$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/a1aba1ff-1daa-3cb7-b0ad-7458fa4952f7.roa File: a1aba1ff-1daa-3cb7-b0ad-7458fa4952f7.roa (raw, json) Hash identifier: kNVrYkctjv4ZNWyWeZsoZf6PuYYlOxctjczTAJdbuMk= Subject key identifier: 37:52:CF:8E:47:D8:5F:B9:88:BE:03:B7:E4:95:6A:E5:3A:A4:CE:8F Certificate issuer: /CN=1b737b88-e5c0-453e-99fa-9767cead3db6 Certificate serial: 010D0C9F4328584F9F0B38149CEF491C8C2CC400 Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/a1aba1ff-1daa-3cb7-b0ad-7458fa4952f7.roa Signing time: Sun 25 Oct 2026 16:51:35 +0000 ROA not before: Sun 25 Oct 2026 16:51:35 +0000 ROA not after: Sat 23 Jan 2027 17:51:35 +0000 asID: 1299 IP address blocks: 74.123.244.0/22 maxlen: 24 104.247.88.0/22 maxlen: 24 140.235.228.0/22 maxlen: 24 2607:6880::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:0b:38:14:9c:ef:49:1c:8c:2c:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6 Validity Not Before: Oct 25 16:51:35 2026 GMT Not After : Jan 23 17:51:35 2027 GMT Subject: CN=0955f337-f713-477e-94fb-8dd9cc1d1399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:1f:92:85:35:4a:b0:0b:f4:68:bd:f8:93: f5:84:fb:50:98:1c:c0:b8:57:a0:b2:94:77:fa:34: 3f:41:66:52:65:65:c7:72:a3:0f:4b:3d:bd:7b:cd: e1:c5:7e:43:6c:d8:bf:4e:79:d2:36:0e:e4:aa:d4: c1:94:45:d0:97:72:52:29:94:d7:3c:1f:9c:ca:ce: 43:5a:4a:09:69:e9:ee:a8:70:22:76:78:d3:70:6b: 24:ac:b8:7c:de:b5:5b:55:f8:76:7a:5c:33:c4:c0: 62:dc:ae:85:12:d6:e1:4a:68:28:6f:70:31:8a:08: 1d:b5:aa:a8:56:87:74:43:4a:15:1b:f4:85:8f:10: 55:93:2b:48:05:ab:1c:26:bf:1d:26:2c:79:50:3c: 81:70:fe:a2:9e:59:a8:e7:81:49:58:77:ce:d6:5e: 23:29:32:57:2b:4c:bf:dd:06:d8:c4:83:52:01:5a: 79:46:8f:70:77:21:c8:82:b5:96:18:cd:df:3b:81: cc:0b:14:88:e7:d3:3c:da:4c:ed:38:49:61:e9:85: 00:dc:67:87:d3:26:6a:a6:6e:52:ab:b5:0f:7d:b2: 56:74:79:f6:60:26:03:ca:a7:9e:e7:63:76:f4:26: 07:b1:db:58:15:6a:01:c4:c6:3b:1c:e6:30:d1:77: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:52:CF:8E:47:D8:5F:B9:88:BE:03:B7:E4:95:6A:E5:3A:A4:CE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/a1aba1ff-1daa-3cb7-b0ad-7458fa4952f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl X509v3 Authority Key Identifier: keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer sbgp-ipAddrBlock: critical IPv4: 74.123.244.0/22 104.247.88.0/22 140.235.228.0/22 IPv6: 2607:6880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:53:d9:22:a4:34:9a:46:f0:7e:df:5d:92:b6:ac:ac:82:c0: 58:0c:74:19:03:ca:58:08:bd:62:fd:5b:db:de:90:14:32:c4: 