$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa File: 36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa (raw, json) Hash identifier: dkcvLiZqS010bIjEXK5ix3rgK3wlQup015gaNzJy0h4= Subject key identifier: 37:47:4C:F2:F0:45:F3:BC:75:36:A6:75:4D:67:12:52:84:C3:CA:44 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E709F6FAB8932653A66D8AFE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 174 IP address blocks: 74.2.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6f:ab:89:32:65:3a:66:d8:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=d2612272-af5d-4904-ac5e-009dcd5390bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:55:f8:c5:96:28:3b:77:f3:a8:fe:4b:84: 6a:41:6b:76:e8:cd:51:1f:b7:93:8f:90:09:a9:c0: cf:c3:3d:50:bb:a1:d8:48:81:df:9f:08:81:12:79: ea:f8:51:f8:7e:d8:3a:b2:2a:c5:3a:d8:f4:ca:ae: a5:83:35:fc:b9:42:b6:a2:99:62:f4:db:e6:b0:44: 55:b2:99:b1:7f:38:00:d9:06:c7:6d:9e:a9:c5:c1: f8:18:75:99:2f:13:a2:ec:f1:d3:b1:08:df:d9:ab: 31:a6:9f:d7:dc:d5:2e:1a:f2:c0:02:56:be:65:6d: ba:ed:79:dc:35:4b:4e:ae:3b:3d:d3:7b:70:a6:4a: c4:59:66:4d:d0:dc:36:95:89:b9:76:ea:53:5d:d9: 42:cf:8c:30:f8:2c:d5:75:30:11:01:3c:93:f5:48: 72:f9:ad:9e:11:49:62:95:65:ce:b3:ad:b3:08:82: 95:23:46:fe:65:89:29:80:54:00:1b:36:a6:9c:a0: 6c:af:bc:d7:ad:46:00:b8:94:ad:56:2a:6f:62:0b: 61:e3:81:b7:2d:91:9a:ff:3f:56:a3:d1:41:c1:1c: b4:9a:de:7c:0f:20:12:e7:bc:fb:74:57:e6:69:30: 96:77:b9:0e:3d:7a:c9:f0:35:73:e7:d5:35:46:f3: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:47:4C:F2:F0:45:F3:BC:75:36:A6:75:4D:67:12:52:84:C3:CA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36c1dc60-48d1-3555-9c08-0fa4a6a11780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e0:79:4b:a7:1c:c9:32:79:f8:9b:31:08:95:ec:f7:27:49: b7:2c:be:e9:80:19:a0:e0:21:58:ab:fa:9f:cd:49:f5:16:59: ee:5f:07:f2:49:f0:c6:e9:16:bb:88:c2:31:33:4c:2d:c3:7b: b6:e2:0b:15:60:64:5f:1b:f4:87:b5:42:aa:b7:d1:ff:f8:dd: 1b:82:75:af:b9:fe:b1:44:f7:16:0c:10:95:41:2c:e0:f7:ca: 29:37:84:80:96:ad:a4:df:5f:ff:9c:64:96:ce:75:25:3d:cb: 97:bd:57:8b:92:54:a9:f2:79:78:8e:12:4b:8c:5c:e6:d0:18: d7:0c:4b:e6:c5:9e:e3:85:1c:d9:b0:38:50:c0:61:64:7a:63: ce:38:cb:f1:63:8d:d5:69:b4:99:aa:d0:9b:fa:24:71:2e:16: a8:51:c4:92:50:ac:59:2a:88:e6:98:42:03:a9:eb:e4:aa:5c: 5a:3d:e6:a4:a0:f3:b6:be:e4:54:e5:8d:15:1a:05:5a:3b:b4: 36:a6:5f:83:94:40:c4:a2:d1:8b:de:ff:ed:80:81:a5:da:60: d0:46:91:ba:be:74:aa:93:bb:f9:05:7d:cc:5c:01:4a:a2:13: 39:cd:1e:a1:67:0d:ff:36:1f:02:67:0e:d0:de:da:a8:3f:0e: db:d9:2f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn2+riTJlOmbYr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZDI2MTIyNzItYWY1ZC00OTA0LWFjNWUtMDA5ZGNkNTM5MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhtV+MWWKDt386j+S4RqQWt26M1RH7eTj5AJ qcDPwz1Qu6HYSIHfnwiBEnnq+FH4ftg6sirFOtj0yq6lgzX8uUK2opli9NvmsERV spmxfzgA2QbHbZ6pxcH4GHWZLxOi7PHTsQjf2asxpp/X3NUuGvLAAla+ZW267Xnc NUtOrjs903twpkrEWWZN0Nw2lYm5dupTXdlCz4ww+CzVdTARATyT9Uhy+a2eEUli lWXOs62zCIKVI0b+ZYkpgFQAGzamnKBsr7zXrUYAuJStVipvYgth44G3LZGa/z9W o9FBwRy0mt58DyAS57z7dFfmaTCWd7kOPXrJ8DVz59U1RvM7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdHTPLwRfO8dTamdU1nElKEw8pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzZjMWRjNjAtNDhkMS0z NTU1LTljMDgtMGZhNGE2YTExNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPgeUunHMkyefibMQiV7PcnSbcsvumAGaDgIVir+p/NSfUWWe5fB/JJ 8MbpFruIwjEzTC3De7biCxVgZF8b9Ie1Qqq30f/43RuCda+5/rFE9xYMEJVBLOD3 yik3hICWraTfX/+cZJbOdSU9y5e9V4uSVKnyeXiOEkuMXObQGNcMS+bFnuOFHNmw OFDAYWR6Y844y/FjjdVptJmq0Jv6JHEuFqhRxJJQrFkqiOaYQgOp6+SqXFo95qSg 87a+5FTljRUaBVo7tDamX4OUQMSi0Yve/+2AgaXaYNBGkbq+dKqTu/kFfcxcAUqi EznNHqFnDf82HwJnDtDe2qg/DtvZL+4= -----END CERTIFICATE-----Generated at Fri Jul 10 13:52:40 2026 by rpki-client