$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa File: 255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa (raw, json) Hash identifier: ev+RJgdJX8MUgbAeO14iagCgxzmWyDPvlYBH7Q8rQfw= Subject key identifier: 12:43:11:A4:5A:4F:25:C8:86:AA:E0:B3:99:CC:BD:10:5E:DF:AF:EA Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584EA794D845663EB8DB29B78500 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396185 IP address blocks: 74.127.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:d8:45:66:3e:b8:db:29:b7:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=94519398-e532-4598-a7da-843be10381f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:89:e5:d3:ff:a5:a1:41:6e:2e:72:99:19: cc:7b:85:0c:70:04:15:9c:e3:12:bf:8d:1f:63:5b: a8:0e:f0:99:d1:b7:6e:29:ae:a8:e2:20:6c:10:70: b8:18:ad:83:d8:a1:6f:9c:93:bd:e5:f2:0a:73:46: a8:8a:11:b1:fa:b7:80:2d:1c:c8:b0:e2:ab:5f:2d: f4:f7:29:42:f8:d1:55:41:11:c4:00:19:d6:9c:b8: c9:84:e7:86:f1:79:43:92:09:6a:f1:1d:98:12:e5: f5:c6:c3:0d:07:9b:3e:09:10:8b:7e:a1:98:67:44: 49:18:83:bf:fe:cc:a1:a5:9b:72:c9:dc:79:03:0a: 72:e9:5d:fa:4a:b1:27:25:13:15:85:fc:14:fb:75: d0:a2:49:0a:29:fd:06:9d:96:a2:fa:9b:9b:8e:49: 14:c6:a5:18:91:49:65:de:d3:64:d2:a7:24:61:c7: 3b:07:5a:63:13:39:41:57:8b:86:65:6b:10:48:28: e4:f5:8a:fd:e9:56:50:f0:ef:81:b2:b8:21:43:07: 15:33:dc:76:90:99:fa:33:5b:4f:04:0c:5d:95:d7: ae:6f:ad:e3:2a:a7:9b:5a:9b:e9:1f:93:4d:c4:03: 6e:57:29:84:b0:03:8e:7d:3d:87:b1:8b:30:d5:30: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:11:A4:5A:4F:25:C8:86:AA:E0:B3:99:CC:BD:10:5E:DF:AF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f4:b6:8c:1b:50:15:2f:59:29:f7:34:66:3f:69:6d:47:6a: 19:69:27:0b:51:71:eb:e9:b8:49:3b:9e:c8:98:2b:53:a4:05: 19:72:45:90:49:d0:c8:a4:77:2f:e0:d0:12:4f:da:ab:fc:56: 34:75:a7:6f:2b:42:02:26:7c:01:a2:df:4b:5d:d1:df:d9:47: b8:58:f8:34:a7:c6:0a:2b:10:40:ac:96:8f:60:6b:cb:3d:4e: a6:19:42:a7:03:3a:3d:3a:ee:ba:ce:bf:68:ff:c2:c4:d5:a0: 5b:49:7e:3f:fe:a9:27:42:04:f7:4c:e1:f7:a0:9e:97:ca:43: a7:c1:5a:8d:48:b9:c1:63:4d:7d:c6:f0:5e:4e:3e:be:03:77: f3:29:e9:eb:dd:7f:0e:ec:68:b7:8b:5c:ea:45:1e:4b:cc:6d: 7e:10:64:b9:2f:ff:a7:73:57:ec:fc:35:80:c7:96:64:c2:bc: e3:3c:da:a3:6f:a6:92:16:df:6c:b9:7e:4a:28:83:8f:b0:0d: 8e:18:60:ec:16:97:45:f4:59:af:30:87:e0:ba:23:15:af:48: a2:bf:8c:b1:91:4a:72:da:9c:46:8b:6a:d6:d8:75:a1:a5:30: da:29:00:84:7f:30:ee:3c:68:86:d2:fd:00:89:15:e7:c2:d8: bc:53:f3:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlNhFZj642ym3hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTQ1MTkzOTgtZTUzMi00NTk4LWE3ZGEtODQzYmUxMDM4MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1eJ5dP/paFBbi5ymRnMe4UMcAQVnOMSv40f Y1uoDvCZ0bduKa6o4iBsEHC4GK2D2KFvnJO95fIKc0aoihGx+reALRzIsOKrXy30 9ylC+NFVQRHEABnWnLjJhOeG8XlDkglq8R2YEuX1xsMNB5s+CRCLfqGYZ0RJGIO/ /syhpZtyydx5Awpy6V36SrEnJRMVhfwU+3XQokkKKf0GnZai+pubjkkUxqUYkUll 3tNk0qckYcc7B1pjEzlBV4uGZWsQSCjk9Yr96VZQ8O+BsrghQwcVM9x2kJn6M1tP BAxdldeub63jKqebWpvpH5NNxANuVymEsAOOfT2HsYsw1TDibwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJDEaRaTyXIhqrgs5nMvRBe36/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMjU1ZmIzZTItNjZiMS0z YzJhLTgwZDgtZjg4MDYzNDhjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX0towbUBUvWSn3NGY/aW1HahlpJwtRcevpuEk7nsiYK1OkBRlyRZBJ 0Mikdy/g0BJP2qv8VjR1p28rQgImfAGi30td0d/ZR7hY+DSnxgorEECslo9ga8s9 TqYZQqcDOj067rrOv2j/wsTVoFtJfj/+qSdCBPdM4fegnpfKQ6fBWo1IucFjTX3G 8F5OPr4Dd/Mp6evdfw7saLeLXOpFHkvMbX4QZLkv/6dzV+z8NYDHlmTCvOM82qNv ppIW32y5fkoog4+wDY4YYOwWl0X0Wa8wh+C6IxWvSKK/jLGRSnLanEaLatbYdaGl MNopAIR/MO48aIbS/QCJFefC2LxT808= -----END CERTIFICATE-----Generated at Fri Sep 11 15:43:27 2026 by rpki-client