$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa File: 4060bb7b-e475-30a3-8893-bc8967930f24.roa (raw, json) Hash identifier: kz/zaz2eVFRw76a+AbcGCA81YF4sxJjX7F+1/7ex+v4= Subject key identifier: EC:3F:39:05:60:1F:BE:17:7C:32:FF:E2:56:AD:F0:47:86:0B:DF:DB Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F4328584F4C3D5A3F15EB0D7AED74FC40 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 835 IP address blocks: 74.119.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5a:3f:15:eb:0d:7a:ed:74:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5f825dfa-fa52-479a-b276-9f04c2489429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:ca:31:c7:41:11:aa:7e:56:43:f3:17:ad: e9:c0:da:10:96:74:3c:e1:d6:68:99:9a:fc:a1:5d: e6:b9:25:f9:55:5a:b7:70:57:06:f1:c4:5f:1e:47: 5f:fe:ef:05:4a:64:98:b6:cb:46:00:3e:0f:69:6e: 27:90:b8:52:a5:77:5a:ff:79:e9:41:29:b8:83:c4: 8b:05:5a:21:8e:0b:1c:1e:96:4e:c6:9a:4d:bb:40: 64:d3:24:b9:4e:ad:d0:7d:20:b7:fd:95:7d:b2:5d: 19:b8:94:e9:c0:e5:ce:9a:c4:30:62:d0:e8:ce:8c: cd:3e:03:70:7b:95:63:1b:39:71:9c:80:ec:31:8c: 31:31:eb:22:b3:87:11:a7:10:b0:f6:df:04:1f:70: 7d:ca:66:ad:8f:d4:f6:57:ba:02:81:cd:4d:b4:d7: f3:ea:9b:84:f7:0a:41:b5:fd:58:8c:05:15:9f:47: 42:52:bb:3d:8a:08:77:a5:8a:40:64:63:c5:aa:e3: 68:0f:74:a1:e4:25:71:ee:2b:3a:15:88:0f:dd:6a: 45:73:92:13:41:26:25:c7:76:70:32:29:0d:33:ef: e3:4a:1a:1b:4c:a5:c7:72:f4:41:30:d9:e9:de:d7: 3b:65:6e:33:12:0b:69:d5:a4:15:de:6b:3c:3c:98: 0f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:39:05:60:1F:BE:17:7C:32:FF:E2:56:AD:F0:47:86:0B:DF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv4: 74.119.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3b:48:25:53:e4:fa:9d:ee:ce:e4:06:da:67:bb:4e:7a:c3: b8:40:d9:1b:a6:4b:14:43:6d:72:d3:16:da:d0:f3:0b:7f:ce: 3c:63:af:8f:7b:68:57:0b:47:c2:12:81:e3:d7:ac:0d:9a:d3: b7:d8:92:57:a9:51:48:dc:bd:e8:b9:61:f6:63:9c:eb:fb:b4: 5a:23:54:71:af:25:6f:99:54:93:aa:0b:32:fd:71:16:d9:39: a7:8e:d4:15:f4:41:da:c0:42:80:d5:81:8c:b5:23:99:83:9e: fa:18:bc:d9:79:55:ab:65:41:85:38:c8:75:a0:de:24:d0:72: 92:14:c5:fc:23:94:8a:b9:cf:a1:1d:ce:26:e2:7d:cd:b2:b3: ec:01:eb:1a:70:54:86:10:8f:53:56:d5:89:95:d9:f9:cf:50: 4d:ac:81:76:d2:94:2d:18:01:24:b0:97:3d:47:bd:18:34:3c: 38:0e:70:84:62:a0:db:ea:6f:c1:e2:b7:73:01:d7:80:12:0d: ee:01:11:ff:a0:ea:63:73:71:aa:d7:ed:f4:20:64:9e:eb:e5: 16:07:cd:75:99:c3:50:9c:02:15:cd:bf:90:92:eb:9e:65:3a: ea:27:04:79:2b:c9:54:74:ce:88:fd:a1:25:d5:a0:73:b2:b0: b0:20:49:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVo/FesNeu10/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWY4MjVkZmEtZmE1Mi00NzlhLWIyNzYtOWYwNGMyNDg5NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoufKMcdBEap+VkPzF63pwNoQlnQ84dZomZr8 oV3muSX5VVq3cFcG8cRfHkdf/u8FSmSYtstGAD4PaW4nkLhSpXda/3npQSm4g8SL BVohjgscHpZOxppNu0Bk0yS5Tq3QfSC3/ZV9sl0ZuJTpwOXOmsQwYtDozozNPgNw e5VjGzlxnIDsMYwxMesis4cRpxCw9t8EH3B9ymatj9T2V7oCgc1NtNfz6puE9wpB tf1YjAUVn0dCUrs9igh3pYpAZGPFquNoD3Sh5CVx7is6FYgP3WpFc5ITQSYlx3Zw MikNM+/jShobTKXHcvRBMNnp3tc7ZW4zEgtp1aQV3ms8PJgPtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw/OQVgH74XfDL/4lat8EeGC9/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDA2MGJiN2ItZTQ3NS0z MGEzLTg4OTMtYmM4OTY3OTMwZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASneXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU7SCVT5Pqd7s7kBtpnu056w7hA2RumSxRDbXLTFtrQ8wt/zjxjr497 aFcLR8ISgePXrA2a07fYklepUUjcvei5YfZjnOv7tFojVHGvJW+ZVJOqCzL9cRbZ OaeO1BX0QdrAQoDVgYy1I5mDnvoYvNl5VatlQYU4yHWg3iTQcpIUxfwjlIq5z6Ed zibifc2ys+wB6xpwVIYQj1NW1YmV2fnPUE2sgXbSlC0YASSwlz1HvRg0PDgOcIRi oNvqb8Hit3MB14ASDe4BEf+g6mNzcarX7fQgZJ7r5RYHzXWZw1CcAhXNv5CS655l OuonBHkryVR0zoj9oSXVoHOysLAgSa0= -----END CERTIFICATE-----Generated at Tue Oct 13 01:20:44 2026 by rpki-client