$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: VEAEqFSydhjhs1cgl2SZkFPrTsjcPUggVGKLoGzHjPM= Subject key identifier: 09:C5:6B:09:9C:AE:26:59:77:35:F5:EE:73:4D:59:41:16:88:58:27 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EA7889A039B947D298BEA0080 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:9a:03:9b:94:7d:29:8b:ea:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7cfe61c8-ea19-441d-aa53-c5685de7a9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:8e:99:bb:54:73:bd:a6:20:72:8c:6f:79: 92:a3:b7:d4:57:33:73:0d:69:e0:df:00:f1:41:16: 75:af:72:27:f4:9e:79:bb:40:01:f9:45:8f:74:30: ac:90:0d:f1:01:43:d2:9c:4c:de:49:ab:19:64:83: 00:e7:be:04:4e:ac:e8:cc:b8:9a:49:49:1b:fb:13: 37:e1:b2:5f:ab:7f:d3:eb:07:d2:81:5b:f6:88:99: 48:8d:51:e6:af:e2:9b:9f:36:18:38:10:53:a7:46: 00:c1:86:d3:c3:c6:87:97:54:4c:2a:58:e0:d6:18: 34:81:62:fd:ac:70:ef:4a:54:34:87:2f:c5:33:60: 8a:5b:ed:c6:32:ba:63:38:a4:84:78:13:aa:c5:9f: 87:45:b1:a2:16:58:9e:a6:c2:83:da:ba:4a:47:4a: 08:33:a5:67:29:82:e6:b8:b3:30:00:fe:5e:ab:87: 0b:a1:2e:d3:f7:95:74:5d:7a:bf:96:01:c0:7d:ea: a7:d8:ff:f9:8c:21:df:2d:80:00:36:c7:23:58:64: a8:e7:ff:bb:5d:52:c6:7f:7b:3b:4f:03:9c:48:9a: 24:6c:a5:0b:84:78:0a:78:5e:f5:6b:a8:57:b2:c3: cd:5f:1d:ff:73:ce:11:e5:fb:31:9d:e4:5f:b7:40: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C5:6B:09:9C:AE:26:59:77:35:F5:EE:73:4D:59:41:16:88:58:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:62:27:99:88:6f:bb:d1:7f:eb:56:1d:63:7e:63:cb:4d:4b: f1:6a:55:33:1c:29:b7:28:6c:a3:2a:1f:b2:dd:bb:a2:4d:5d: eb:c0:d4:3c:22:e7:b3:79:57:77:75:29:73:68:ad:fb:20:a6: f5:7f:e4:77:6a:af:d1:ed:98:b3:38:f8:54:95:c7:69:dc:aa: 0a:48:7f:24:b8:c6:7f:fc:cc:d4:05:c7:9d:a3:16:e5:9e:1e: 67:39:9c:0c:22:58:16:ed:14:1b:e4:90:0d:3b:0e:2a:9f:27: 18:e6:de:e0:4a:3b:ec:2d:19:77:8d:2f:0d:46:ce:f1:65:df: bc:2b:fc:20:64:3f:a7:0f:18:6a:e3:7c:e1:ca:be:97:6e:a5: ba:2a:33:2a:87:dc:5e:4c:c5:df:06:26:a6:d4:18:37:8d:7d: b5:b9:af:33:04:1d:cc:2d:3c:d8:05:f5:af:9b:e0:4c:34:45: b2:38:e4:0e:01:04:4f:6b:6a:de:1e:96:ca:e5:3a:b0:ee:17: 8d:50:1e:0b:c9:0d:5c:67:05:a3:bf:4d:73:02:33:9c:be:84: ab:91:6c:02:10:6d:aa:1f:6d:38:49:92:78:d8:fc:eb:3d:83: 95:de:1a:a5:46:1b:d8:d5:60:ac:13:0d:29:a5:18:e3:35:8e: 95:03:ab:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJoDm5R9KYvqAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2NmZTYxYzgtZWExOS00NDFkLWFhNTMtYzU2ODVkZTdhOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5iOmbtUc72mIHKMb3mSo7fUVzNzDWng3wDx QRZ1r3In9J55u0AB+UWPdDCskA3xAUPSnEzeSasZZIMA574ETqzozLiaSUkb+xM3 4bJfq3/T6wfSgVv2iJlIjVHmr+KbnzYYOBBTp0YAwYbTw8aHl1RMKljg1hg0gWL9 rHDvSlQ0hy/FM2CKW+3GMrpjOKSEeBOqxZ+HRbGiFliepsKD2rpKR0oIM6VnKYLm uLMwAP5eq4cLoS7T95V0XXq/lgHAfeqn2P/5jCHfLYAANscjWGSo5/+7XVLGf3s7 TwOcSJokbKULhHgKeF71a6hXssPNXx3/c84R5fsxneRft0DQtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnFawmcriZZdzX17nNNWUEWiFgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChiJ5mIb7vRf+tWHWN+Y8tNS/FqVTMcKbcobKMqH7Ldu6JNXevA1Dwi 57N5V3d1KXNorfsgpvV/5Hdqr9HtmLM4+FSVx2ncqgpIfyS4xn/8zNQFx52jFuWe Hmc5nAwiWBbtFBvkkA07DiqfJxjm3uBKO+wtGXeNLw1GzvFl37wr/CBkP6cPGGrj fOHKvpdupboqMyqH3F5Mxd8GJqbUGDeNfbW5rzMEHcwtPNgF9a+b4Ew0RbI45A4B BE9rat4elsrlOrDuF41QHgvJDVxnBaO/TXMCM5y+hKuRbAIQbaofbThJknjY/Os9 g5XeGqVGG9jVYKwTDSmlGOM1jpUDq1k= -----END CERTIFICATE-----Generated at Wed Aug 26 02:27:20 2026 by rpki-client