$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa File: 86945b7c-04d9-3d21-af20-69e5bd13ba87.roa (raw, json) Hash identifier: XXUcD0LE4rBgimmEKj3FdyNVaLNz3VyraXWRm6qh5Cc= Subject key identifier: A0:F4:4C:6A:CB:6E:F4:2F:61:51:02:BB:15:9E:21:70:50:C3:8D:37 Certificate issuer: /CN=503450af-ac6f-4861-96c0-24f7e8724111 Certificate serial: 010D0C9F4328584F74B82D9C34685CB4EB636740 Authority key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 22961 IP address blocks: 74.122.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2d:9c:34:68:5c:b4:eb:63:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503450af-ac6f-4861-96c0-24f7e8724111 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=4d52a627-067a-464c-a454-4af80e9d89e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f9:3f:f3:d1:41:ba:e4:21:b6:7d:c8:78:b7: 9b:47:0a:90:f6:a1:26:95:67:86:3b:8e:0d:b1:3e: 57:68:55:dc:cb:84:dc:5f:c2:c1:fd:a9:ab:bc:6c: 5d:dc:be:71:98:96:3f:59:2d:fe:6c:97:d7:7e:0f: f1:bb:75:1a:0e:0a:62:01:74:1d:bc:7a:ed:f4:a5: f9:51:ee:3c:b0:05:6d:56:d3:7e:3d:4e:f2:52:5d: 17:77:55:64:b7:c3:ad:31:29:42:9c:e3:9a:a1:bb: 09:7f:ea:d5:85:ae:24:eb:07:80:a7:0c:d9:23:9c: 62:0d:69:eb:56:5b:ca:5a:a5:e9:99:6d:07:43:55: 5e:8c:44:c7:ef:94:c1:08:ee:58:37:31:dd:69:ce: 70:ed:23:a4:28:c9:33:e2:31:ff:70:a9:bb:4f:56: 04:ed:1e:72:3a:63:54:2f:c8:12:35:9b:db:bb:05: 43:bc:e7:9b:bf:f2:ec:ad:1d:ef:95:a1:7c:33:d0: 44:69:eb:1c:54:37:62:32:34:b8:00:45:d5:9b:a6: 69:5a:fa:d1:85:05:88:4c:d4:46:69:3d:45:41:ba: ca:f8:ac:78:c0:4b:4d:fb:33:6e:2d:1b:f9:ac:66: e6:d9:0e:b1:51:a3:f8:c0:b5:b8:f7:31:d3:b3:d8: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F4:4C:6A:CB:6E:F4:2F:61:51:02:BB:15:9E:21:70:50:C3:8D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl X509v3 Authority Key Identifier: keyid:F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer sbgp-ipAddrBlock: critical IPv4: 74.122.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:94:05:bb:7d:45:dc:71:ca:1b:d2:f3:fb:07:12:7a:eb:64: b1:19:e7:fa:66:49:32:8f:1e:3a:94:17:e3:e4:bd:91:f7:33: 16:f9:9e:6a:08:9e:39:e1:0e:2f:92:e2:72:ba:14:9e:d1:d1: 8d:69:97:eb:9f:3e:28:33:7b:e5:2c:0b:59:31:ca:36:7d:b6: ff:7e:b4:b3:d4:a2:93:0e:d1:e4:f9:28:8a:67:7c:c5:c0:29: 83:af:db:2e:5e:87:a5:f4:40:15:da:f6:8a:52:27:ea:84:cc: fc:85:1a:5d:37:69:60:0b:61:65:97:24:59:5d:94:24:17:ad: 73:e7:c3:1e:dd:45:c1:6d:24:ba:1d:99:0d:84:0a:17:79:d1: 63:d2:b9:24:15:a6:95:17:c1:fc:3e:e7:2b:1e:53:b0:5d:24: a6:96:0f:49:35:c7:06:89:4c:c1:e2:25:52:7e:fe:7c:53:d5: 83:74:f5:0b:dc:43:77:5c:20:cf:2e:8f:77:da:54:b7:86:13: 60:73:2a:c3:42:3a:bb:70:07:27:b0:5e:80:40:73:2b:3d:ae: 81:09:bb:52:d9:35:1a:d0:19:73:72:86:29:5d:7c:6b:3d:e2: 79:56:91:62:70:04:f3:f0:0e:fe:6b:f3:17:ef:39:da:e0:27: b5:d7:d5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uC2cNGhctOtjZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzNDUwYWYtYWM2Zi00ODYxLTk2YzAtMjRmN2U4NzI0 MTExMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk NGQ1MmE2MjctMDY3YS00NjRjLWE0NTQtNGFmODBlOWQ4OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vk/89FBuuQhtn3IeLebRwqQ9qEmlWeGO44N sT5XaFXcy4TcX8LB/amrvGxd3L5xmJY/WS3+bJfXfg/xu3UaDgpiAXQdvHrt9KX5 Ue48sAVtVtN+PU7yUl0Xd1Vkt8OtMSlCnOOaobsJf+rVha4k6weApwzZI5xiDWnr VlvKWqXpmW0HQ1VejETH75TBCO5YNzHdac5w7SOkKMkz4jH/cKm7T1YE7R5yOmNU L8gSNZvbuwVDvOebv/LsrR3vlaF8M9BEaescVDdiMjS4AEXVm6ZpWvrRhQWITNRG aT1FQbrK+Kx4wEtN+zNuLRv5rGbm2Q6xUaP4wLW49zHTs9g9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD0TGrLbvQvYVECuxWeIXBQw403MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MDM0 NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3MjQxMTEvODY5NDViN2MtMDRkOS0z ZDIxLWFmMjAtNjllNWJkMTNiYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTAzNDUwYWYtYWM2Zi00ODYxLTk2 YzAtMjRmN2U4NzI0MTExLzUwMzQ1MGFmLWFjNmYtNDg2MS05NmMwLTI0ZjdlODcy NDExMS5jcmwwHwYDVR0jBBgwFoAU+WMakSv3oGpdgjFADCHV/bvt+rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3 ZTg3MjQxMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSUBbt9RdxxyhvS8/sHEnrrZLEZ5/pmSTKPHjqUF+PkvZH3Mxb5nmoI njnhDi+S4nK6FJ7R0Y1pl+ufPigze+UsC1kxyjZ9tv9+tLPUopMO0eT5KIpnfMXA KYOv2y5eh6X0QBXa9opSJ+qEzPyFGl03aWALYWWXJFldlCQXrXPnwx7dRcFtJLod mQ2EChd50WPSuSQVppUXwfw+5yseU7BdJKaWD0k1xwaJTMHiJVJ+/nxT1YN09Qvc Q3dcIM8uj3faVLeGE2BzKsNCOrtwByewXoBAcys9roEJu1LZNRrQGXNyhildfGs9 4nlWkWJwBPPwDv5r8xfvOdrgJ7XX1XE= -----END CERTIFICATE-----Generated at Tue Oct 13 20:57:26 2026 by rpki-client