$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa File: 688ac534-050c-3795-a67f-345716db725a.roa (raw, json) Hash identifier: kmUuWUzysv3Z79mZi0BkY0fB98XsjJ6+z0dG1Ppcy6k= Subject key identifier: 4A:27:59:3C:C5:71:2A:A0:C3:B1:FE:A2:31:09:F9:9B:C0:F6:6C:7B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F8F3DEE86BA7BBA1FC3693760 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 213738 IP address blocks: 74.1.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ee:86:ba:7b:ba:1f:c3:69:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=2d42a3ff-9783-4eb0-bceb-09b7ea7fcc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:cb:8d:88:d6:7e:c8:32:84:41:85:44:19: fb:d5:b9:36:f5:c1:c0:ff:ad:99:ac:3b:f4:52:d8: 32:dc:a6:71:7b:83:7b:42:ec:6a:df:f9:a2:84:4e: c5:e0:53:d8:38:3a:f9:92:68:f7:dd:a7:79:ce:10: 82:06:d4:09:69:73:01:c5:8c:09:4d:22:13:b2:37: 13:3d:b2:38:ab:1c:d6:70:b5:9e:bb:76:df:9b:d6: a5:16:62:5b:27:a8:9e:1a:e2:10:1c:97:a7:1b:f4: a5:74:fb:f1:55:65:d8:35:8c:ab:f3:e5:e1:c1:96: d9:1c:4c:41:8f:13:42:f5:02:20:8f:f1:59:fd:f1: 2b:af:b2:57:46:1e:e5:56:ec:2c:aa:c0:e4:cd:6a: 46:13:41:12:4a:6a:4e:d4:19:d9:3d:80:5c:16:67: fe:d5:00:d7:77:9d:54:be:ff:c4:3e:19:60:c2:28: 25:c0:d6:e5:47:14:45:87:a7:42:30:2c:1e:af:40: 39:7a:85:dd:5c:17:28:4a:c3:96:18:0d:66:4b:64: 8c:60:9b:e4:a4:52:67:8e:6b:ff:b8:7e:7f:7e:5b: b7:9d:d8:ef:e2:1c:49:22:46:7b:d0:fe:7a:c1:64: eb:85:9e:95:2e:62:a2:fe:79:45:5c:a9:89:38:f7: dc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:27:59:3C:C5:71:2A:A0:C3:B1:FE:A2:31:09:F9:9B:C0:F6:6C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/688ac534-050c-3795-a67f-345716db725a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:70:fa:bd:98:cf:55:68:be:a3:47:9d:51:66:4f:f2:c8:51: d2:4d:34:cc:b0:ba:62:12:24:48:fe:33:a6:dd:ea:b0:8a:08: 1f:fc:99:3e:28:66:10:ec:e7:8e:ae:a7:14:11:33:f6:e0:64: 82:4e:31:c4:a7:8b:b1:37:18:58:97:72:d6:7a:54:79:c3:87: ed:fd:20:9a:e0:06:2b:b2:a3:e3:5d:09:47:8b:de:e3:ef:0c: 86:c1:74:80:a7:92:cd:5b:12:6b:6a:1f:4f:33:53:a5:3d:35: 50:bb:71:7f:c1:28:74:49:e0:21:09:e4:4d:bf:be:3d:3c:e3: 7f:c2:5b:d2:d5:ed:c5:8c:01:3f:c9:f8:42:39:3f:af:f5:97: d0:c9:e9:56:4d:22:10:db:b1:2c:be:11:be:cd:82:d4:1a:b1: f8:e0:7e:37:b5:53:1c:b4:de:ec:68:99:79:73:d0:9c:6a:83: ef:31:e0:7c:72:c4:19:2c:75:cc:53:1b:83:65:5f:ae:ee:a2: 4c:6a:8a:58:bf:ca:65:dc:37:1a:40:e3:a0:d1:e4:1c:43:25: 8b:c1:64:4a:91:59:ce:ff:f1:28:1a:aa:72:19:f7:52:8b:f0: 3f:0b:fc:b7:1a:73:6b:c0:a7:0d:e1:b6:f5:97:68:dd:e0:62: 74:51:d6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPe6Gunu6H8NpN2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MmQ0MmEzZmYtOTc4My00ZWIwLWJjZWItMDliN2VhN2ZjYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WXLjYjWfsgyhEGFRBn71bk29cHA/62ZrDv0 Utgy3KZxe4N7Quxq3/mihE7F4FPYODr5kmj33ad5zhCCBtQJaXMBxYwJTSITsjcT PbI4qxzWcLWeu3bfm9alFmJbJ6ieGuIQHJenG/SldPvxVWXYNYyr8+XhwZbZHExB jxNC9QIgj/FZ/fErr7JXRh7lVuwsqsDkzWpGE0ESSmpO1BnZPYBcFmf+1QDXd51U vv/EPhlgwiglwNblRxRFh6dCMCwer0A5eoXdXBcoSsOWGA1mS2SMYJvkpFJnjmv/ uH5/flu3ndjv4hxJIkZ70P56wWTrhZ6VLmKi/nlFXKmJOPfcBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEonWTzFcSqgw7H+ojEJ+ZvA9mx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg4YWM1MzQtMDUwYy0z Nzk1LWE2N2YtMzQ1NzE2ZGI3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5w+r2Yz1VovqNHnVFmT/LIUdJNNMywumISJEj+M6bd6rCKCB/8mT4o ZhDs546upxQRM/bgZIJOMcSni7E3GFiXctZ6VHnDh+39IJrgBiuyo+NdCUeL3uPv DIbBdICnks1bEmtqH08zU6U9NVC7cX/BKHRJ4CEJ5E2/vj0843/CW9LV7cWMAT/J +EI5P6/1l9DJ6VZNIhDbsSy+Eb7NgtQasfjgfje1Uxy03uxomXlz0Jxqg+8x4Hxy xBksdcxTG4NlX67uokxqili/ymXcNxpA46DR5BxDJYvBZEqRWc7/8SgaqnIZ91KL 8D8L/Lcac2vApw3htvWXaN3gYnRR1ig= -----END CERTIFICATE-----Generated at Wed Oct 28 19:00:58 2026 by rpki-client