$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/0b44d774-84da-3f22-a953-f5a3b3fba7e4.roa File: 0b44d774-84da-3f22-a953-f5a3b3fba7e4.roa (raw, json) Hash identifier: uVWAD+xYtaj5JbVcoglb5eF58CI8a4eocaiA4oTlAlo= Subject key identifier: 06:D6:13:EE:CD:CD:BC:73:63:BC:00:D9:32:01:0E:17:57:B8:2F:7B Certificate issuer: /CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b Certificate serial: 010D0C9F4328584F0C077A9FF3CC509A30F04DA0 Authority key identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/0b44d774-84da-3f22-a953-f5a3b3fba7e4.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 394199 IP address blocks: 74.114.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:7a:9f:f3:cc:50:9a:30:f0:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=f58734f0-78d9-47ec-b105-5ccbf3b5d58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:4e:d7:b9:20:a1:85:82:fd:24:de:ce:f0: b1:dd:2c:9b:a0:40:2c:c9:52:07:be:aa:ed:98:59: 61:98:76:05:7c:e0:55:96:84:7d:a3:34:5f:a3:da: d0:7e:86:ae:72:41:b8:9c:77:e3:1b:5b:9e:96:92: 46:45:49:6d:34:97:84:9d:1d:2c:8e:12:a5:09:a1: ac:ce:95:53:02:33:51:72:40:f3:88:77:5c:8e:26: e0:7e:b1:b4:4c:15:5c:9d:85:26:9e:4e:2f:cc:ea: ab:2d:65:8d:a8:8a:db:b7:48:a7:ee:c7:ac:34:ca: 2c:4a:24:02:31:70:ba:31:0d:2e:9f:56:5c:17:c3: c5:2d:ad:aa:31:36:d2:78:62:b2:65:cc:97:ff:c2: ab:30:cb:ad:c0:3f:da:74:0f:29:bb:b2:37:12:2d: ca:e2:cf:4d:46:ad:ff:f1:f5:64:8f:f3:56:dc:4d: f9:5c:9c:4b:ce:b6:2e:2d:e0:5c:c0:b7:90:5d:ec: 42:27:f6:cc:0f:30:4e:23:89:89:c3:cd:55:51:af: 91:82:6b:06:c0:c1:86:70:f7:44:d8:9e:44:cc:9d: d8:92:25:71:57:6d:3a:2e:53:7d:cb:dc:ab:a0:b1: 84:1f:83:3c:65:66:86:0c:91:db:9e:1f:b1:81:3f: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D6:13:EE:CD:CD:BC:73:63:BC:00:D9:32:01:0E:17:57:B8:2F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/0b44d774-84da-3f22-a953-f5a3b3fba7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.crl X509v3 Authority Key Identifier: keyid:54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer sbgp-ipAddrBlock: critical IPv4: 74.114.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:85:de:99:5e:fa:28:e4:0b:a4:bc:bd:7a:06:a5:a8:0e:c9: d7:03:29:27:13:96:3e:fd:28:9b:eb:76:14:0f:b6:f5:c4:8d: f5:bb:be:46:f1:af:7f:f1:ae:d0:0a:d3:50:15:9f:a8:f0:39: 11:d8:7f:1c:0b:7e:b7:f8:55:f7:f8:63:04:e1:33:5c:b0:a9: 6a:88:1c:bf:75:f5:39:53:3a:85:ae:cf:a6:96:88:48:2f:2a: 01:d8:29:bb:94:76:15:b2:fa:2d:69:9f:34:34:e7:ae:e4:fe: 42:cc:e4:40:27:e1:2a:4e:97:bc:30:88:f9:67:af:5d:70:cd: 63:87:fd:86:8c:b7:75:3b:0d:55:8d:f8:41:97:f2:fc:ed:8e: 66:dd:e5:98:af:ae:00:8f:e6:d0:78:c1:55:88:46:1d:05:d7: ac:5a:07:a6:5e:29:ef:8c:19:55:69:30:1b:a8:9f:a5:f1:35: 03:7d:7c:67:75:94:f2:57:8a:13:c0:24:93:f0:f5:7e:49:0c: 2b:5c:87:a5:39:98:0c:1c:41:85:2c:ff:24:7d:6d:41:db:f0: ca:b8:de:3d:c0:ec:4e:1e:7d:82:28:73:3a:32:1d:f8:9e:c1: dc:ce:7a:ef:a8:9c:e9:56:74:74:69:5c:bc:24:ec:99:48:0e: e3:f9:d8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB3qf88xQmjDwTaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExMWRjZGMtMzVmOC00YTJmLWI2NjctYmU2YmFmNWVi ZjliMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjU4NzM0ZjAtNzhkOS00N2VjLWIxMDUtNWNjYmYzYjVkNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU9O17kgoYWC/STezvCx3SyboEAsyVIHvqrt mFlhmHYFfOBVloR9ozRfo9rQfoauckG4nHfjG1uelpJGRUltNJeEnR0sjhKlCaGs zpVTAjNRckDziHdcjibgfrG0TBVcnYUmnk4vzOqrLWWNqIrbt0in7sesNMosSiQC MXC6MQ0un1ZcF8PFLa2qMTbSeGKyZcyX/8KrMMutwD/adA8pu7I3Ei3K4s9NRq3/ 8fVkj/NW3E35XJxLzrYuLeBcwLeQXexCJ/bMDzBOI4mJw81VUa+RgmsGwMGGcPdE 2J5EzJ3YkiVxV206LlN9y9yroLGEH4M8ZWaGDJHbnh+xgT9WrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbWE+7NzbxzY7wA2TIBDhdXuC97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MTEx ZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1ZWJmOWIvMGI0NGQ3NzQtODRkYS0z ZjIyLWE5NTMtZjVhM2IzZmJhN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTExMWRjZGMtMzVmOC00YTJmLWI2 NjctYmU2YmFmNWViZjliLzUxMTFkY2RjLTM1ZjgtNGEyZi1iNjY3LWJlNmJhZjVl YmY5Yi5jcmwwHwYDVR0jBBgwFoAUVGjpNbfoRitbfEoCc1nrXda/XaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZi YWY1ZWJmOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKF3ple+ijkC6S8vXoGpagOydcDKScTlj79KJvrdhQPtvXEjfW7vkbx r3/xrtAK01AVn6jwORHYfxwLfrf4Vff4YwThM1ywqWqIHL919TlTOoWuz6aWiEgv KgHYKbuUdhWy+i1pnzQ0567k/kLM5EAn4SpOl7wwiPlnr11wzWOH/YaMt3U7DVWN +EGX8vztjmbd5ZivrgCP5tB4wVWIRh0F16xaB6ZeKe+MGVVpMBuon6XxNQN9fGd1 lPJXihPAJJPw9X5JDCtch6U5mAwcQYUs/yR9bUHb8Mq43j3A7E4efYIoczoyHfie wdzOeu+onOlWdHRpXLwk7JlIDuP52Cc= -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:29 2026 by rpki-client