$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa File: 253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa (raw, json) Hash identifier: yKVCYwQervVmG2WaFBqHHYMcHBkfI4KC00lN+46JM6A= Subject key identifier: 37:66:41:8E:A4:22:97:12:80:F0:B3:9F:19:38:81:CA:07:4A:10:D6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E3CF9C8D039A86D6AE1AAC300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa Signing time: Sat 20 Jun 2026 21:00:12 +0000 ROA not before: Sat 20 Jun 2026 21:00:12 +0000 ROA not after: Fri 18 Sep 2026 21:00:12 +0000 asID: 834 IP address blocks: 74.1.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f9:c8:d0:39:a8:6d:6a:e1:aa:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 20 21:00:12 2026 GMT Not After : Sep 18 21:00:12 2026 GMT Subject: CN=3b266258-c1e6-47a2-8ceb-e8b5066fe43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:cc:b6:27:d7:30:48:a5:ed:35:d8:8d:0c: 62:6e:b4:6a:9f:14:a1:0a:36:a4:04:41:90:ce:da: cd:e1:44:37:d3:e4:1d:91:a1:da:3e:b0:92:20:64: 63:d7:7a:dd:e9:82:e6:09:4d:dd:c3:12:96:32:44: 09:5a:5b:ca:a3:d8:4d:01:98:c7:c2:a3:cc:20:8e: a5:aa:c0:c7:6c:1f:df:1e:ba:f6:e5:c9:9a:b7:8a: 39:ce:09:42:bd:fd:88:b6:e2:30:9c:e3:d3:96:36: a1:82:58:52:50:64:ee:f5:f4:e3:90:fe:d4:c6:83: 79:ef:3b:9e:17:fd:9e:7d:ed:d8:db:36:2d:3d:dd: fc:0c:56:ff:4f:b0:32:4a:7a:5d:02:57:83:dd:21: 46:4d:98:fa:0b:4c:60:f7:29:61:31:05:6e:c6:26: 90:8d:b2:dc:d7:67:fc:54:98:03:e3:cc:4c:d5:65: 70:2e:75:a3:a5:18:fc:cd:c3:19:c0:70:99:0e:9f: 09:f6:56:73:c8:ff:80:c8:c1:2b:10:8a:ec:ec:94: 1b:54:cc:85:d1:45:ed:be:e7:32:03:14:0d:a5:2d: 6f:18:2a:38:85:f9:76:d9:b2:fd:1c:d9:c6:bf:da: 45:b2:69:ce:29:e2:c0:3a:3b:3c:7f:de:70:d3:e1: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:66:41:8E:A4:22:97:12:80:F0:B3:9F:19:38:81:CA:07:4A:10:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/253f8147-f173-3ab4-9a3f-f7ee0a26dff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:c5:4b:a2:9a:3f:9d:d8:2f:08:a6:5d:92:81:18:a4:8e: 6e:78:0b:03:2c:40:bc:76:d0:ac:f1:00:a0:b5:bf:c9:84:4b: 0c:42:80:1d:13:d8:f8:c7:f4:ee:1c:66:d0:91:12:df:c6:18: d9:0e:6b:fb:86:9c:79:f3:f7:99:37:13:1a:bf:39:1e:d0:6f: c0:c7:a8:89:ab:06:c8:c3:e1:42:42:0d:fa:4c:64:01:36:04: 31:c8:aa:0e:e5:0c:5a:a4:fd:8e:4e:01:29:6c:89:71:42:a4: ac:fd:95:be:07:f5:c1:63:c9:51:b3:6a:03:16:8b:42:3d:fb: f3:9f:ee:cd:a0:49:93:4f:33:37:5d:b5:ef:ac:80:c0:3d:ed: cc:d1:41:25:9f:02:3f:00:af:5e:3c:47:13:cc:1d:ed:74:d8: 36:35:a5:0c:60:4c:26:78:10:b5:ed:4d:55:18:59:87:ef:35: cc:46:90:b2:2c:71:43:49:50:0b:6f:68:02:31:cf:c2:1c:d1: 0a:4f:cd:c1:e1:c1:20:16:16:f3:e1:8f:be:0d:17:0e:e7:07: d9:9d:78:f5:17:c7:ee:f2:18:1d:15:80:e5:9a:19:c5:29:4c: cd:59:28:5e:1a:fc:6a:7a:6c:34:83:0a:2e:3c:d0:07:2e:ce: 14:f9:b2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE48+cjQOahtauGqwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk M2IyNjYyNTgtYzFlNi00N2EyLThjZWItZThiNTA2NmZlNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdrMtifXMEil7TXYjQxibrRqnxShCjakBEGQ ztrN4UQ30+QdkaHaPrCSIGRj13rd6YLmCU3dwxKWMkQJWlvKo9hNAZjHwqPMII6l qsDHbB/fHrr25cmat4o5zglCvf2ItuIwnOPTljahglhSUGTu9fTjkP7UxoN57zue F/2efe3Y2zYtPd38DFb/T7AySnpdAleD3SFGTZj6C0xg9ylhMQVuxiaQjbLc12f8 VJgD48xM1WVwLnWjpRj8zcMZwHCZDp8J9lZzyP+AyMErEIrs7JQbVMyF0UXtvucy AxQNpS1vGCo4hfl22bL9HNnGv9pFsmnOKeLAOjs8f95w0+E5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdmQY6kIpcSgPCznxk4gcoHShDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjUzZjgxNDctZjE3My0z YWI0LTlhM2YtZjdlZTBhMjZkZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETCxUuimj+d2C8Ipl2SgRikjm54CwMsQLx20KzxAKC1v8mESwxCgB0T 2PjH9O4cZtCREt/GGNkOa/uGnHnz95k3Exq/OR7Qb8DHqImrBsjD4UJCDfpMZAE2 BDHIqg7lDFqk/Y5OASlsiXFCpKz9lb4H9cFjyVGzagMWi0I9+/Of7s2gSZNPMzdd te+sgMA97czRQSWfAj8Ar148RxPMHe102DY1pQxgTCZ4ELXtTVUYWYfvNcxGkLIs cUNJUAtvaAIxz8Ic0QpPzcHhwSAWFvPhj74NFw7nB9mdePUXx+7yGB0VgOWaGcUp TM1ZKF4a/Gp6bDSDCi480AcuzhT5st0= -----END CERTIFICATE-----Generated at Fri Jul 10 13:53:26 2026 by rpki-client