$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa File: de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa (raw, json) Hash identifier: ZBiJzbxNpi2+ekRRi/7NMUbkAGMF+9ydhMF1ZTxw1iE= Subject key identifier: 08:E6:1C:21:A2:A1:85:7C:81:7B:2A:2D:13:8C:14:58:95:EE:E3:F8 Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F4328584F49740934DDD334E0111FBA80 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6939 IP address blocks: 74.121.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:09:34:dd:d3:34:e0:11:1f:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c19b264b-933e-4627-b137-b5cfc009c61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:07:f2:6c:fa:35:30:93:08:23:5a:5e:fa: 94:9c:04:ed:d4:35:9e:8d:d1:49:28:08:b7:9c:4c: 4c:fc:61:22:62:4e:b8:29:32:14:2b:51:16:39:ff: 69:67:09:c9:3a:47:df:1d:c3:6a:5d:51:f6:6f:f1: a7:43:45:63:aa:a9:1d:c1:41:b4:ac:47:cd:b7:c7: f0:31:fe:f5:ad:2b:39:8a:69:c3:07:65:35:20:02: 86:ea:08:df:24:79:f9:49:b3:17:98:f2:cf:76:19: ff:0c:71:3a:87:d8:c7:d1:f2:93:b4:3e:d4:7d:fb: 1b:b7:22:50:20:eb:68:d9:3c:66:93:de:b5:b7:d7: 33:11:91:d2:a5:24:ad:3a:06:96:0b:6b:79:2c:89: f6:d5:26:6b:37:44:bb:be:9a:d1:6f:ae:94:8a:4b: 0a:c6:ee:a4:97:f7:47:05:92:cd:04:92:85:1e:ff: 64:04:17:f7:61:0c:da:b9:92:5f:41:37:88:f6:8c: 51:49:25:28:d5:aa:95:e8:a7:ac:d0:cb:94:74:af: b4:50:d9:3d:fe:1d:46:31:ed:03:c5:ed:b7:ee:06: 54:3a:c2:86:15:af:ba:97:40:2e:ee:61:ed:fd:f7: 6c:62:cf:64:ea:1a:56:e2:f1:55:26:75:e4:ff:59: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:1C:21:A2:A1:85:7C:81:7B:2A:2D:13:8C:14:58:95:EE:E3:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: 74.121.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b3:4b:78:42:83:ef:2e:21:a7:95:f6:5b:2f:f6:ee:4a:ea: 67:23:fd:0a:ab:06:76:fe:cc:52:2f:c0:fc:a6:67:94:69:15: 2a:3b:3a:16:43:12:2c:dc:55:85:36:21:64:28:56:8a:82:fd: 7d:f1:61:36:50:24:2b:c7:4e:eb:2f:42:fa:ef:fa:fc:ef:46: 49:52:c3:34:de:8f:73:e6:a9:12:87:ea:f0:e9:76:c9:0f:9c: 95:83:e2:f3:7d:bd:59:69:bd:a5:7b:e6:4e:fd:47:9d:62:99: 7d:00:6c:b2:36:8c:dd:95:39:d1:a8:93:b5:76:cb:28:df:16: c3:6b:9b:48:14:6d:2e:29:8d:c6:af:74:43:2d:6e:90:e2:eb: a9:4e:d9:ae:76:3b:10:e4:ed:aa:72:e0:ad:dd:0a:f8:20:94: 0a:cb:5b:14:31:1e:94:a5:fa:c1:b2:00:cd:30:47:70:65:bf: 94:47:cd:94:cc:1f:25:c2:78:ce:81:56:b0:81:9c:da:a1:b2: 64:8c:e0:19:a3:a9:7a:68:1b:26:83:01:68:10:56:38:38:01: 9d:0d:93:0c:86:b0:b1:2e:08:a1:ca:de:5b:4c:23:0a:6e:64: 68:a6:55:09:21:a2:77:8f:e2:5d:fb:a2:e1:70:1a:21:32:dd: 0d:60:7e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAk03dM04BEfuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzE5YjI2NGItOTMzZS00NjI3LWIxMzctYjVjZmMwMDljNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoAH8mz6NTCTCCNaXvqUnATt1DWejdFJKAi3 nExM/GEiYk64KTIUK1EWOf9pZwnJOkffHcNqXVH2b/GnQ0VjqqkdwUG0rEfNt8fw Mf71rSs5imnDB2U1IAKG6gjfJHn5SbMXmPLPdhn/DHE6h9jH0fKTtD7UffsbtyJQ IOto2Txmk961t9czEZHSpSStOgaWC2t5LIn21SZrN0S7vprRb66UiksKxu6kl/dH BZLNBJKFHv9kBBf3YQzauZJfQTeI9oxRSSUo1aqV6Kes0MuUdK+0UNk9/h1GMe0D xe237gZUOsKGFa+6l0Au7mHt/fdsYs9k6hpW4vFVJnXk/1kuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjmHCGioYV8gXsqLROMFFiV7uP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvZGU3MTU0YjEtNzY4YS0z YzJhLWIzY2QtZTc0NzkzYTBkOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuzS3hCg+8uIaeV9lsv9u5K6mcj/QqrBnb+zFIvwPymZ5RpFSo7OhZD EizcVYU2IWQoVoqC/X3xYTZQJCvHTusvQvrv+vzvRklSwzTej3PmqRKH6vDpdskP nJWD4vN9vVlpvaV75k79R51imX0AbLI2jN2VOdGok7V2yyjfFsNrm0gUbS4pjcav dEMtbpDi66lO2a52OxDk7apy4K3dCvgglArLWxQxHpSl+sGyAM0wR3Blv5RHzZTM HyXCeM6BVrCBnNqhsmSM4BmjqXpoGyaDAWgQVjg4AZ0NkwyGsLEuCKHK3ltMIwpu ZGimVQkhoneP4l37ouFwGiEy3Q1gfrY= -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:21 2026 by rpki-client