$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa File: d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa (raw, json) Hash identifier: c+o7olXpU+7nYdfV9kpS1CIUbFoC9YxM97F8SlQsNoc= Subject key identifier: 7D:B5:9D:64:1F:62:58:39:4F:CF:94:7F:59:DF:EF:0E:4A:27:95:C7 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584ECBD1ED916468C67ED456E000 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 12208 IP address blocks: 74.209.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:ed:91:64:68:c6:7e:d4:56:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=9e871944-fccd-4c6f-94ab-cb46ff817b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:67:26:42:56:a3:c8:fb:fb:93:ef:f1:23: 5c:12:c4:f4:96:5f:75:0d:19:5a:f8:e5:0a:05:43: 5c:10:d5:5f:d1:8e:e5:b5:66:43:44:dd:28:1e:4a: 79:b9:bf:9a:6d:5a:db:12:62:2d:f7:fc:93:81:ea: dc:55:a5:03:b0:ce:94:94:43:62:15:c8:dd:25:e6: 83:e3:47:a9:1e:eb:de:49:0c:ed:a2:a9:e5:35:75: eb:33:64:0b:4b:f9:6e:04:f3:cd:aa:13:89:e0:19: 35:9e:2f:53:40:37:f3:0e:74:3a:f0:1f:50:0a:96: 23:61:8c:f3:4d:c3:cc:85:80:72:bb:69:28:39:c1: cf:98:6d:11:fe:06:e7:72:23:68:c4:5b:e2:c5:d7: 46:32:87:cb:38:58:78:94:ec:8c:18:78:b0:63:b2: 9f:54:32:d2:f1:00:0b:ba:59:f8:8d:c8:2b:74:82: 83:9a:38:95:ab:a9:68:64:28:df:bb:aa:c8:13:d4: bb:8a:f6:f6:cd:f8:79:0d:c2:e3:dc:fb:47:1d:ce: 32:05:11:b7:98:f1:67:70:2a:9d:19:a8:da:21:ab: 70:61:52:9f:67:29:8d:20:c8:bb:c4:1b:06:36:79: 67:f4:1b:e8:49:8c:06:88:9c:6b:22:da:5c:f1:e3: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B5:9D:64:1F:62:58:39:4F:CF:94:7F:59:DF:EF:0E:4A:27:95:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 74.209.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ea:43:d0:ab:8b:f9:32:6b:d3:11:6d:c7:43:2f:3d:0d:bf: b7:ba:96:64:d5:0c:86:26:91:1b:e9:dc:6b:7b:22:ae:e0:a3: da:c8:8d:3d:b0:69:c1:66:1e:4c:98:71:c7:24:c8:64:0a:0e: af:69:82:61:9c:12:ea:d3:eb:a6:96:41:38:d8:f7:34:6f:ff: 72:7e:4d:fe:4b:ac:08:86:9e:41:4a:c8:4b:b2:f0:69:2f:c6: 6c:a5:34:e4:62:c2:15:1f:42:19:6c:40:c5:cf:27:e8:52:ab: 22:9d:8f:2b:af:a1:7b:71:f3:fa:b6:4d:f2:58:be:53:ff:ee: fe:87:47:be:1d:13:7b:5b:b3:bc:fe:65:c8:49:ee:ab:66:e8: 2f:4d:8d:88:2c:3a:cf:e3:ef:33:86:8e:05:02:42:df:3b:62: 12:06:56:6c:8f:ad:c3:26:0b:63:40:59:d8:6c:43:51:58:18: 7a:fb:95:c1:bb:93:a0:d9:73:2f:6c:55:8e:ae:12:b3:58:48: 3f:b0:57:3a:60:cb:47:3c:d3:71:1f:e5:ea:90:2b:8e:b0:0b: 10:cc:26:32:2c:42:f8:c0:30:d1:b6:bf:d9:c2:76:80:b7:28: 7e:1e:07:2d:82:f4:5b:d3:54:06:8b:8a:74:c9:67:e0:91:f0: 39:9c:84:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0e2RZGjGftRW4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk OWU4NzE5NDQtZmNjZC00YzZmLTk0YWItY2I0NmZmODE3YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUxnJkJWo8j7+5Pv8SNcEsT0ll91DRla+OUK BUNcENVf0Y7ltWZDRN0oHkp5ub+abVrbEmIt9/yTgercVaUDsM6UlENiFcjdJeaD 40epHuveSQztoqnlNXXrM2QLS/luBPPNqhOJ4Bk1ni9TQDfzDnQ68B9QCpYjYYzz TcPMhYByu2koOcHPmG0R/gbnciNoxFvixddGMofLOFh4lOyMGHiwY7KfVDLS8QAL uln4jcgrdIKDmjiVq6loZCjfu6rIE9S7ivb2zfh5DcLj3PtHHc4yBRG3mPFncCqd GajaIatwYVKfZymNIMi7xBsGNnln9BvoSYwGiJxrItpc8eN7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH21nWQfYlg5T8+Uf1nf7w5KJ5XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvZDI4YzBkOTEtMzlhOS0z ZGEyLThmYWQtZDFjYmQwOWY4MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTqQ9Cri/kya9MRbcdDLz0Nv7e6lmTVDIYmkRvp3Gt7Iq7go9rIjT2w acFmHkyYccckyGQKDq9pgmGcEurT66aWQTjY9zRv/3J+Tf5LrAiGnkFKyEuy8Gkv xmylNORiwhUfQhlsQMXPJ+hSqyKdjyuvoXtx8/q2TfJYvlP/7v6HR74dE3tbs7z+ ZchJ7qtm6C9NjYgsOs/j7zOGjgUCQt87YhIGVmyPrcMmC2NAWdhsQ1FYGHr7lcG7 k6DZcy9sVY6uErNYSD+wVzpgy0c803Ef5eqQK46wCxDMJjIsQvjAMNG2v9nCdoC3 KH4eBy2C9FvTVAaLinTJZ+CR8DmchJ8= -----END CERTIFICATE-----Generated at Wed Aug 26 20:26:31 2026 by rpki-client