$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/3a97441c-98c2-37fc-abe4-b354842b007e.roa File: 3a97441c-98c2-37fc-abe4-b354842b007e.roa (raw, json) Hash identifier: xlQ0WPaDaEmX2f12ntNCOccBTQ06jf12NMW9JJu4pmk= Subject key identifier: DF:90:DF:F9:73:9E:05:9B:E2:4E:D1:3C:EF:9B:9D:AB:D3:D1:F2:19 Certificate issuer: /CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f Certificate serial: 010D0C9F4328584F6292CE6774EFC86109BA7140 Authority key identifier: 07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/3a97441c-98c2-37fc-abe4-b354842b007e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 18791 IP address blocks: 74.200.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ce:67:74:ef:c8:61:09:ba:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1f2d9eb6-0f57-4e8f-b5e2-92d79496b9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:ef:13:06:62:8c:1c:f5:ae:ac:8d:5c:fb: e5:ab:e6:87:39:de:c1:73:b7:00:94:b2:1a:c5:5e: d2:95:10:35:b9:64:dc:3c:d6:7b:b9:18:59:f5:1c: 5a:3c:aa:85:63:de:c5:5e:1e:26:d3:5a:b1:97:27: f2:d2:d6:3d:46:f6:99:17:94:22:a7:dd:01:6d:11: 80:a7:5e:f5:b2:85:93:6b:6d:2b:93:8a:20:b6:f4: 96:d6:e8:66:72:ac:89:c4:5b:d3:9f:17:1d:f9:2c: aa:5d:af:35:9f:4d:9f:90:65:66:ed:8e:a2:eb:9f: 4b:0c:3c:e4:fa:a1:36:77:b1:5a:00:bc:19:e1:f8: 0f:8a:d2:98:a5:90:10:82:92:c8:80:fb:9f:50:02: 07:e1:29:48:1b:63:84:ef:3b:4d:c3:0d:d4:38:78: 04:15:da:e1:3f:47:43:e3:47:be:1b:f3:f7:16:53: 34:4e:2b:da:aa:b9:80:25:83:19:ca:0a:85:dc:ef: b4:d0:50:4a:23:89:d1:3e:e0:b1:12:c2:9e:6c:41: f3:c4:42:43:df:d9:d7:5a:e8:7c:fe:72:97:c8:c1: 2f:8e:3a:1d:5e:7a:3d:ea:69:af:fa:cc:68:b1:ae: 00:1b:b1:c3:f3:7b:93:8f:b6:95:cf:07:59:d2:6e: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:90:DF:F9:73:9E:05:9B:E2:4E:D1:3C:EF:9B:9D:AB:D3:D1:F2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/3a97441c-98c2-37fc-abe4-b354842b007e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl X509v3 Authority Key Identifier: keyid:07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer sbgp-ipAddrBlock: critical IPv4: 74.200.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:09:84:74:4d:24:24:2c:09:9b:53:a7:20:6c:e9:53:ad:4e: 66:61:4e:c9:77:f9:59:90:46:22:a6:18:05:a9:fc:fb:8f:9d: 8a:ba:cd:ba:02:8d:38:54:65:bf:23:10:25:f4:e8:19:b5:49: ec:7d:71:6b:05:6f:ec:61:87:9b:9c:83:75:fa:90:a3:01:1a: 5e:6e:05:47:08:d3:96:b6:95:a0:46:d6:a2:26:f2:91:d4:6c: c7:18:b6:8a:2a:70:2b:0c:a7:d6:fb:e7:48:8e:16:98:83:cb: 8a:eb:f9:8a:2a:49:99:37:bd:00:5c:f2:9c:6d:f1:62:29:2a: 85:05:b9:f0:4c:bf:93:b4:76:6e:3d:3a:0b:60:e5:c3:21:8e: f7:63:3e:d7:b0:90:17:5a:8c:6a:64:9e:b8:bd:03:e2:95:ad: d1:41:00:41:85:97:e3:af:20:71:73:0d:ac:d7:2c:9a:e1:0a: 74:e3:a6:a5:4d:76:fd:1d:0e:dd:07:d8:b2:4a:73:ed:05:87: 29:09:66:e4:13:b8:c5:da:7e:f7:28:5f:b2:f4:1d:d9:be:47: fd:02:96:dc:10:57:75:ce:9a:bd:30:3c:55:bb:fc:f6:71:a5: 57:50:25:c8:b4:3f:1b:21:f7:75:34:47:92:05:8b:3a:12:25: 43:41:e4:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iks5ndO/IYQm6cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZiNmViZDUtMDJmZi00YTE0LTg1NTktZTA5YmRmNWRl NjBmMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWYyZDllYjYtMGY1Ny00ZThmLWI1ZTItOTJkNzk0OTZiOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq7vEwZijBz1rqyNXPvlq+aHOd7Bc7cAlLIa xV7SlRA1uWTcPNZ7uRhZ9RxaPKqFY97FXh4m01qxlyfy0tY9RvaZF5Qip90BbRGA p171soWTa20rk4ogtvSW1uhmcqyJxFvTnxcd+SyqXa81n02fkGVm7Y6i659LDDzk +qE2d7FaALwZ4fgPitKYpZAQgpLIgPufUAIH4SlIG2OE7ztNww3UOHgEFdrhP0dD 40e+G/P3FlM0TivaqrmAJYMZygqF3O+00FBKI4nRPuCxEsKebEHzxEJD39nXWuh8 /nKXyMEvjjodXno96mmv+sxosa4AG7HD83uTj7aVzwdZ0m6rUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+Q3/lzngWb4k7RPO+bnavT0fIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZmI2 ZWJkNS0wMmZmLTRhMTQtODU1OS1lMDliZGY1ZGU2MGYvM2E5NzQ0MWMtOThjMi0z N2ZjLWFiZTQtYjM1NDg0MmIwMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWZiNmViZDUtMDJmZi00YTE0LTg1 NTktZTA5YmRmNWRlNjBmLzlmYjZlYmQ1LTAyZmYtNGExNC04NTU5LWUwOWJkZjVk ZTYwZi5jcmwwHwYDVR0jBBgwFoAUB/3i31PNKbaIz88bAxaUv0rvsP4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZmI2ZWJkNS0wMmZmLTRhMTQtODU1OS1lMDli ZGY1ZGU2MGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsiGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcJhHRNJCQsCZtTpyBs6VOtTmZhTsl3+VmQRiKmGAWp/PuPnYq6zboC jThUZb8jECX06Bm1Sex9cWsFb+xhh5ucg3X6kKMBGl5uBUcI05a2laBG1qIm8pHU bMcYtooqcCsMp9b750iOFpiDy4rr+YoqSZk3vQBc8pxt8WIpKoUFufBMv5O0dm49 Ogtg5cMhjvdjPtewkBdajGpknri9A+KVrdFBAEGFl+OvIHFzDazXLJrhCnTjpqVN dv0dDt0H2LJKc+0FhykJZuQTuMXafvcoX7L0Hdm+R/0CltwQV3XOmr0wPFW7/PZx pVdQJci0Pxsh93U0R5IFizoSJUNB5KA= -----END CERTIFICATE-----Generated at Sat Oct 24 20:48:22 2026 by rpki-client