3a:7b:cb:53:b3:47:92:65:ab:4c:29:33:cd:26:f8:37:a4:dd: 05:8c:5c:98:a6:95:ca:24:28:af:92:6c:70:8e:48:04:2c:b1: 68:fb:ba:db:08:6a:1e:1b:43:d4:35:dc:af:53:eb:05:ed:4b: ea:19:20:de:1d:f0:22:54:86:86:97:d9:c4:e9:e9:f7:52:41: 9a:af:71:6d:52:63:3e:43:e1:ae:e9:66:53:1e:b5:c6:d8:67: 54:b3:3f:c5:e8:08:09:4d:1c:07:c7:2b:a6:a5:31:f9:e5:5b: f9:33:4d:12:7b:79:10:c9:1b:02:74:b4:b3:ca:db:29:3a:b1: 8b:0d:d9:bc:85:64:a6:bb:6c:a2:cc:63:ae:8c:25:f2:e5:07: f6:24:76:ae:8e:64:27:1e:25:1c:90:b8:13:82:78:11:c2:23: b9:e3:3b:80:e1:ae:37:c6:48:3a:f3:1c:56:63:60:ce:f4:9b: bb:7d:64:60:56:fe:dc:65:18:dd:df:5a:2a:50:63:18:56:9b: b1:2f:34:3a:dd:64:41:e4:f7:db:6a:d4:b7:35:f9:85:b9:b5: 55:db:b1:c6 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE+fCzgUnO9JHIwsxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI3MzdiODgtZTVjMC00NTNlLTk5ZmEtOTc2N2NlYWQz ZGI2MB4XDTI2MTAyNTE2NTEzNVoXDTI3MDEyMzE3NTEzNVowLzEtMCsGA1UEAxMk MDk1NWYzMzctZjcxMy00NzdlLTk0ZmItOGRkOWNjMWQxMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDUfkoU1SrAL9Gi9+JP1hPtQmBzAuFegspR3 +jQ/QWZSZWXHcqMPSz29e83hxX5DbNi/TnnSNg7kqtTBlEXQl3JSKZTXPB+cys5D WkoJaenuqHAidnjTcGskrLh83rVbVfh2elwzxMBi3K6FEtbhSmgob3Axiggdtaqo Vod0Q0oVG/SFjxBVkytIBascJr8dJix5UDyBcP6inlmo54FJWHfO1l4jKTJXK0y/ 3QbYxINSAVp5Ro9wdyHIgrWWGM3fO4HMCxSI59M82kztOElh6YUA3GeH0yZqpm5S q7UPfbJWdHn2YCYDyqee52N29CYHsdtYFWoBxMY7HOYw0XcHvwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFDdSz45H2F+5iL4Dt+SVauU6pM6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYjcz N2I4OC1lNWMwLTQ1M2UtOTlmYS05NzY3Y2VhZDNkYjYvYTFhYmExZmYtMWRhYS0z Y2I3LWIwYWQtNzQ1OGZhNDk1MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWI3MzdiODgtZTVjMC00NTNlLTk5 ZmEtOTc2N2NlYWQzZGI2LzFiNzM3Yjg4LWU1YzAtNDUzZS05OWZhLTk3NjdjZWFk M2RiNi5jcmwwHwYDVR0jBBgwFoAUYKjsGjxBveHLXi8/U1L0T7VqizIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYjczN2I4OC1lNWMwLTQ1M2UtOTlmYS05NzY3 Y2VhZDNkYjYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCSnv0AwQC aPdYAwQCjOvkMA0EAgACMAcDBQAmB2iAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIRT2SKkNJpG8H7fXZK2 rKyCwFgMdBkDylgIvWL9W9vekBQyxDp7y1OzR5Jlq0wpM80m+Dek3QWMXJimlcok KK+SbHCOSAQssWj7utsIah4bQ9Q13K9T6wXtS+oZIN4d8CJUhoaX2cTp6fdSQZqv cW1SYz5D4a7pZlMetcbYZ1SzP8XoCAlNHAfHK6alMfnlW/kzTRJ7eRDJGwJ0tLPK 2yk6sYsN2byFZKa7bKLMY66MJfLlB/Ykdq6OZCceJRyQuBOCeBHCI7njO4DhrjfG SDrzHFZjYM70m7t9ZGBW/txlGN3fWipQYxhWm7EvNDrdZEHk99tq1Lc1+YW5tVXb scY= -----END CERTIFICATE-----Generated at Fri Oct 30 14:57:16 2026 by rpki-client