$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2027f194-40d7-3849-b8ef-41205b11026d.roa File: 2027f194-40d7-3849-b8ef-41205b11026d.roa (raw, json) Hash identifier: 2Wtc9l7mkzVkpTaGEpkQP0kqhGvkRPNdTwyDsYx72mY= Subject key identifier: 44:70:63:BA:FA:42:16:F2:1E:50:ED:9C:F8:90:0A:1D:19:8C:C8:68 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DF0AB436DCCB7AC5116AF3178 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2027f194-40d7-3849-b8ef-41205b11026d.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 834 IP address blocks: 74.2.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:43:6d:cc:b7:ac:51:16:af:31:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=259f29e4-f792-4824-be49-136c43a219dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:e8:40:7f:e0:43:ea:3c:2a:bc:42:17:06: f4:32:23:82:b7:80:d1:60:0d:73:f1:d1:17:a7:96: 84:67:d0:02:11:dd:ca:57:38:4c:b9:19:b1:26:a2: 38:a8:eb:a4:89:bd:ad:d5:84:ce:2a:f9:90:d8:e8: f2:f4:55:0d:62:df:2b:e4:1e:35:27:97:66:dc:61: d7:1c:e6:c8:e9:f1:5a:d1:75:fa:e5:bb:82:34:79: a0:e4:43:2f:18:18:9a:37:4f:de:bb:e2:af:b6:9c: 7e:57:26:ac:69:06:3d:7e:72:bf:8f:3f:42:2c:34: 0f:de:5b:42:ae:cb:88:45:ed:e9:0a:9a:30:9c:ca: 7a:a7:21:3d:32:60:d5:88:a9:18:d1:6a:f2:6b:9f: 94:95:f5:26:34:91:3c:2f:a8:3a:28:6d:fb:20:7d: 84:95:ba:c0:a4:49:e0:ac:cb:cc:9c:9a:fd:6e:ea: 78:71:36:cf:44:84:c7:56:9a:d1:c1:c2:48:c4:7c: aa:7b:3b:cc:da:b8:39:33:b5:46:3c:25:43:63:39: 39:3a:61:d3:54:c9:da:75:fe:22:49:b7:fe:08:4b: a4:8e:d3:97:30:12:7f:51:b8:e0:c9:48:38:98:a9: ad:5c:92:ca:3c:ea:64:3d:97:b4:55:63:ed:1c:44: 5c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:63:BA:FA:42:16:F2:1E:50:ED:9C:F8:90:0A:1D:19:8C:C8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2027f194-40d7-3849-b8ef-41205b11026d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:65:c5:fd:4a:42:9b:d2:4a:18:19:40:20:ca:bb:4b:13:42: 97:e5:84:e9:24:e0:85:b1:76:bc:ed:08:81:46:70:c4:e7:0a: 86:29:73:58:70:c4:2f:6a:a3:ca:aa:8c:0f:85:1d:f6:0d:16: cd:69:e2:d3:5f:2d:32:a2:ee:f5:9c:b0:82:e9:a8:cc:60:e8: e6:8c:77:43:71:5c:23:a4:01:63:e6:f9:ce:a7:7f:73:39:9f: 04:cf:48:0a:c3:74:d2:6a:a6:69:d9:a5:3a:52:01:63:e5:5c: 88:1c:5c:d8:f0:75:55:f1:c2:81:35:77:11:87:f7:84:57:a3: 14:2a:8d:23:cf:9d:b5:75:bc:ad:e7:dd:d3:f3:87:b0:2e:2e: 83:5b:4a:d7:a8:5f:6d:c2:ef:4d:b3:d6:8c:d2:25:34:2c:f9: d3:66:98:0c:a9:cc:c0:33:5a:7d:ca:84:f8:0e:38:42:98:c7: c1:bf:7b:cb:bd:93:4b:2d:b3:49:44:c8:c0:03:bb:d0:41:3a: c5:27:8c:69:14:03:e6:7b:cd:f3:f1:4b:c8:d9:f2:34:02:2b: a3:80:04:6c:1c:40:66:d4:c4:99:d6:9c:4a:e0:a8:63:d3:d3: 44:e2:23:73:da:86:38:77:e6:1f:c2:9d:d2:43:0c:88:12:96: ee:67:a2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0NtzLesURavMXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk MjU5ZjI5ZTQtZjc5Mi00ODI0LWJlNDktMTM2YzQzYTIxOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+3oQH/gQ+o8KrxCFwb0MiOCt4DRYA1z8dEX p5aEZ9ACEd3KVzhMuRmxJqI4qOukib2t1YTOKvmQ2Ojy9FUNYt8r5B41J5dm3GHX HObI6fFa0XX65buCNHmg5EMvGBiaN0/eu+Kvtpx+VyasaQY9fnK/jz9CLDQP3ltC rsuIRe3pCpownMp6pyE9MmDViKkY0Wrya5+UlfUmNJE8L6g6KG37IH2ElbrApEng rMvMnJr9bup4cTbPRITHVprRwcJIxHyqezvM2rg5M7VGPCVDYzk5OmHTVMnadf4i Sbf+CEukjtOXMBJ/UbjgyUg4mKmtXJLKPOpkPZe0VWPtHERcYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERwY7r6QhbyHlDtnPiQCh0ZjMhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjAyN2YxOTQtNDBkNy0z ODQ5LWI4ZWYtNDEyMDViMTEwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5lxf1KQpvSShgZQCDKu0sTQpflhOkk4IWxdrztCIFGcMTnCoYpc1hw xC9qo8qqjA+FHfYNFs1p4tNfLTKi7vWcsILpqMxg6OaMd0NxXCOkAWPm+c6nf3M5 nwTPSArDdNJqpmnZpTpSAWPlXIgcXNjwdVXxwoE1dxGH94RXoxQqjSPPnbV1vK3n 3dPzh7AuLoNbSteoX23C702z1ozSJTQs+dNmmAypzMAzWn3KhPgOOEKYx8G/e8u9 k0sts0lEyMADu9BBOsUnjGkUA+Z7zfPxS8jZ8jQCK6OABGwcQGbUxJnWnErgqGPT 00TiI3Pahjh35h/CndJDDIgSlu5noic= -----END CERTIFICATE-----Generated at Tue May 26 02:34:29 2026 by rpki-client