$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9981e067-5a98-3986-ab18-eec314a52e9e.roa File: 9981e067-5a98-3986-ab18-eec314a52e9e.roa (raw, json) Hash identifier: 8Me24Ks1Li4S+R7fc7MjLhiChziczCb872NS+de6o3Y= Subject key identifier: 67:E6:E1:19:15:43:35:6B:14:03:92:1C:B6:CB:0B:04:19:26:9D:B4 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584F7F3C647924590077328D2FC0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9981e067-5a98-3986-ab18-eec314a52e9e.roa Signing time: Wed 14 Oct 2026 07:24:48 +0000 ROA not before: Wed 14 Oct 2026 07:24:48 +0000 ROA not after: Tue 12 Jan 2027 08:24:48 +0000 asID: 36776 IP address blocks: 74.114.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:3c:64:79:24:59:00:77:32:8d:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 14 07:24:48 2026 GMT Not After : Jan 12 08:24:48 2027 GMT Subject: CN=9206288b-41c7-4ef0-a657-18c05ece2e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:06:48:eb:88:6b:7d:e4:d8:1f:0c:99:fa: 40:f6:e7:73:77:3a:db:b4:89:2b:c2:67:ee:55:48: d9:86:be:71:15:58:45:be:5a:bd:73:74:73:89:9b: 92:9d:85:77:62:fa:45:28:0d:40:28:5a:48:a0:2e: 01:7e:60:0c:19:9b:09:4e:e0:a5:ab:4f:84:54:72: 42:97:2f:35:1f:fd:7c:57:59:b3:48:a7:73:ba:2a: fc:de:0a:8e:2f:63:90:77:c7:b4:57:14:6e:f1:ba: aa:64:84:d8:92:33:0b:70:17:24:c5:8b:03:06:0f: 74:a7:7d:3e:56:ac:b9:38:b2:2d:7b:32:88:b0:32: 8b:48:52:11:7f:99:be:d0:c2:11:20:7b:12:13:09: 64:10:26:db:b6:6b:c9:fc:06:39:5e:10:57:0f:35: 3e:1c:82:d6:c4:34:88:4a:bd:aa:08:72:0b:4f:9f: df:bd:c7:2a:98:dc:2f:36:5a:45:c2:a8:ec:50:08: ce:7f:61:16:17:f0:11:37:a4:1d:55:e6:f0:06:02: e8:1e:43:ab:9a:ea:51:c9:b5:88:85:49:36:d4:4e: 49:dd:d2:2c:4a:c2:8b:a4:c5:ee:b3:05:b6:39:ce: 7f:34:26:0e:cb:0f:6e:a3:f0:11:b9:f0:d4:18:61: 49:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E6:E1:19:15:43:35:6B:14:03:92:1C:B6:CB:0B:04:19:26:9D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9981e067-5a98-3986-ab18-eec314a52e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 74.114.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5c:14:ce:18:0b:08:50:d7:f0:dc:5a:19:fa:4f:2f:27:ec: 7b:fa:43:e7:b0:9c:05:6c:84:03:b5:01:4e:54:ea:cb:cd:96: 64:3d:7a:13:fd:3a:76:82:c3:a9:9c:f3:a5:51:83:97:36:4f: 26:b4:b5:65:84:0b:25:7f:fe:2b:d0:e3:04:80:31:8c:72:6e: f3:1a:4a:60:7a:54:0a:53:f8:a2:d8:8b:f9:af:05:93:79:39: 09:b1:9e:11:6f:8b:43:87:ce:60:4b:32:ad:72:4d:94:14:fc: 97:56:ae:28:77:a4:d9:4b:67:30:03:d0:1e:2c:b7:c5:7b:2f: a1:db:6a:15:99:0d:3d:85:29:19:b4:70:b5:17:d9:e6:d2:a8: ce:18:3c:8f:9e:c1:f5:1f:8a:37:58:85:67:f4:12:dd:cf:4c: 4c:70:24:49:ad:6c:69:56:da:e9:68:08:f8:b7:d9:64:81:51: 05:68:3f:69:15:f9:04:30:05:b5:4d:89:e0:07:c9:f7:df:5a: 02:4f:4b:ff:40:a4:4e:5e:14:32:ae:03:23:e8:91:61:30:d2: d0:2d:3b:06:92:36:ac:85:60:dd:b6:43:9d:2c:8f:3f:77:19: 08:a6:97:7c:e4:c4:82:b3:d7:5b:39:3d:a9:00:7d:29:72:df: 5d:48:c5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/PGR5JFkAdzKNL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI2MTAxNDA3MjQ0OFoXDTI3MDExMjA4MjQ0OFowLzEtMCsGA1UEAxMk OTIwNjI4OGItNDFjNy00ZWYwLWE2NTctMThjMDVlY2UyZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5cGSOuIa33k2B8MmfpA9udzdzrbtIkrwmfu VUjZhr5xFVhFvlq9c3RziZuSnYV3YvpFKA1AKFpIoC4BfmAMGZsJTuClq0+EVHJC ly81H/18V1mzSKdzuir83gqOL2OQd8e0VxRu8bqqZITYkjMLcBckxYsDBg90p30+ Vqy5OLItezKIsDKLSFIRf5m+0MIRIHsSEwlkECbbtmvJ/AY5XhBXDzU+HILWxDSI Sr2qCHILT5/fvccqmNwvNlpFwqjsUAjOf2EWF/ARN6QdVebwBgLoHkOrmupRybWI hUk21E5J3dIsSsKLpMXuswW2Oc5/NCYOyw9uo/ARufDUGGFJSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfm4RkVQzVrFAOSHLbLCwQZJp20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOTk4MWUwNjctNWE5OC0z OTg2LWFiMTgtZWVjMzE0YTUyZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9cFM4YCwhQ1/DcWhn6Ty8n7Hv6Q+ewnAVshAO1AU5U6svNlmQ9ehP9 OnaCw6mc86VRg5c2Tya0tWWECyV//ivQ4wSAMYxybvMaSmB6VApT+KLYi/mvBZN5 OQmxnhFvi0OHzmBLMq1yTZQU/JdWrih3pNlLZzAD0B4st8V7L6HbahWZDT2FKRm0 cLUX2ebSqM4YPI+ewfUfijdYhWf0Et3PTExwJEmtbGlW2uloCPi32WSBUQVoP2kV +QQwBbVNieAHyfffWgJPS/9ApE5eFDKuAyPokWEw0tAtOwaSNqyFYN22Q50sjz93 GQiml3zkxIKz11s5PakAfSly311IxcU= -----END CERTIFICATE-----Generated at Sun Oct 25 18:48:09 2026 by rpki-client