$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa File: 84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa (raw, json) Hash identifier: 73bqH6LdF1RbMKyhkH3JZJMqF4ZO4W4edCa2jKmMXn4= Subject key identifier: 69:47:69:30:49:F6:02:24:E5:03:97:A8:D0:C1:DE:43:8F:48:95:BE Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EA788979A20EF6CE50FB723A0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398420 IP address blocks: 74.126.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:97:9a:20:ef:6c:e5:0f:b7:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=38c735d9-52f0-4bae-8c9d-626644927cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:ca:fb:de:ba:36:e6:7c:42:a6:a7:c8:a8: cd:60:94:8d:bc:14:86:11:eb:a2:56:21:63:ee:f4: 16:b6:b4:18:64:80:23:13:b1:e3:f4:ca:29:c4:4b: e5:ab:91:7a:7c:f7:40:63:aa:a6:e2:d5:dd:85:20: d4:8f:d6:46:06:ab:01:4b:4f:e4:fe:34:e5:75:a5: 31:71:c1:50:20:48:cf:3e:0d:63:de:b8:fd:06:29: c2:4a:e3:59:5d:aa:9c:a1:8c:d5:ea:b1:a2:93:c6: b0:24:0b:38:8f:dc:84:e3:d9:4a:c5:9c:82:8f:d2: f2:45:e1:d9:44:5f:04:e1:b9:ad:2d:f7:02:58:6e: 2d:b2:cf:af:1e:fa:b4:28:b6:b2:67:06:41:d8:41: 5a:4c:e8:4b:b8:c4:28:6d:21:f9:97:b4:dd:91:4d: bd:60:b1:f4:a9:c5:b7:61:59:fd:69:87:84:a3:81: 3b:25:1d:2a:38:03:9d:5c:4b:d8:5d:5b:19:c4:a5: e3:00:ec:51:c3:79:7f:11:83:c1:94:3a:85:6e:66: cb:88:d1:e5:6d:c5:2d:72:14:65:a5:a3:cc:09:b3: 6a:8a:5c:0b:f8:26:ee:2e:87:ef:b9:a7:ad:21:ca: df:29:32:42:07:7d:26:36:4b:cd:3b:2a:a2:26:ec: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:47:69:30:49:F6:02:24:E5:03:97:A8:D0:C1:DE:43:8F:48:95:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b0:3b:9d:b8:e9:6f:0e:30:07:83:f4:7b:52:56:53:2c:da: a3:e6:da:5c:b4:bf:d8:dc:ae:46:98:c8:6b:6c:ff:9a:a4:03: a2:90:ec:30:3f:85:0c:82:b4:a0:e5:39:5a:cd:ff:f6:e3:2d: 82:1d:9e:71:8c:2e:2b:9f:f4:f7:f4:54:71:49:08:ba:68:7b: 5a:1a:d4:11:23:c7:41:ba:c8:d6:11:c0:4c:3e:36:60:d3:f6: b8:c0:8e:93:d9:52:4b:8d:f4:4a:59:62:14:9a:68:0b:56:cb: a8:e0:dc:c4:b2:ed:3e:f7:1a:81:a2:8d:ce:52:00:e3:74:86: b1:eb:0b:ab:64:ae:2b:90:69:e6:24:e0:eb:13:44:44:5f:9d: c0:30:90:d5:db:3e:f7:72:cd:04:3b:d6:40:ae:4b:99:b9:5f: ef:6e:16:34:bb:4c:0f:e7:42:7c:aa:32:25:2f:9e:1e:f7:93: 1a:94:47:eb:78:c3:69:bf:10:4b:00:4a:4d:48:65:9c:f6:94: 4b:d6:a3:8c:3f:27:52:14:2b:6d:46:12:c9:76:d6:bf:1c:5d: 75:6e:ef:ca:d0:ef:64:da:63:6d:d6:0d:4c:3a:32:0f:d6:41: 9c:a7:c5:79:ad:10:8d:8e:a2:b1:7e:31:0c:d3:52:e9:7e:9d: cf:b4:ff:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJeaIO9s5Q+3I6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzhjNzM1ZDktNTJmMC00YmFlLThjOWQtNjI2NjQ0OTI3Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGnK+966NuZ8QqanyKjNYJSNvBSGEeuiViFj 7vQWtrQYZIAjE7Hj9MopxEvlq5F6fPdAY6qm4tXdhSDUj9ZGBqsBS0/k/jTldaUx ccFQIEjPPg1j3rj9BinCSuNZXaqcoYzV6rGik8awJAs4j9yE49lKxZyCj9LyReHZ RF8E4bmtLfcCWG4tss+vHvq0KLayZwZB2EFaTOhLuMQobSH5l7TdkU29YLH0qcW3 YVn9aYeEo4E7JR0qOAOdXEvYXVsZxKXjAOxRw3l/EYPBlDqFbmbLiNHlbcUtchRl paPMCbNqilwL+CbuLofvuaetIcrfKTJCB30mNkvNOyqiJuwkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlHaTBJ9gIk5QOXqNDB3kOPSJW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvODRlNWU3ZmUtYmYxZi0z MWQ1LTkzODYtNGJjYWNmNWMyMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGwO5246W8OMAeD9HtSVlMs2qPm2ly0v9jcrkaYyGts/5qkA6KQ7DA/ hQyCtKDlOVrN//bjLYIdnnGMLiuf9Pf0VHFJCLpoe1oa1BEjx0G6yNYRwEw+NmDT 9rjAjpPZUkuN9EpZYhSaaAtWy6jg3MSy7T73GoGijc5SAON0hrHrC6tkriuQaeYk 4OsTRERfncAwkNXbPvdyzQQ71kCuS5m5X+9uFjS7TA/nQnyqMiUvnh73kxqUR+t4 w2m/EEsASk1IZZz2lEvWo4w/J1IUK21GEsl21r8cXXVu78rQ72TaY23WDUw6Mg/W QZynxXmtEI2OorF+MQzTUul+nc+0//Q= -----END CERTIFICATE-----Generated at Wed Aug 26 22:37:19 2026 by rpki-client