$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/920ac645-7e6f-396a-bdb5-c31b75fdc002.roa File: 920ac645-7e6f-396a-bdb5-c31b75fdc002.roa (raw, json) Hash identifier: 2OICgs/qbQYCA+0vaWxYY+KMzqjCzOX4jzaN/VFSy3I= Subject key identifier: 9E:22:0A:82:E6:A1:DB:6E:77:2C:A8:DF:BA:CF:83:11:69:E5:26:BA Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584F1ECFC4193B543DC790BCC480 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/920ac645-7e6f-396a-bdb5-c31b75fdc002.roa Signing time: Wed 09 Sep 2026 18:28:19 +0000 ROA not before: Wed 09 Sep 2026 18:28:19 +0000 ROA not after: Tue 08 Dec 2026 19:28:19 +0000 asID: 22611 IP address blocks: 74.124.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:cf:c4:19:3b:54:3d:c7:90:bc:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Sep 9 18:28:19 2026 GMT Not After : Dec 8 19:28:19 2026 GMT Subject: CN=c536fe98-a005-4914-8d71-34e08de1dca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:53:ba:75:37:8f:83:96:cd:f1:36:02:da:8e: 6b:19:54:52:b2:dd:e0:aa:ef:f0:c4:77:9c:31:a6: af:e6:4b:d4:2a:7b:24:66:a9:a3:36:5c:29:73:c2: fa:c7:5d:03:ae:b1:92:42:09:f1:87:ae:58:4e:fb: 65:6e:4f:de:46:f5:3b:44:5c:7f:59:29:73:f4:92: 25:fe:b7:89:a9:cc:91:67:fc:d2:68:8e:12:49:0f: c6:6b:bf:b6:c3:5c:aa:6c:99:a4:d4:b4:b0:84:b6: 1a:9d:40:bd:5b:64:96:69:6d:ef:c8:3e:0d:bc:18: e2:3c:34:cc:e6:d7:30:00:81:2e:13:73:8c:27:aa: c3:b8:01:77:a9:b4:91:a6:6d:e5:e4:77:f3:21:68: aa:76:40:13:d0:6f:da:fa:95:69:cb:67:94:28:b9: 97:ce:52:e6:8a:dc:6b:ba:74:14:72:71:85:ef:c8: 97:cc:72:70:08:d9:a3:9d:37:64:bd:1a:4a:a7:6b: 87:1a:00:f4:db:99:41:62:86:42:7b:19:db:34:1c: 74:83:c0:56:2f:80:67:90:2d:01:51:d5:ac:b7:e2: 51:4f:4b:a8:a9:1c:f3:79:90:09:55:3f:c1:ca:1a: f7:d0:0c:0b:16:61:fc:1b:7f:7f:a0:80:df:92:61: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:0A:82:E6:A1:DB:6E:77:2C:A8:DF:BA:CF:83:11:69:E5:26:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/920ac645-7e6f-396a-bdb5-c31b75fdc002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 74.124.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b0:27:e6:d7:5b:9e:b2:90:ce:c2:9e:ed:0e:19:5f:77:8c: be:a0:4d:2b:2d:ee:7d:03:45:3c:ea:2b:b4:ba:94:1d:7b:64: 33:a3:8e:77:0d:c2:62:89:86:ca:6b:ba:66:37:75:b0:08:3e: 8a:31:9c:9b:dc:da:3d:b4:54:c2:a5:c0:94:d8:54:f0:f4:30: 78:e7:c0:0c:a7:5b:3c:dd:41:41:65:e2:06:1c:9e:70:ac:7f: 8a:5a:de:10:20:79:c1:d6:69:ba:a7:ee:ab:9d:c4:15:39:b6: 7f:db:91:e0:80:cb:e1:d2:4b:a9:3e:53:a4:2b:72:a2:0b:6d: 72:27:91:61:fe:8c:4d:25:c6:17:b9:be:62:02:00:3d:fb:8b: 1a:ef:77:f4:f3:6c:0f:26:82:7d:4c:55:f2:98:ba:85:8d:a4: b3:70:b8:d3:6d:87:fe:1c:f9:43:e7:95:7b:56:73:08:ff:95: 53:39:b0:8d:e5:e8:f4:23:a7:40:9c:5c:da:c4:cb:e7:a0:cf: 47:07:17:5c:9e:f7:0b:54:ba:d4:92:4b:19:ab:7c:c0:8c:2c: bf:a3:18:f2:f0:68:ef:44:23:e6:2c:43:2f:31:73:1e:de:c9: 75:e0:d0:3f:4b:8b:61:00:ef:3f:bf:08:81:9a:c6:f3:9a:e2: 11:06:08:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ez8QZO1Q9x5C8xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI2MDkwOTE4MjgxOVoXDTI2MTIwODE5MjgxOVowLzEtMCsGA1UEAxMk YzUzNmZlOTgtYTAwNS00OTE0LThkNzEtMzRlMDhkZTFkY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFO6dTePg5bN8TYC2o5rGVRSst3gqu/wxHec Maav5kvUKnskZqmjNlwpc8L6x10DrrGSQgnxh65YTvtlbk/eRvU7RFx/WSlz9JIl /reJqcyRZ/zSaI4SSQ/Ga7+2w1yqbJmk1LSwhLYanUC9W2SWaW3vyD4NvBjiPDTM 5tcwAIEuE3OMJ6rDuAF3qbSRpm3l5HfzIWiqdkAT0G/a+pVpy2eUKLmXzlLmitxr unQUcnGF78iXzHJwCNmjnTdkvRpKp2uHGgD025lBYoZCexnbNBx0g8BWL4BnkC0B UdWst+JRT0uoqRzzeZAJVT/Byhr30AwLFmH8G39/oIDfkmFkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4iCoLmodtudyyo37rPgxFp5Sa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvOTIwYWM2NDUtN2U2Zi0z OTZhLWJkYjUtYzMxYjc1ZmRjMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqwJ+bXW56ykM7Cnu0OGV93jL6gTSst7n0DRTzqK7S6lB17ZDOjjncN wmKJhsprumY3dbAIPooxnJvc2j20VMKlwJTYVPD0MHjnwAynWzzdQUFl4gYcnnCs f4pa3hAgecHWabqn7qudxBU5tn/bkeCAy+HSS6k+U6QrcqILbXInkWH+jE0lxhe5 vmICAD37ixrvd/TzbA8mgn1MVfKYuoWNpLNwuNNth/4c+UPnlXtWcwj/lVM5sI3l 6PQjp0CcXNrEy+egz0cHF1ye9wtUutSSSxmrfMCMLL+jGPLwaO9EI+YsQy8xcx7e yXXg0D9Li2EA7z+/CIGaxvOa4hEGCAo= -----END CERTIFICATE-----Generated at Fri Sep 11 13:16:18 2026 by rpki-client