$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3020e3cf-e397-323e-944a-8b5cf554af67.roa File: 3020e3cf-e397-323e-944a-8b5cf554af67.roa (raw, json) Hash identifier: TWznxw1eusa4zsvKsnzR5WoqObvqTU5g9+y+77/k3uU= Subject key identifier: 11:81:77:B6:EE:AA:DA:D1:70:0A:BB:3D:69:07:3E:2F:5A:25:A5:A1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6155A5A0818B96603CC2B100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3020e3cf-e397-323e-944a-8b5cf554af67.roa Signing time: Sat 03 Oct 2026 14:21:26 +0000 ROA not before: Sat 03 Oct 2026 14:21:26 +0000 ROA not after: Fri 01 Jan 2027 15:21:26 +0000 asID: 174 IP address blocks: 74.2.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:55:a5:a0:81:8b:96:60:3c:c2:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 3 14:21:26 2026 GMT Not After : Jan 1 15:21:26 2027 GMT Subject: CN=03c6f489-9987-4037-a760-96fed7a3dbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:b6:c7:2d:4f:85:d7:a2:14:9e:dd:3b:1f: 1d:21:38:d7:af:23:43:f7:40:fc:8e:90:c5:67:37: 3e:3b:fe:a3:31:f1:32:8e:b3:f0:2c:b3:80:60:84: 0a:80:08:4f:42:bd:0c:fb:fa:4b:7b:37:ca:f6:5c: 83:a7:9b:23:10:b5:ac:70:21:76:c7:eb:4f:78:5b: fb:5a:71:b2:02:e2:5a:df:e1:e4:a4:bb:5c:55:1b: 60:df:0b:db:73:0a:e9:29:c3:24:54:4a:7b:44:89: 4c:bd:b3:af:09:e9:f9:27:a3:51:2f:78:ae:12:94: e6:aa:67:db:2a:3d:82:19:08:26:f1:9c:8c:26:37: 1b:10:2f:7c:1f:72:62:5c:7d:1f:72:ec:5f:47:c4: 72:1f:32:3b:a0:e5:c1:57:92:3e:3e:54:a9:e7:0c: 5a:7e:d6:f2:1e:76:80:50:16:08:46:4e:ae:6b:ca: 00:38:d0:13:0a:aa:0d:fd:d2:24:6d:5b:21:04:29: 60:82:ad:24:70:b8:ff:df:88:a3:2f:43:02:a2:6e: 7c:2e:a4:b3:8b:49:6d:a9:d0:d3:7c:fe:36:64:af: 62:c6:b1:72:d8:e6:8e:0f:54:07:21:42:51:8b:98: cd:68:47:89:6f:37:a4:33:80:1c:c6:ad:a7:bd:9b: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:77:B6:EE:AA:DA:D1:70:0A:BB:3D:69:07:3E:2F:5A:25:A5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3020e3cf-e397-323e-944a-8b5cf554af67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f5:46:41:b4:a0:e2:ac:9b:fd:71:08:66:e2:31:3d:72:03: 1d:8e:1b:5a:de:e8:5c:1b:b2:8a:61:1b:99:9f:19:10:a1:4f: ae:3c:9a:a9:e0:4f:ec:c1:05:f3:3e:42:e7:6f:a6:9e:ea:fe: 61:a8:3a:a5:9d:78:fd:4a:a1:8f:9c:9c:6d:d1:43:7b:38:69: 4b:96:6a:d4:e7:32:ef:6b:ca:eb:84:f9:f2:bd:a6:23:77:c3: 3c:9e:e0:c9:82:e3:b6:34:45:9d:e3:7a:43:f2:8e:83:d5:17: 53:3c:8c:44:e6:d7:0e:b7:75:ab:5f:ff:67:6d:50:11:74:2f: e0:e4:ba:78:fa:02:06:e5:10:89:b1:9f:6d:6b:3d:ca:95:b8: c7:5b:32:8a:ac:73:e8:8b:31:69:ae:8b:3e:78:eb:06:25:6e: 0a:6e:72:ee:06:d6:4b:d0:9a:41:8a:b6:1e:3c:56:a2:55:89: ae:8c:f9:80:f9:01:db:4c:8c:7e:ed:10:30:12:a2:28:ad:30: 28:c9:78:df:ec:52:ed:ef:36:8d:cf:6f:ac:1b:94:8a:74:b1: 49:a6:e4:e0:e7:c3:91:f7:bb:21:72:5e:83:2d:f1:54:78:96: 6f:54:47:fd:7f:9a:6b:e7:17:3f:36:11:b8:07:dd:70:ce:79: c7:da:4f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hVaWggYuWYDzCsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMzE0MjEyNloXDTI3MDEwMTE1MjEyNlowLzEtMCsGA1UEAxMk MDNjNmY0ODktOTk4Ny00MDM3LWE3NjAtOTZmZWQ3YTNkYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnS2xy1PhdeiFJ7dOx8dITjXryND90D8jpDF Zzc+O/6jMfEyjrPwLLOAYIQKgAhPQr0M+/pLezfK9lyDp5sjELWscCF2x+tPeFv7 WnGyAuJa3+HkpLtcVRtg3wvbcwrpKcMkVEp7RIlMvbOvCen5J6NRL3iuEpTmqmfb Kj2CGQgm8ZyMJjcbEC98H3JiXH0fcuxfR8RyHzI7oOXBV5I+PlSp5wxaftbyHnaA UBYIRk6ua8oAONATCqoN/dIkbVshBClggq0kcLj/34ijL0MCom58LqSzi0ltqdDT fP42ZK9ixrFy2OaOD1QHIUJRi5jNaEeJbzekM4Acxq2nvZu4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGBd7buqtrRcAq7PWkHPi9aJaWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzAyMGUzY2YtZTM5Ny0z MjNlLTk0NGEtOGI1Y2Y1NTRhZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz1RkG0oOKsm/1xCGbiMT1yAx2OG1re6FwbsophG5mfGRChT648mqng T+zBBfM+Qudvpp7q/mGoOqWdeP1KoY+cnG3RQ3s4aUuWatTnMu9ryuuE+fK9piN3 wzye4MmC47Y0RZ3jekPyjoPVF1M8jETm1w63datf/2dtUBF0L+Dkunj6AgblEImx n21rPcqVuMdbMoqsc+iLMWmuiz546wYlbgpucu4G1kvQmkGKth48VqJVia6M+YD5 AdtMjH7tEDASoiitMCjJeN/sUu3vNo3Pb6wblIp0sUmm5ODnw5H3uyFyXoMt8VR4 lm9UR/1/mmvnFz82EbgH3XDOecfaT/0= -----END CERTIFICATE-----Generated at Fri Oct 9 20:12:49 2026 by rpki-client