$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa File: 6df0ab59-03d9-3306-8364-6288a57b01af.roa (raw, json) Hash identifier: TmLCliiPowiMRTh4/AFqoR0gmSXDc3aP0VhrOb9I/wE= Subject key identifier: 62:0A:D3:72:E3:61:CB:38:53:FB:C1:08:51:07:B6:94:3A:71:7E:55 Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F4328584F4973CE6E4D875DC8D7E5C300 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6939 IP address blocks: 74.121.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ce:6e:4d:87:5d:c8:d7:e5:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a5bb5b87-b833-4cc5-bab9-0b6cd1516fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:48:5d:e8:4d:d0:f5:51:7e:05:aa:6f:4c: 03:4d:da:86:ba:5d:02:44:f2:c7:99:f6:86:77:e3: 38:52:84:28:30:76:5c:5e:46:95:6a:5c:76:28:cb: 78:17:83:03:12:46:59:41:14:67:48:0b:e8:f0:8f: 92:0b:57:ad:53:a1:5a:a0:5b:8d:06:79:73:19:6b: 97:5a:c4:b6:8e:c5:53:da:bb:20:11:9d:4d:43:33: a3:af:73:3e:c0:d3:f8:e0:86:b1:28:2a:ac:7e:cf: 90:97:41:38:bc:92:14:4f:e8:cd:bf:42:d4:0c:f1: b9:19:b3:75:c3:e4:c6:5f:98:0f:8b:3a:c9:40:34: b0:6c:07:c5:fe:7d:17:64:21:34:63:05:e7:2f:c5: f5:ae:c3:8a:0e:9c:8f:c0:c7:94:d5:9e:ac:41:61: 2e:02:54:ec:e3:1d:63:38:f0:fc:5e:a8:22:08:2b: 23:ff:1e:53:b1:a9:cf:99:29:f8:52:9b:3b:74:bd: 8c:78:81:f1:bc:ea:50:43:d8:6e:51:8d:d7:af:29: 9a:96:ea:e6:84:2e:c8:b8:46:17:62:30:bc:e5:21: 27:c0:fa:6c:b7:30:4d:ee:91:52:e1:11:da:a7:1a: d6:4b:99:a6:07:9b:fb:96:c8:f9:cb:93:3d:55:4d: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:D3:72:E3:61:CB:38:53:FB:C1:08:51:07:B6:94:3A:71:7E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: 74.121.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b1:ee:b1:ba:f8:d0:31:3f:f7:f3:d8:45:25:89:66:85:df: 5a:bd:05:71:31:ca:86:ef:d2:ae:8c:a2:d9:cd:da:73:81:71: c8:03:71:f4:09:0e:b7:ef:00:53:35:b1:c3:2f:e0:e0:66:9b: 2a:cf:b5:f8:ca:ef:9e:3d:ff:ad:34:e2:c5:38:a3:f7:6a:8a: 0e:08:ac:ee:b5:77:dd:ae:28:42:a5:6b:f9:76:61:82:38:69: ad:00:17:19:45:06:ef:7c:6f:28:96:70:98:c3:d7:d7:e8:61: d7:dd:99:68:1d:b3:ae:0a:e1:74:11:20:31:8f:31:2d:dd:5d: ba:a1:f1:ad:26:2c:c9:e8:6a:21:8b:0a:71:a9:c7:b1:b6:53: b0:2d:5f:58:b4:fb:43:94:ce:19:14:51:18:1c:20:96:08:66: 05:73:b5:28:ec:dc:83:d2:55:6f:f6:3d:9a:50:26:83:1e:b7: 23:1e:fd:ab:f3:e5:20:c0:5f:06:f5:f3:b5:8c:9f:02:ba:7b: 1b:d1:bf:e0:c7:a1:36:db:27:99:fa:54:88:92:68:05:28:86: 36:1a:96:36:53:34:07:d6:94:6c:ec:06:d2:53:cc:a6:b8:b7: 6e:22:0f:38:e0:b0:10:48:e3:7f:68:c8:ae:d6:d4:85:00:af: 22:c0:06:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc85uTYddyNflwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTViYjViODctYjgzMy00Y2M1LWJhYjktMGI2Y2QxNTE2ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmatIXehN0PVRfgWqb0wDTdqGul0CRPLHmfaG d+M4UoQoMHZcXkaValx2KMt4F4MDEkZZQRRnSAvo8I+SC1etU6FaoFuNBnlzGWuX WsS2jsVT2rsgEZ1NQzOjr3M+wNP44IaxKCqsfs+Ql0E4vJIUT+jNv0LUDPG5GbN1 w+TGX5gPizrJQDSwbAfF/n0XZCE0YwXnL8X1rsOKDpyPwMeU1Z6sQWEuAlTs4x1j OPD8XqgiCCsj/x5TsanPmSn4Ups7dL2MeIHxvOpQQ9huUY3XrymalurmhC7IuEYX YjC85SEnwPpstzBN7pFS4RHapxrWS5mmB5v7lsj5y5M9VU2+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIK03LjYcs4U/vBCFEHtpQ6cX5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvNmRmMGFiNTktMDNkOS0z MzA2LTgzNjQtNjI4OGE1N2IwMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKx7rG6+NAxP/fz2EUliWaF31q9BXExyobv0q6MotnN2nOBccgDcfQJ DrfvAFM1scMv4OBmmyrPtfjK7549/6004sU4o/dqig4IrO61d92uKEKla/l2YYI4 aa0AFxlFBu98byiWcJjD19foYdfdmWgds64K4XQRIDGPMS3dXbqh8a0mLMnoaiGL CnGpx7G2U7AtX1i0+0OUzhkUURgcIJYIZgVztSjs3IPSVW/2PZpQJoMetyMe/avz 5SDAXwb187WMnwK6exvRv+DHoTbbJ5n6VIiSaAUohjYaljZTNAfWlGzsBtJTzKa4 t24iDzjgsBBI439oyK7W1IUAryLABlA= -----END CERTIFICATE-----Generated at Sat Sep 26 13:19:17 2026 by rpki-client