$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa File: 4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json) Hash identifier: 4nV2IXQBxHnXAhbKUQjuXpzjxti18pPye6zMTFfbu0s= Subject key identifier: 23:4F:3A:A5:0B:55:53:6A:25:9D:02:02:07:0A:1B:AF:C4:C3:2A:A7 Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F4328584F71ED9CC32DA152A61A3BA100 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 399989 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9c:c3:2d:a1:52:a6:1a:3b:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=cdd8920a-dc3e-4c7b-884d-318f828d0a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:67:a7:05:6f:07:e6:c0:df:4e:e5:bf:1f: 2c:fd:4c:b8:e5:d9:28:52:1a:77:f2:a5:7b:ce:0d: f0:1d:31:2f:13:04:bf:cc:49:e8:34:8c:d9:92:59: 2c:45:f1:db:2f:78:6c:99:65:38:76:bd:0f:ad:01: 45:3a:d0:85:91:05:c2:f4:0b:8a:df:38:68:b1:3c: 52:0f:76:9f:14:d4:cd:88:31:2c:ee:2c:04:a8:8c: 14:fc:a9:41:ed:4d:82:e8:88:a5:83:05:c1:83:70: 34:aa:31:0c:4b:47:7e:06:3f:f0:cc:74:f5:46:20: 47:87:89:c5:bb:3e:d7:e9:be:1c:0e:e5:71:96:8f: 5c:5c:8b:50:d3:5c:b0:a0:3b:5a:b2:00:6f:db:78: 9c:b9:10:0c:a4:35:2a:7a:84:b2:61:36:12:12:e3: e9:69:83:d2:22:92:95:0e:ac:51:d8:3e:16:71:7f: ba:e9:e2:b0:ae:39:7e:d0:95:58:a4:51:45:3a:c2: 96:58:56:39:ed:71:30:71:54:cd:05:c8:96:be:b9: e8:ba:48:b5:ed:83:51:74:48:d9:58:c3:8f:01:f7: e0:45:1f:20:b8:17:0e:36:ca:e8:6a:1d:8b:12:0f: 80:e0:f5:a7:eb:52:ff:7a:4b:b3:45:18:af:7f:41: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:3A:A5:0B:55:53:6A:25:9D:02:02:07:0A:1B:AF:C4:C3:2A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:36:33:51:01:88:09:8a:83:50:3d:10:65:fc:ee:51:c4:7a: b5:1c:34:83:f4:49:5d:12:df:75:dc:e3:74:53:84:3c:fd:0b: d7:2d:fd:bd:f8:f5:40:b7:fd:ea:7d:02:d5:59:58:ae:52:83: 79:89:ea:a2:ee:59:e8:0d:49:33:01:fc:e2:d2:f5:5d:e6:c1: 85:7d:69:7b:8e:cd:1d:ce:ff:51:67:81:68:94:7e:03:2d:7d: a5:a6:91:af:22:55:25:ef:30:67:1e:03:4d:e4:a9:eb:b7:42: cd:3b:df:ad:c4:cb:b5:63:ac:f7:86:a0:6e:4d:57:09:af:3b: 17:b0:76:16:05:66:86:f4:51:25:00:36:fd:b8:f1:38:e3:dc: dc:ff:42:b9:cb:92:d6:f7:a4:12:7f:ab:8a:72:9c:1a:4b:fb: 15:0f:78:02:83:4b:84:bf:ab:61:47:dc:30:f7:79:c9:9d:62: 55:68:a5:3a:a9:2d:03:6c:e0:0c:06:34:c0:dd:d0:18:3c:d1: 8f:4b:50:23:81:9b:dd:0c:fe:38:dc:b7:fc:82:40:64:59:b7: dd:8a:84:e6:88:c1:6a:68:f9:62:7f:b1:07:86:71:c8:4f:bd: 77:3d:50:77:ba:d8:ab:1c:92:a2:4c:0f:2e:a0:af:a7:f1:d9: 44:5c:d2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZzDLaFSpho7oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk Y2RkODkyMGEtZGMzZS00YzdiLTg4NGQtMzE4ZjgyOGQwYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFtnpwVvB+bA307lvx8s/Uy45dkoUhp38qV7 zg3wHTEvEwS/zEnoNIzZklksRfHbL3hsmWU4dr0PrQFFOtCFkQXC9AuK3zhosTxS D3afFNTNiDEs7iwEqIwU/KlB7U2C6IilgwXBg3A0qjEMS0d+Bj/wzHT1RiBHh4nF uz7X6b4cDuVxlo9cXItQ01ywoDtasgBv23icuRAMpDUqeoSyYTYSEuPpaYPSIpKV DqxR2D4WcX+66eKwrjl+0JVYpFFFOsKWWFY57XEwcVTNBciWvrnouki17YNRdEjZ WMOPAffgRR8guBcONsroah2LEg+A4PWn61L/ekuzRRivf0EayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNPOqULVVNqJZ0CAgcKG6/EwyqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvNGE0OGUyMGEtMGUyOS0z ZTFmLWE4MWUtNGE3MmI3NDJlNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc2M1EBiAmKg1A9EGX87lHEerUcNIP0SV0S33Xc43RThDz9C9ct/b34 9UC3/ep9AtVZWK5Sg3mJ6qLuWegNSTMB/OLS9V3mwYV9aXuOzR3O/1FngWiUfgMt faWmka8iVSXvMGceA03kqeu3Qs07363Ey7VjrPeGoG5NVwmvOxewdhYFZob0USUA Nv248Tjj3Nz/QrnLktb3pBJ/q4pynBpL+xUPeAKDS4S/q2FH3DD3ecmdYlVopTqp LQNs4AwGNMDd0Bg80Y9LUCOBm90M/jjct/yCQGRZt92KhOaIwWpo+WJ/sQeGcchP vXc9UHe62KsckqJMDy6gr6fx2URc0jE= -----END CERTIFICATE-----Generated at Tue Oct 20 01:53:15 2026 by rpki-client