$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa File: 08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa (raw, json) Hash identifier: w/59Evsf359pRT88WWYWzGGWyxq8Ng0HaRyKy55oxwI= Subject key identifier: C7:90:19:6F:00:EA:E8:89:62:CE:FD:B4:AC:85:6C:DF:EE:9A:AC:DC Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584ECD3719DA7B5A014256E94700 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 42 IP address blocks: 67.21.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:19:da:7b:5a:01:42:56:e9:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=a9369bf0-ffcb-4e86-b21d-310aed9608c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:40:20:71:9a:ae:2b:e1:7a:06:02:6f:5f: 55:b3:b7:79:d9:e5:33:30:ad:b5:41:f9:57:27:0a: 8e:a7:bd:ed:d4:dc:1b:b6:8c:1b:e1:b9:f1:5b:95: b1:57:2b:17:56:79:cb:52:0f:76:4f:2f:68:c9:30: 2e:6f:b6:88:34:3a:9e:c1:a1:76:36:37:a3:d1:e7: 99:f4:9c:3d:cf:b9:06:8c:d7:ab:5d:5e:7c:e5:1e: 32:5e:73:98:aa:6f:b8:04:73:0f:ff:6b:d5:bb:06: 77:a5:29:de:a8:82:66:85:87:67:fc:75:89:e1:9f: e4:97:7c:e1:9f:90:4e:a7:25:2c:bb:49:06:09:90: da:8f:f3:65:39:79:6a:eb:79:2e:1e:d2:15:3c:2a: b1:2b:3a:c7:90:a1:24:ec:bb:cb:d8:02:66:73:a1: 6a:90:c3:b6:53:99:68:48:16:0b:e4:9a:01:22:bf: 4e:68:93:91:45:3f:ae:0d:fd:81:80:3a:c4:17:08: de:51:93:d3:cc:5f:eb:d3:be:ac:c9:03:7d:e0:24: 7f:88:d8:2d:ff:bd:6c:12:ec:48:be:b9:13:4d:2c: d7:04:aa:06:1b:bf:d8:04:c8:2f:a4:bf:3b:d0:13: 42:61:93:5a:a9:03:14:6e:ad:73:0f:f5:ae:5f:e9: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:19:6F:00:EA:E8:89:62:CE:FD:B4:AC:85:6C:DF:EE:9A:AC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 67.21.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f4:84:1e:cb:47:e2:d5:80:6a:4e:d6:39:1c:ae:e3:27:96: 1d:c3:f4:6d:7e:b4:b7:df:fc:ca:cb:8c:d6:96:ff:1b:a6:40: 53:eb:ef:9a:17:b1:5a:a1:68:c0:34:f5:f3:07:12:db:f6:40: 9a:44:be:ba:4c:35:26:dd:9e:c2:ab:ee:7a:42:72:0d:64:56: d7:44:cd:37:80:2f:63:6e:71:e7:7b:5a:1d:43:23:4e:18:6e: f5:78:58:1c:43:c3:3c:22:60:69:e3:4f:af:1b:d0:3c:38:57: 06:51:2c:1d:73:cd:94:66:f5:a0:0f:a6:58:5d:66:05:dc:ff: 5f:6b:59:f1:8c:17:5f:f4:73:f8:01:e1:d1:ed:61:49:e4:e1: 20:28:5a:6c:c1:b4:64:0c:05:5b:82:db:be:b9:0b:e2:48:25: cb:6e:b7:9f:a7:4d:ec:8b:00:d8:48:ab:13:f2:58:ca:b0:a2: 77:83:dd:23:3a:ea:b2:05:58:20:a7:97:10:1d:9c:8e:8f:f2: 8e:ef:18:f1:eb:d2:3a:e2:0a:06:ee:c8:ae:fc:50:fa:f0:64: fc:5b:21:b6:38:3d:47:22:fc:bd:d6:ac:f3:b1:7d:d7:f2:24: 05:ae:f2:71:94:e2:e4:a7:90:9d:1a:14:aa:dc:db:43:9f:c7: 11:44:d6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxnae1oBQlbpRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YTkzNjliZjAtZmZjYi00ZTg2LWIyMWQtMzEwYWVkOTYwOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRpAIHGarivhegYCb19Vs7d52eUzMK21QflX JwqOp73t1Nwbtowb4bnxW5WxVysXVnnLUg92Ty9oyTAub7aINDqewaF2Njej0eeZ 9Jw9z7kGjNerXV585R4yXnOYqm+4BHMP/2vVuwZ3pSneqIJmhYdn/HWJ4Z/kl3zh n5BOpyUsu0kGCZDaj/NlOXlq63kuHtIVPCqxKzrHkKEk7LvL2AJmc6FqkMO2U5lo SBYL5JoBIr9OaJORRT+uDf2BgDrEFwjeUZPTzF/r076syQN94CR/iNgt/71sEuxI vrkTTSzXBKoGG7/YBMgvpL870BNCYZNaqQMUbq1zD/WuX+msvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeQGW8A6uiJYs79tKyFbN/umqzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMDhjZmJjOGYtYWQ0Yi0z YmRlLTkwMjktMTE2NGYwYjUzMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALH0hB7LR+LVgGpO1jkcruMnlh3D9G1+tLff/MrLjNaW/xumQFPr75oX sVqhaMA09fMHEtv2QJpEvrpMNSbdnsKr7npCcg1kVtdEzTeAL2Nuced7Wh1DI04Y bvV4WBxDwzwiYGnjT68b0Dw4VwZRLB1zzZRm9aAPplhdZgXc/19rWfGMF1/0c/gB 4dHtYUnk4SAoWmzBtGQMBVuC2765C+JIJctut5+nTeyLANhIqxPyWMqwoneD3SM6 6rIFWCCnlxAdnI6P8o7vGPHr0jriCgbuyK78UPrwZPxbIbY4PUci/L3WrPOxfdfy JAWu8nGU4uSnkJ0aFKrc20OfxxFE1lk= -----END CERTIFICATE-----Generated at Fri Sep 18 01:29:02 2026 by rpki-client