$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa File: a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa (raw, json) Hash identifier: kOPG/gZtfMqqIz00B9NjTO0LbXhqem11fsqam3DvUbA= Subject key identifier: 86:A3:80:D1:19:D6:4B:D1:6E:B5:B9:27:65:B8:79:88:0E:38:34:F3 Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Certificate serial: 010D0C9F4328584F8578607AE0F6046462690600 Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 33465 IP address blocks: 74.51.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:60:7a:e0:f6:04:64:62:69:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=526dc617-7fea-4536-8ead-240a08dd0c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:6a:b7:bc:c0:62:39:96:f2:73:e9:21:22: 22:71:7e:a5:f2:67:12:dc:6c:7e:eb:02:2b:bc:33: 83:5a:02:94:96:18:8b:29:3b:76:de:f5:7c:d2:41: 23:91:cf:61:52:25:48:4c:8c:70:bf:7f:66:72:8d: f9:09:07:0a:ab:c5:e1:92:a3:82:52:e8:ed:d4:c3: 4e:3b:d0:3c:bd:c6:f9:bd:f0:3b:7c:10:59:d0:aa: ba:99:e3:64:4c:17:3e:c8:76:7c:2a:b5:2b:d4:fb: c0:0a:e6:bf:55:75:88:de:36:30:31:a2:58:b9:a7: 8f:c1:33:24:34:73:03:b1:02:b3:1e:ed:d1:c8:46: dd:db:7d:49:1b:8e:29:62:68:aa:7c:0e:73:c3:87: ca:ea:db:1f:83:7e:6f:8c:58:32:0b:67:92:9e:1c: 92:c8:34:7c:93:fd:ca:be:d0:a6:6c:f0:9b:25:c4: 8c:ec:f5:b8:f5:f9:00:3b:31:64:bb:35:d8:2a:60: da:b5:dc:91:83:ba:02:1e:fe:69:0b:b6:bc:2d:e9: 36:52:04:c0:49:d7:14:89:d7:d4:63:89:1e:4a:5a: 8b:07:e0:91:de:20:74:a6:cf:51:1e:dd:b1:85:4e: 41:d5:24:62:20:21:37:cc:17:81:5c:1f:b3:f5:69: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A3:80:D1:19:D6:4B:D1:6E:B5:B9:27:65:B8:79:88:0E:38:34:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl X509v3 Authority Key Identifier: keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer sbgp-ipAddrBlock: critical IPv4: 74.51.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:df:e1:64:c1:5d:f2:50:93:1c:78:57:d2:ab:5f:e4:89:be: 95:af:2e:4f:84:df:16:24:13:2e:ad:33:31:f5:3b:5e:9b:4f: ef:4d:86:e2:67:bf:67:c2:2b:73:69:ca:bc:8c:92:6d:e8:c4: 67:32:b4:15:30:ed:c6:a7:eb:29:2d:8d:b2:39:5b:b6:2e:95: bb:bb:ef:06:9f:f2:a5:dd:a6:fa:de:2f:84:5a:41:35:33:37: 53:2a:13:b6:26:91:8c:3f:9b:c9:b0:63:b6:48:97:a2:73:e5: 36:61:eb:2a:79:e7:b1:19:de:06:d7:04:b2:f1:1e:66:5d:ec: a4:52:9f:17:b5:b1:97:fa:52:d8:a9:f7:d5:b6:35:27:87:d5: 64:4f:d8:46:a5:ba:52:50:d5:d5:a3:6a:ff:54:55:0e:0b:c8: 2f:79:f8:d7:3c:15:2c:81:41:38:37:1e:37:ae:fd:2a:61:e4: 4d:e7:f7:32:fa:c9:a4:f2:20:0a:32:27:8b:d4:07:f4:a6:28: 17:6f:97:f1:3a:01:46:10:be:bb:f9:13:e3:c7:21:0b:0b:d2: 52:98:03:73:12:95:67:de:0c:ce:c7:e4:5b:63:47:f8:e2:f2: 1e:76:08:77:a9:39:92:a3:0b:45:80:d1:4a:d5:6a:25:33:3f: a0:4e:60:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeGB64PYEZGJpBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1N2E0ZTQtNDc3MS00Yjg3LWJlNmEtZTNiMjdmNWFj NWRkMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NTI2ZGM2MTctN2ZlYS00NTM2LThlYWQtMjQwYTA4ZGQwYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBVqt7zAYjmW8nPpISIicX6l8mcS3Gx+6wIr vDODWgKUlhiLKTt23vV80kEjkc9hUiVITIxwv39mco35CQcKq8XhkqOCUujt1MNO O9A8vcb5vfA7fBBZ0Kq6meNkTBc+yHZ8KrUr1PvACua/VXWI3jYwMaJYuaePwTMk NHMDsQKzHu3RyEbd231JG44pYmiqfA5zw4fK6tsfg35vjFgyC2eSnhySyDR8k/3K vtCmbPCbJcSM7PW49fkAOzFkuzXYKmDatdyRg7oCHv5pC7a8Lek2UgTASdcUidfU Y4keSlqLB+CR3iB0ps9RHt2xhU5B1SRiICE3zBeBXB+z9WnV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIajgNEZ1kvRbrW5J2W4eYgOODTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3 YTRlNC00NzcxLTRiODctYmU2YS1lM2IyN2Y1YWM1ZGQvYTNiMjQ5NDUtOGVhNS0z MTBlLTllYzYtYTI1N2RjZjUzZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM1N2E0ZTQtNDc3MS00Yjg3LWJl NmEtZTNiMjdmNWFjNWRkL2FjNTdhNGU0LTQ3NzEtNGI4Ny1iZTZhLWUzYjI3ZjVh YzVkZC5jcmwwHwYDVR0jBBgwFoAU1dmHxFHPdgJ2FWwY2sXGD83J/ckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3YTRlNC00NzcxLTRiODctYmU2YS1lM2Iy N2Y1YWM1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvf4WTBXfJQkxx4V9KrX+SJvpWvLk+E3xYkEy6tMzH1O16bT+9NhuJn v2fCK3NpyryMkm3oxGcytBUw7can6yktjbI5W7Yulbu77waf8qXdpvreL4RaQTUz N1MqE7YmkYw/m8mwY7ZIl6Jz5TZh6yp557EZ3gbXBLLxHmZd7KRSnxe1sZf6Utip 99W2NSeH1WRP2EalulJQ1dWjav9UVQ4LyC95+Nc8FSyBQTg3Hjeu/Sph5E3n9zL6 yaTyIAoyJ4vUB/SmKBdvl/E6AUYQvrv5E+PHIQsL0lKYA3MSlWfeDM7H5FtjR/ji 8h52CHepOZKjC0WA0UrVaiUzP6BOYIg= -----END CERTIFICATE-----Generated at Wed Oct 28 10:29:36 2026 by rpki-client