$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/3dad3834-1e60-324f-b5bb-f63fa49a3c20.roa File: 3dad3834-1e60-324f-b5bb-f63fa49a3c20.roa (raw, json) Hash identifier: ES/JGNnsjYC3oBnzw8BVDgtKsM8/sK7C9ZXNQ/uPxPI= Subject key identifier: 13:48:5B:78:94:71:C2:BF:79:C0:4A:AB:4D:B6:21:88:43:47:5A:D0 Certificate issuer: /CN=bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5 Certificate serial: 010D0C9F4328584F6292BD1ED8F1A33FB9F84500 Authority key identifier: 14:7A:42:0A:50:96:2E:EF:A8:3A:22:5B:D8:A9:0B:E9:38:7C:B2:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/3dad3834-1e60-324f-b5bb-f63fa49a3c20.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 6079 IP address blocks: 74.220.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bd:1e:d8:f1:a3:3f:b9:f8:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=5f4e126b-579f-4648-b63d-1464e3b1c307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:18:77:5a:c0:15:5f:43:00:f1:79:58:f8: 53:88:5d:87:00:c8:3c:57:0d:a2:51:16:e5:90:63: f7:db:31:93:3d:a6:c6:49:5d:0c:3f:54:57:59:a6: 6f:24:5b:37:13:35:c0:0f:27:14:7d:cd:85:b2:25: 0f:b7:1c:b5:5e:d2:b2:98:b8:32:b4:0e:22:fd:ac: d1:72:1d:3e:8d:10:f3:f9:ab:a2:d3:ea:27:0e:ee: 33:7f:a7:82:f3:af:2d:99:85:fd:90:c4:4d:e2:f8: 68:54:6c:c1:3f:68:51:43:f1:31:2b:02:21:e6:75: c1:e4:36:a8:3a:c0:eb:ed:30:76:36:52:91:8c:61: a0:47:7c:82:6e:12:8b:82:32:fc:df:d1:db:4d:72: 25:e6:11:b3:a1:bb:a7:15:03:0d:5b:9a:1f:fb:7a: 19:f3:47:2e:7f:fb:aa:4e:b4:d4:43:42:cd:3e:f0: 4d:b5:11:94:b4:c7:17:f3:71:82:1b:9c:75:ce:10: 21:df:e5:ba:8f:d6:eb:b8:01:30:89:d3:6e:45:66: b6:06:70:c5:db:63:94:74:d4:f4:7a:af:d2:65:6e: e6:ad:7a:6d:f2:fa:a0:e0:f4:ed:fc:b6:f3:8e:37: 02:af:e1:c5:84:5a:f2:6d:90:1d:ce:4f:f8:77:23: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:48:5B:78:94:71:C2:BF:79:C0:4A:AB:4D:B6:21:88:43:47:5A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/3dad3834-1e60-324f-b5bb-f63fa49a3c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.crl X509v3 Authority Key Identifier: keyid:14:7A:42:0A:50:96:2E:EF:A8:3A:22:5B:D8:A9:0B:E9:38:7C:B2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bcd69e6c-72a9-4fdf-9353-6e081eaa6ed5.cer sbgp-ipAddrBlock: critical IPv4: 74.220.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4f:b7:28:83:f9:87:be:67:7b:7a:42:12:a2:39:68:55:5f: ea:32:e5:bf:2f:d9:76:23:e5:bc:e7:47:eb:d9:59:cf:a1:fc: b0:0f:39:09:fd:fb:01:89:69:79:a2:5f:c0:d9:8a:ed:94:81: b4:fd:b2:9b:fd:c4:3b:7b:65:35:78:de:36:85:fa:e2:89:d0: d7:54:e9:6f:d4:aa:95:38:f3:ff:27:1d:b7:9f:e6:1f:d2:dd: 2f:7b:82:ad:e2:34:ad:f8:1f:25:ee:30:97:56:de:e1:2f:c7: a5:16:34:21:8b:80:be:51:4d:60:43:c5:be:23:b6:94:83:6f: 52:79:f0:81:85:95:44:64:ba:31:88:57:5b:64:63:3c:14:08: 80:92:e6:9f:46:ba:7d:22:98:27:ff:4a:10:a2:3a:2c:90:7b: 14:0e:0f:3b:d2:1e:11:2b:37:0f:5b:65:d0:18:d8:3a:a2:f3: 38:ea:6f:95:0b:c7:65:0a:4d:03:c1:cf:71:f9:16:19:de:44: c1:d0:d3:cd:5e:a7:2e:70:2c:62:3c:d9:28:3b:4b:1e:27:ea: e1:ce:b6:a4:f1:6a:2e:11:7a:ff:0a:ed:62:1b:4c:d6:9b:cd: 3a:06:c6:35:97:61:f8:15:8a:c5:f5:da:c8:e7:10:73:29:2b: 88:9c:da:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikr0e2PGjP7n4RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNkNjllNmMtNzJhOS00ZmRmLTkzNTMtNmUwODFlYWE2 ZWQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NWY0ZTEyNmItNTc5Zi00NjQ4LWI2M2QtMTQ2NGUzYjFjMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihUYd1rAFV9DAPF5WPhTiF2HAMg8Vw2iURbl kGP32zGTPabGSV0MP1RXWaZvJFs3EzXADycUfc2FsiUPtxy1XtKymLgytA4i/azR ch0+jRDz+aui0+onDu4zf6eC868tmYX9kMRN4vhoVGzBP2hRQ/ExKwIh5nXB5Dao OsDr7TB2NlKRjGGgR3yCbhKLgjL839HbTXIl5hGzobunFQMNW5of+3oZ80cuf/uq TrTUQ0LNPvBNtRGUtMcX83GCG5x1zhAh3+W6j9bruAEwidNuRWa2BnDF22OUdNT0 eq/SZW7mrXpt8vqg4PTt/LbzjjcCr+HFhFrybZAdzk/4dyOBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNIW3iUccK/ecBKq022IYhDR1rQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2Q2 OWU2Yy03MmE5LTRmZGYtOTM1My02ZTA4MWVhYTZlZDUvM2RhZDM4MzQtMWU2MC0z MjRmLWI1YmItZjYzZmE0OWEzYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmNkNjllNmMtNzJhOS00ZmRmLTkz NTMtNmUwODFlYWE2ZWQ1L2JjZDY5ZTZjLTcyYTktNGZkZi05MzUzLTZlMDgxZWFh NmVkNS5jcmwwHwYDVR0jBBgwFoAUFHpCClCWLu+oOiJb2KkL6Th8ssswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2Q2OWU2Yy03MmE5LTRmZGYtOTM1My02ZTA4 MWVhYTZlZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEStxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlPtyiD+Ye+Z3t6QhKiOWhVX+oy5b8v2XYj5bznR+vZWc+h/LAPOQn9 +wGJaXmiX8DZiu2UgbT9spv9xDt7ZTV43jaF+uKJ0NdU6W/UqpU48/8nHbef5h/S 3S97gq3iNK34HyXuMJdW3uEvx6UWNCGLgL5RTWBDxb4jtpSDb1J58IGFlURkujGI V1tkYzwUCICS5p9Gun0imCf/ShCiOiyQexQODzvSHhErNw9bZdAY2Dqi8zjqb5UL x2UKTQPBz3H5FhneRMHQ081epy5wLGI82Sg7Sx4n6uHOtqTxai4Rev8K7WIbTNab zToGxjWXYfgVisX12sjnEHMpK4ic2ik= -----END CERTIFICATE-----Generated at Thu Oct 8 08:58:12 2026 by rpki-client