$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa File: c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa (raw, json) Hash identifier: x2X9eIScMNHII40lPhekfH8PXYYsUyvcRPkFiLfsH2k= Subject key identifier: 67:09:61:C2:EA:4F:34:FF:10:CB:51:8A:0D:D5:C0:39:69:13:71:7D Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584F1B624EA5CAAE2F91B3987500 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 54552 IP address blocks: 74.123.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4e:a5:ca:ae:2f:91:b3:98:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=4a5777d2-2d52-485f-9231-5d2c7a89c036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:84:27:75:7a:e9:e8:fe:a3:f2:ce:6a:af: 61:37:db:02:ae:e8:51:d9:3e:fe:7e:1c:c9:45:f6: 8f:67:38:ed:28:db:de:fe:6e:60:11:1b:19:2b:86: 0e:a1:f9:fe:f4:a3:f1:49:fe:47:6e:18:d3:51:25: af:8a:c4:5a:60:6b:01:d6:cc:3f:96:82:22:80:cb: 79:8b:d9:7b:92:8f:fc:a9:d8:89:a3:35:1c:ee:12: d1:a5:bd:fe:d2:2f:6d:c3:f4:3d:00:36:2e:fb:eb: 70:33:c5:d4:3e:6c:17:49:76:45:04:d5:4c:bd:53: f0:3f:17:8a:09:6a:8e:bc:bc:05:45:c4:31:10:9c: 66:07:27:b6:0e:c4:a0:9c:9b:f9:79:36:3f:bc:02: c5:59:30:2d:f9:9b:2a:69:d2:93:b2:90:1a:a5:4f: fc:99:c0:7d:fe:00:35:40:e0:7f:86:4d:97:3b:60: 4f:4c:7e:50:b5:bd:d0:f1:59:31:95:cb:73:e9:60: 21:f8:34:ba:ee:74:17:cb:ea:7c:e6:fe:ce:3b:62: 73:1c:13:3c:f3:81:3d:46:b4:4e:e9:68:a6:90:20: 92:97:18:8d:dc:e8:b8:2d:97:1f:ef:13:5b:04:b8: 34:b3:45:d5:38:2b:30:46:93:17:ca:59:62:25:d9: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:61:C2:EA:4F:34:FF:10:CB:51:8A:0D:D5:C0:39:69:13:71:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 74.123.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ce:18:40:21:2f:34:23:35:b4:7f:35:b6:60:35:31:38:60: 70:8a:0e:62:b4:55:50:ba:4d:1f:0a:8c:43:9f:29:f8:b0:b2: e6:e3:1b:72:9a:93:85:5d:46:e1:f2:6c:ef:2e:8b:fe:68:41: a2:97:66:3c:fe:37:9b:87:68:42:88:9f:0f:e0:55:56:d0:fb: 53:11:6d:f1:ff:9e:73:f0:e6:f9:e0:81:b2:68:52:ad:e6:1e: 6c:75:e9:bb:89:be:8b:d5:79:3a:37:a6:d9:15:ef:5d:cb:e2: 77:50:55:59:0b:cb:d8:c6:a8:09:8f:42:80:0c:f5:7a:b0:84: e2:8a:c4:11:9a:bb:fe:12:6f:62:a8:cd:96:9e:bd:1d:62:db: 52:47:18:0d:0f:32:62:4f:41:d1:5c:1d:cc:0f:2c:2d:35:47: 8e:69:51:dd:dc:43:d3:24:e3:8e:74:b4:61:e2:20:94:ed:06: d2:49:7c:0f:f5:ef:fd:a4:44:25:83:4c:e2:30:ef:ed:06:bc: b8:5f:da:3c:fe:aa:57:91:fb:cc:23:93:b0:0e:ff:07:fe:a8: eb:fe:ad:a7:69:2d:58:1e:62:f8:f9:05:10:c9:29:2d:1b:8e: 66:a8:33:bb:1c:b8:c1:35:0e:fc:a3:64:57:4e:cb:23:a9:2d: 6c:12:e6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk6lyq4vkbOYdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NGE1Nzc3ZDItMmQ1Mi00ODVmLTkyMzEtNWQyYzdhODljMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCmEJ3V66ej+o/LOaq9hN9sCruhR2T7+fhzJ RfaPZzjtKNve/m5gERsZK4YOofn+9KPxSf5HbhjTUSWvisRaYGsB1sw/loIigMt5 i9l7ko/8qdiJozUc7hLRpb3+0i9tw/Q9ADYu++twM8XUPmwXSXZFBNVMvVPwPxeK CWqOvLwFRcQxEJxmBye2DsSgnJv5eTY/vALFWTAt+ZsqadKTspAapU/8mcB9/gA1 QOB/hk2XO2BPTH5Qtb3Q8Vkxlctz6WAh+DS67nQXy+p85v7OO2JzHBM884E9RrRO 6WimkCCSlxiN3Oi4LZcf7xNbBLg0s0XVOCswRpMXylliJdn8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcJYcLqTzT/EMtRig3VwDlpE3F9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvYzQ0N2ZiNzYtNTJiYS0z M2JlLThhYjQtM2ZkOGYyZDZkYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLOGEAhLzQjNbR/NbZgNTE4YHCKDmK0VVC6TR8KjEOfKfiwsubjG3Ka k4VdRuHybO8ui/5oQaKXZjz+N5uHaEKInw/gVVbQ+1MRbfH/nnPw5vnggbJoUq3m Hmx16buJvovVeTo3ptkV713L4ndQVVkLy9jGqAmPQoAM9XqwhOKKxBGau/4Sb2Ko zZaevR1i21JHGA0PMmJPQdFcHcwPLC01R45pUd3cQ9Mk4450tGHiIJTtBtJJfA/1 7/2kRCWDTOIw7+0GvLhf2jz+qleR+8wjk7AO/wf+qOv+radpLVgeYvj5BRDJKS0b jmaoM7scuME1DvyjZFdOyyOpLWwS5vc= -----END CERTIFICATE-----Generated at Sat Sep 19 03:00:14 2026 by rpki-client