40njkOamDjeFJlc= Subject key identifier: 3E:43:84:50:4A:A1:17:95:E0:74:71:F8:1D:6B:3A:C7:69:D9:6C:5B Certificate issuer: /CN=e04b8478-e14b-4dff-ae0c-707f31960618 Certificate serial: 010D0C9F4328584F63F8134C490D44EF9D351378 Authority key identifier: 96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 74.118.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:13:4c:49:0d:44:ef:9d:35:13:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04b8478-e14b-4dff-ae0c-707f31960618 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=05b3cc55-38f2-4b26-98a8-e1607b5da2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:70:fe:87:4c:70:a9:4a:6d:19:f8:da:c2: ba:44:a4:ce:0e:c5:bd:b7:9c:3e:9a:21:ce:67:84: 8a:1b:e8:fa:2c:85:6e:61:e6:1b:c0:f9:4b:ce:8c: f6:fe:27:7a:0e:19:a1:7f:bc:bc:69:e5:10:a0:3e: 4a:af:15:d4:22:17:99:84:9f:36:c3:b3:57:c0:97: fc:37:43:22:2f:8f:71:e3:b0:7c:b1:ed:11:72:44: 38:5c:55:55:7e:12:bd:d3:02:37:91:03:d7:ca:a9: eb:8d:79:1f:eb:c9:7a:33:eb:81:fc:d1:63:29:54: 6c:38:b9:bf:b5:c5:5f:e6:d2:9b:fd:56:00:0d:f6: 96:f5:21:3b:55:a8:a1:1f:2c:cf:98:d3:c4:93:eb: 67:d4:74:fc:76:ef:cc:da:27:bb:c9:56:a8:53:f3: 84:c9:49:84:25:a7:7f:37:c8:24:33:b3:4e:ab:44: 39:ce:5f:94:33:e8:50:16:12:d4:5b:4d:17:8a:8d: 5a:eb:45:18:1d:63:28:33:07:8e:9b:7e:ed:95:d1: 1c:86:4e:f1:b3:a8:a7:7c:d2:9e:d7:72:91:b4:aa: 03:ac:0e:42:1f:3d:85:49:7b:7d:08:a3:c7:ae:e1: 7d:00:7e:2c:a8:2b:82:f8:9a:8d:d4:ee:ea:32:2c: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:84:50:4A:A1:17:95:E0:74:71:F8:1D:6B:3A:C7:69:D9:6C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl X509v3 Authority Key Identifier: keyid:96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer sbgp-ipAddrBlock: critical IPv4: 74.118.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:78:a8:f5:0c:11:4d:39:6d:fc:ef:a2:26:29:78:0d:44:7a: cf:d6:f7:7e:c8:ff:5d:f8:1a:16:fa:cc:48:e7:47:7a:a8:46: 7f:88:38:91:fb:5a:a4:10:af:42:db:31:bf:5a:d2:6b:01:4a: 17:2f:2d:c7:eb:40:a4:4b:c3:58:ca:1d:07:10:38:ff:5f:9f: 66:a6:49:40:a2:ef:15:1e:0e:7d:f7:8f:cd:44:d8:8a:5d:69: 4e:a8:38:cb:89:6f:ec:c4:90:d3:ca:4a:86:86:5b:58:67:b9: 0c:4d:96:4b:31:db:24:93:91:60:3f:d8:e3:d4:6c:f8:c6:03: b3:41:b9:66:be:2f:fd:d1:b6:d7:b2:85:86:85:5b:b4:23:87: 1a:74:5b:c1:f6:4f:97:e9:8b:58:7b:13:e8:77:14:de:b2:25: eb:d9:c1:3f:25:cc:f1:a4:85:96:6f:5a:b0:3f:af:38:ab:43: 3f:f8:d5:f0:75:cf:03:37:c3:05:37:a5:a2:9f:3a:82:5a:9f: ab:c9:06:71:b8:42:99:c1:c6:c6:5e:2e:6a:e1:ac:be:ab:7a: 92:bb:1e:6f:ba:cb:4d:02:fe:0f:2a:00:44:eb:2e:e1:d5:4b: 59:81:00:94:14:19:af:a6:8c:e6:ab:8d:a1:e8:16:db:0f:01: 72:db:88:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BNMSQ1E7501E3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0Yjg0NzgtZTE0Yi00ZGZmLWFlMGMtNzA3ZjMxOTYw NjE4MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MDViM2NjNTUtMzhmMi00YjI2LTk4YTgtZTE2MDdiNWRhMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5w/odMcKlKbRn42sK6RKTODsW9t5w+miHO Z4SKG+j6LIVuYeYbwPlLzoz2/id6Dhmhf7y8aeUQoD5KrxXUIheZhJ82w7NXwJf8 N0MiL49x47B8se0RckQ4XFVVfhK90wI3kQPXyqnrjXkf68l6M+uB/NFjKVRsOLm/ tcVf5tKb/VYADfaW9SE7VaihHyzPmNPEk+tn1HT8du/M2ie7yVaoU/OEyUmEJad/ N8gkM7NOq0Q5zl+UM+hQFhLUW00Xio1a60UYHWMoMweOm37tldEchk7xs6infNKe 13KRtKoDrA5CHz2FSXt9CKPHruF9AH4sqCuC+JqN1O7qMiwQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5DhFBKoReV4HRx+B1rOsdp2WxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDRi ODQ3OC1lMTRiLTRkZmYtYWUwYy03MDdmMzE5NjA2MTgvNzBhYzk5ZDItNzA2Mi0z YWQ1LWE1MTAtMzU5MTg5M2UwODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA0Yjg0NzgtZTE0Yi00ZGZmLWFl MGMtNzA3ZjMxOTYwNjE4L2UwNGI4NDc4LWUxNGItNGRmZi1hZTBjLTcwN2YzMTk2 MDYxOC5jcmwwHwYDVR0jBBgwFoAUlh3I4+WcqWtr0j3YBMBMK3JTfpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDRiODQ3OC1lMTRiLTRkZmYtYWUwYy03MDdm MzE5NjA2MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN4qPUMEU05bfzvoiYpeA1Ees/W937I/134Ghb6zEjnR3qoRn+IOJH7 WqQQr0LbMb9a0msBShcvLcfrQKRLw1jKHQcQOP9fn2amSUCi7xUeDn33j81E2Ipd aU6oOMuJb+zEkNPKSoaGW1hnuQxNlksx2ySTkWA/2OPUbPjGA7NBuWa+L/3Rttey hYaFW7Qjhxp0W8H2T5fpi1h7E+h3FN6yJevZwT8lzPGkhZZvWrA/rzirQz/41fB1 zwM3wwU3paKfOoJan6vJBnG4QpnBxsZeLmrhrL6repK7Hm+6y00C/g8qAETrLuHV S1mBAJQUGa+mjOarjaHoFtsPAXLbiP0= -----END CERTIFICATE-----Generated at Thu Nov 5 04:41:50 2026 by rpki-client