$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa File: bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa (raw, json) Hash identifier: nN/KaBHnNIb0iBv9YzQ18mM6a7lqDRQZ2Zf8xW6XuYE= Subject key identifier: F5:8A:03:7A:D6:3E:8C:BB:A4:C5:D5:6B:6E:DA:DB:4E:46:E3:95:81 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584DEF45FF19BCFC3D7BD6111580 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 396185 IP address blocks: 74.127.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:ff:19:bc:fc:3d:7b:d6:11:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=4d56c3f8-dad7-49bc-98c1-6f60d14009a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:1b:fd:3e:8e:3a:d8:d5:03:76:5d:be:f5: 0b:08:97:0f:51:31:cd:90:46:e1:1a:97:78:2a:fa: f3:36:3f:0a:b3:bb:bc:d4:a0:50:fe:8f:26:70:89: 5c:0e:0d:b7:d3:a7:2a:88:1a:12:74:c9:dd:15:6a: 0b:eb:18:d2:89:4b:25:0c:a2:92:1b:6e:76:20:df: 51:3d:67:be:fe:70:95:81:a2:f7:be:83:5a:13:51: 6e:22:94:75:fb:55:64:bc:9d:d8:e5:cf:af:28:32: 1c:9c:cb:af:ab:17:20:f3:58:bf:88:1e:8c:a6:3c: 8b:f5:d6:4e:8f:3b:f1:71:36:c1:03:34:ea:85:82: b6:ca:d4:83:65:30:10:5d:e3:50:25:96:d8:8d:e5: ac:e7:0c:8e:3d:e6:8c:9e:d3:97:cf:18:dc:3c:58: 33:bc:4d:5c:74:1e:b3:67:17:e0:97:af:29:85:cf: 59:a4:3b:17:43:d2:93:41:c8:1b:83:b1:79:d0:b7: 06:0f:13:5f:a6:dc:77:f0:12:94:8f:15:a1:b9:f3: c0:a4:31:ad:89:a8:30:aa:10:5c:ab:7b:05:05:a6: 25:91:3f:2c:b1:a8:b2:92:b0:dc:13:29:4f:7e:e7: ad:e0:a2:78:5f:b0:46:1d:f5:ef:5c:68:04:c4:eb: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8A:03:7A:D6:3E:8C:BB:A4:C5:D5:6B:6E:DA:DB:4E:46:E3:95:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2b:93:58:36:25:86:6e:c1:e1:8a:b8:dc:7f:c0:c0:49:d8: 3f:ea:0e:ae:95:7c:7d:68:5b:ea:e4:b4:fb:25:79:51:15:36: d6:c1:a9:b0:58:e4:3c:9f:87:2c:5e:d7:88:1a:fc:05:b1:ad: 04:eb:1e:4b:d2:62:5f:08:72:c4:bb:50:2f:14:ab:ce:07:25: 15:1a:2c:da:67:8e:05:da:6c:07:18:6a:e0:e9:0c:16:4d:e7: d4:15:80:87:03:a0:55:77:d0:d1:03:c0:4c:01:1e:30:59:74: 58:24:ce:16:6f:14:df:66:a1:48:db:30:c0:67:03:2c:49:de: 5c:ea:03:e3:95:b4:45:91:33:b1:5a:32:c2:fc:ff:c6:b4:4a: f7:d3:ed:86:7e:1a:46:e6:ea:28:84:97:e8:c3:c6:b0:a8:7d: 73:34:43:aa:72:d3:e8:fc:0e:a6:b1:56:81:87:45:26:01:4c: 47:8e:2d:78:0e:f6:ac:6d:b8:30:53:ea:de:bb:b8:60:c5:90: bc:a7:13:b5:d7:15:18:b2:57:f1:74:28:70:4a:ac:02:5a:3c: ad:88:f6:b5:6d:b5:9d:a9:9b:4f:52:d1:20:b8:38:98:b0:75: 45:a7:b8:74:16:fc:61:88:0b:28:10:e0:b0:09:d1:fd:0a:4d: e9:1e:b7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRf8ZvPw9e9YRFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk NGQ1NmMzZjgtZGFkNy00OWJjLTk4YzEtNmY2MGQxNDAwOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcUb/T6OOtjVA3ZdvvULCJcPUTHNkEbhGpd4 KvrzNj8Ks7u81KBQ/o8mcIlcDg2306cqiBoSdMndFWoL6xjSiUslDKKSG252IN9R PWe+/nCVgaL3voNaE1FuIpR1+1VkvJ3Y5c+vKDIcnMuvqxcg81i/iB6MpjyL9dZO jzvxcTbBAzTqhYK2ytSDZTAQXeNQJZbYjeWs5wyOPeaMntOXzxjcPFgzvE1cdB6z Zxfgl68phc9ZpDsXQ9KTQcgbg7F50LcGDxNfptx38BKUjxWhufPApDGtiagwqhBc q3sFBaYlkT8ssaiykrDcEylPfuet4KJ4X7BGHfXvXGgExOvD4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWKA3rWPoy7pMXVa27a205G45WBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvYmQ4OTQ0OWQtMDM1My0z YzU0LTg3M2QtMWYwYjA0ZDdkZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJork1g2JYZuweGKuNx/wMBJ2D/qDq6VfH1oW+rktPsleVEVNtbBqbBY 5Dyfhyxe14ga/AWxrQTrHkvSYl8IcsS7UC8Uq84HJRUaLNpnjgXabAcYauDpDBZN 59QVgIcDoFV30NEDwEwBHjBZdFgkzhZvFN9moUjbMMBnAyxJ3lzqA+OVtEWRM7Fa MsL8/8a0SvfT7YZ+Gkbm6iiEl+jDxrCofXM0Q6py0+j8DqaxVoGHRSYBTEeOLXgO 9qxtuDBT6t67uGDFkLynE7XXFRiyV/F0KHBKrAJaPK2I9rVttZ2pm09S0SC4OJiw dUWnuHQW/GGICygQ4LAJ0f0KTeketxk= -----END CERTIFICATE-----Generated at Mon Jun 1 22:58:57 2026 by rpki-client