$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2de987e2-4768-381d-8080-3694401f6b0b.roa File: 2de987e2-4768-381d-8080-3694401f6b0b.roa (raw, json) Hash identifier: Ae6QAf3Q9dqhooninFNXLk4+Zvu/gsml29jjV5i3kNg= Subject key identifier: 3C:8A:70:CB:DF:77:0B:73:CD:F7:82:61:5E:4E:01:97:C7:D7:91:FD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D75D55022170CB0D1CBA35380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2de987e2-4768-381d-8080-3694401f6b0b.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 174 IP address blocks: 74.1.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:50:22:17:0c:b0:d1:cb:a3:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=486348c3-8733-492d-aa2f-50302307d9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f5:a4:e4:ea:42:79:40:86:b3:9a:9c:cc:89: fe:26:b3:5b:6e:8c:8e:46:15:b3:80:1b:21:ed:88: 5d:35:83:79:01:e3:5b:09:06:f0:05:84:a6:81:16: fd:12:5a:70:a7:ca:41:09:39:de:32:13:c4:f9:a7: 82:b9:c1:c5:27:a2:25:6a:47:8d:18:77:58:80:ff: a0:8d:93:4c:a7:86:b8:33:eb:e2:69:35:bc:35:ad: 18:ab:fc:62:20:39:8e:c5:00:48:51:d2:31:75:87: cc:d2:d6:f0:d5:b1:70:11:42:6f:98:95:9c:9a:35: 7c:ef:58:31:57:1f:fc:25:33:99:18:40:4d:91:fe: ff:39:e9:dd:63:40:75:11:e6:a9:dc:ae:8b:14:28: 9d:1e:3a:5d:68:44:42:c4:a3:d8:0c:7f:64:e9:1d: 0a:9b:e0:a6:6a:de:61:b4:b5:02:e1:4a:94:ed:e9: ce:05:6c:fb:13:e1:c5:84:3f:60:a1:5f:0c:6b:59: 8e:52:5a:eb:d7:03:45:63:2c:00:b9:c0:d8:5b:83: 49:40:00:21:b5:51:77:df:1a:59:90:e2:34:49:62: 86:a5:e0:5e:d1:b6:5c:63:ac:fa:cf:41:3f:bf:db: 1b:3f:ce:bf:d7:3b:4c:da:fc:1e:ef:13:a9:17:e2: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:70:CB:DF:77:0B:73:CD:F7:82:61:5E:4E:01:97:C7:D7:91:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2de987e2-4768-381d-8080-3694401f6b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:93:93:1a:42:79:74:b5:88:68:fe:39:23:90:73:51:15:03: 42:8c:b4:e6:4a:ab:58:21:cb:89:73:d2:9a:2d:ae:ad:90:f9: f7:df:97:60:92:f1:42:f6:24:c3:1b:81:4e:d5:77:19:0d:29: d6:26:65:4d:f3:02:c3:30:e6:cb:b0:0c:ad:fd:26:36:10:f1: 79:8d:ab:48:80:3f:50:36:31:5e:cb:cc:4d:09:3a:b0:67:ee: 52:93:15:3a:70:8b:90:fa:6e:d3:99:77:73:a6:8c:4b:5c:f6: eb:0e:8a:12:2d:f5:16:8b:72:01:93:be:cf:54:47:22:4c:16: aa:30:8e:60:a4:55:30:c2:13:09:da:7f:79:4b:01:e3:cd:86: 5f:60:ce:29:c2:ff:8a:fb:aa:45:eb:04:25:07:af:5e:b2:4f: 66:49:52:7c:a2:91:5e:20:69:80:f9:6b:98:3d:86:d5:6b:f5: 19:6b:b5:9e:eb:95:e9:20:8d:0b:95:92:34:42:56:d6:70:6f: 61:56:4b:f8:06:08:58:64:40:47:9b:57:e6:06:2d:2b:89:e1: ed:2b:fb:5d:49:db:69:06:3a:d5:f4:97:ca:3b:77:b7:b2:cf: 2c:46:06:02:39:5f:38:a3:cc:cf:fa:69:e1:fb:63:5f:03:fa: 22:84:f0:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111VAiFwyw0cujU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDg2MzQ4YzMtODczMy00OTJkLWFhMmYtNTAzMDIzMDdkOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fWk5OpCeUCGs5qczIn+JrNbboyORhWzgBsh 7YhdNYN5AeNbCQbwBYSmgRb9Elpwp8pBCTneMhPE+aeCucHFJ6IlakeNGHdYgP+g jZNMp4a4M+viaTW8Na0Yq/xiIDmOxQBIUdIxdYfM0tbw1bFwEUJvmJWcmjV871gx Vx/8JTOZGEBNkf7/OendY0B1Eeap3K6LFCidHjpdaERCxKPYDH9k6R0Km+Cmat5h tLUC4UqU7enOBWz7E+HFhD9goV8Ma1mOUlrr1wNFYywAucDYW4NJQAAhtVF33xpZ kOI0SWKGpeBe0bZcY6z6z0E/v9sbP86/1ztM2vwe7xOpF+KtpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyKcMvfdwtzzfeCYV5OAZfH15H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmRlOTg3ZTItNDc2OC0z ODFkLTgwODAtMzY5NDQwMWY2YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6TkxpCeXS1iGj+OSOQc1EVA0KMtOZKq1ghy4lz0potrq2Q+fffl2CS 8UL2JMMbgU7VdxkNKdYmZU3zAsMw5suwDK39JjYQ8XmNq0iAP1A2MV7LzE0JOrBn 7lKTFTpwi5D6btOZd3OmjEtc9usOihIt9RaLcgGTvs9URyJMFqowjmCkVTDCEwna f3lLAePNhl9gzinC/4r7qkXrBCUHr16yT2ZJUnyikV4gaYD5a5g9htVr9RlrtZ7r lekgjQuVkjRCVtZwb2FWS/gGCFhkQEebV+YGLSuJ4e0r+11J22kGOtX0l8o7d7ey zyxGBgI5XzijzM/6aeH7Y18D+iKE8Fc= -----END CERTIFICATE-----Generated at Fri Apr 10 23:17:57 2026 by rpki-client