$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/66e5e881-46e0-3dda-8829-1a174d6b8d9e.roa File: 66e5e881-46e0-3dda-8829-1a174d6b8d9e.roa (raw, json) Hash identifier: 7Cfz1JExkJgVfJQbERyGwF/iPgQMYKHxVszyF52t8Ds= Subject key identifier: 8C:3A:48:C8:23:C1:6C:65:2E:FE:85:FA:67:99:CF:16:28:D9:2C:0A Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EBA18D55D5B19A58235F5C800 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/66e5e881-46e0-3dda-8829-1a174d6b8d9e.roa Signing time: Tue 04 Aug 2026 16:38:54 +0000 ROA not before: Tue 04 Aug 2026 16:38:54 +0000 ROA not after: Mon 02 Nov 2026 17:38:54 +0000 asID: 398420 IP address blocks: 74.207.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:18:d5:5d:5b:19:a5:82:35:f5:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Aug 4 16:38:54 2026 GMT Not After : Nov 2 17:38:54 2026 GMT Subject: CN=d6ba970e-7f05-4711-b79c-67500f6f2c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:29:6d:2b:b8:05:56:36:53:e6:7d:33:2e: 81:02:25:ba:92:c3:0f:39:14:dd:4d:1b:eb:86:bb: 61:bc:51:c8:58:b9:94:fc:84:d7:15:60:07:33:9e: 2e:74:ea:81:62:b2:96:82:f7:ea:e1:19:bc:ed:9f: 99:a5:bc:0c:96:c5:58:85:58:32:24:b5:10:20:78: 0e:0b:34:c0:b8:3f:25:99:78:bd:b9:3f:d3:5c:71: f3:c8:8a:7c:0e:ee:04:d4:d9:da:3b:fe:3a:38:78: f6:06:64:81:c7:0a:b4:ce:38:03:da:eb:12:f3:37: 2d:4d:a8:84:6a:df:2a:1a:57:03:ac:14:e3:9c:c6: db:f8:41:07:58:23:64:2c:31:bb:23:cf:9a:36:85: 27:a7:a7:45:71:7e:ae:3b:f3:c3:5c:bd:63:b8:b3: 9a:4d:1c:55:23:bb:0b:02:57:19:1c:f4:57:89:2c: 65:d8:97:cb:7f:0a:f5:b4:f3:f5:82:ab:77:94:e7: 9b:92:1c:bd:88:e6:49:4c:4a:68:12:ca:a0:6e:0b: cd:26:ba:c3:83:f6:8f:2d:da:8e:d4:a5:cc:a9:22: ca:68:ab:20:6b:ff:4d:e0:ea:70:d5:b9:2b:bd:81: fb:dd:c4:ed:94:23:39:f9:ed:c2:cd:a8:28:d0:08: 4d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3A:48:C8:23:C1:6C:65:2E:FE:85:FA:67:99:CF:16:28:D9:2C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/66e5e881-46e0-3dda-8829-1a174d6b8d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.207.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ea:ff:9b:c4:80:0d:f3:98:22:7e:26:0b:06:2f:25:35:b3: c1:4b:36:19:b2:eb:ed:31:ab:7f:06:58:d6:ee:f3:ba:78:9f: 6e:c4:53:6a:e6:8c:39:f6:c9:58:95:67:d9:1a:f7:b3:8f:b6: 97:99:2b:68:fc:b6:95:1e:2c:90:ec:b2:66:c4:9e:11:92:e5: 74:57:19:a4:42:bd:7a:a6:a4:8d:ad:0b:da:2b:34:06:f4:1f: 71:9a:df:75:64:5d:bf:b6:f4:f2:0a:e9:35:59:bc:2f:9c:3e: a7:a0:12:92:df:0a:6e:2c:1c:f8:95:3b:ed:5d:80:07:d8:4e: 92:67:f6:b3:57:1b:99:f0:ca:54:38:fb:32:26:54:96:1a:53: 42:2e:9b:33:9c:00:6a:02:38:a2:53:20:be:30:33:58:ad:49: ca:bf:d2:28:8d:b2:b6:a3:00:ba:87:75:c4:4a:d2:79:df:84: b8:31:ae:0a:99:ce:ab:c9:ea:fe:de:a7:8f:d9:6a:d8:33:39: d8:06:d1:f5:21:a2:80:b5:0e:54:cb:0b:e4:16:e9:48:62:af: b7:b0:a5:fd:6c:ac:de:07:25:48:ad:ac:20:b0:b9:43:85:a4: 06:0c:68:f9:86:6a:ab:9c:5f:ac:f6:09:b8:1e:e7:28:ad:9a: 62:fc:28:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66GNVdWxmlgjX1yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDgwNDE2Mzg1NFoXDTI2MTEwMjE3Mzg1NFowLzEtMCsGA1UEAxMk ZDZiYTk3MGUtN2YwNS00NzExLWI3OWMtNjc1MDBmNmYyYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCkpbSu4BVY2U+Z9My6BAiW6ksMPORTdTRvr hrthvFHIWLmU/ITXFWAHM54udOqBYrKWgvfq4Rm87Z+ZpbwMlsVYhVgyJLUQIHgO CzTAuD8lmXi9uT/TXHHzyIp8Du4E1NnaO/46OHj2BmSBxwq0zjgD2usS8zctTaiE at8qGlcDrBTjnMbb+EEHWCNkLDG7I8+aNoUnp6dFcX6uO/PDXL1juLOaTRxVI7sL AlcZHPRXiSxl2JfLfwr1tPP1gqt3lOebkhy9iOZJTEpoEsqgbgvNJrrDg/aPLdqO 1KXMqSLKaKsga/9N4Opw1bkrvYH73cTtlCM5+e3Czago0AhNiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw6SMgjwWxlLv6F+meZzxYo2SwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNjZlNWU4ODEtNDZlMC0z ZGRhLTg4MjktMWExNzRkNmI4ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSs/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADq/5vEgA3zmCJ+JgsGLyU1s8FLNhmy6+0xq38GWNbu87p4n27EU2rm jDn2yViVZ9ka97OPtpeZK2j8tpUeLJDssmbEnhGS5XRXGaRCvXqmpI2tC9orNAb0 H3Ga33VkXb+29PIK6TVZvC+cPqegEpLfCm4sHPiVO+1dgAfYTpJn9rNXG5nwylQ4 +zImVJYaU0IumzOcAGoCOKJTIL4wM1itScq/0iiNsrajALqHdcRK0nnfhLgxrgqZ zqvJ6v7ep4/ZatgzOdgG0fUhooC1DlTLC+QW6Uhir7ewpf1srN4HJUitrCCwuUOF pAYMaPmGaqucX6z2Cbge5yitmmL8KEc= -----END CERTIFICATE-----Generated at Wed Aug 26 02:25:35 2026 by rpki-client