$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/395d970a-4aa1-30b7-929c-62ba84159f19.roa File: 395d970a-4aa1-30b7-929c-62ba84159f19.roa (raw, json) Hash identifier: LOyNLW8wuQHRht2mCvK5Hy0eDFRC2p9tqyFBW5APURw= Subject key identifier: F0:9D:EC:3B:33:E6:56:F6:E9:F0:A1:7F:D1:7B:FB:E9:E3:BA:7F:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F02423EEB23237F3C634361C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/395d970a-4aa1-30b7-929c-62ba84159f19.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 40662 IP address blocks: 74.0.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3e:eb:23:23:7f:3c:63:43:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=fc94aa4d-8f9a-441b-89ea-cce8a2019c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:27:63:d6:06:6d:e7:b8:7f:e4:26:81:96: e4:5a:ea:0e:60:f5:f8:44:20:13:39:53:03:19:59: 81:50:43:08:de:cd:2a:41:38:cd:87:ff:2b:6e:81: 67:a8:86:4e:e3:b8:db:64:7c:95:ad:6c:98:5c:90: 77:f1:e7:a3:d9:cb:24:8f:3c:2c:00:6c:2c:dd:53: 32:cf:e8:41:6f:2d:8e:63:63:d3:62:3d:8c:2d:be: e4:31:d2:ad:b4:38:21:26:b2:a9:79:78:83:a0:6a: 2b:f9:04:88:07:69:00:a7:b7:ac:99:07:58:0f:0a: ba:47:d7:c6:2f:28:db:1d:87:ad:62:09:5b:39:80: a8:ee:e4:1d:ef:61:83:03:f4:4d:13:98:f9:6e:e2: e6:0c:6c:36:e2:60:c3:97:44:91:66:d1:98:54:76: 74:5c:7e:b3:b5:b8:20:b7:c9:fb:9e:6f:08:7a:78: 38:d9:3e:3e:d2:13:07:6d:7a:8d:13:3e:e0:d0:d3: ec:0b:af:70:b1:fb:db:64:27:98:38:47:13:31:0e: 2d:a4:3b:9d:a5:d3:8f:03:c1:52:6a:9c:ec:75:53: ca:04:42:0a:d0:85:e9:89:46:c1:17:22:c5:67:7f: c7:d9:a8:6b:47:51:55:b1:f9:9b:aa:87:a5:59:0a: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9D:EC:3B:33:E6:56:F6:E9:F0:A1:7F:D1:7B:FB:E9:E3:BA:7F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/395d970a-4aa1-30b7-929c-62ba84159f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e8:8d:51:d8:c2:63:de:6b:1d:ad:d5:cb:fe:c7:9c:00:de: 41:15:65:54:88:9a:29:ef:8f:0d:61:c6:ba:4c:b2:1a:1e:44: 17:49:2b:5e:0e:74:e3:c6:4d:4c:5d:c6:2e:be:6a:3c:65:f8: 96:91:32:e7:28:60:6c:63:72:a2:97:25:d4:d1:2f:f8:c1:37: ca:c2:06:5d:02:c6:c2:67:12:da:5c:dc:08:16:8f:c3:8c:a0: 64:48:be:cc:84:91:d7:f6:61:b4:86:9e:e5:e7:3b:0a:98:cf: d1:37:2d:e9:91:15:c5:24:55:bc:ef:6a:0c:c4:34:3b:6f:91: 0e:59:8c:8d:75:14:1e:d7:58:8a:5e:4a:86:17:3d:cf:07:0c: 69:3e:5b:31:74:ee:f3:35:7e:3a:d9:88:10:7c:4b:2d:2f:12: 05:43:67:fa:f8:f3:9b:69:38:51:77:d2:8e:1d:1e:ce:91:1e: f0:8b:c7:12:85:fe:5a:d0:8a:7e:a0:43:9d:dd:81:50:72:57: f3:85:91:d2:0c:20:ff:ac:db:71:3f:b1:5c:bf:a6:7d:cb:8f: b8:e2:0e:95:24:24:a0:63:62:51:55:6a:fa:b4:e6:70:7b:e4: d5:08:c9:1d:7a:4f:a0:f3:12:a2:24:89:0c:95:5f:7b:8a:f5: d2:b5:fd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQj7rIyN/PGNDYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZmM5NGFhNGQtOGY5YS00NDFiLTg5ZWEtY2NlOGEyMDE5YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjQnY9YGbee4f+QmgZbkWuoOYPX4RCATOVMD GVmBUEMI3s0qQTjNh/8rboFnqIZO47jbZHyVrWyYXJB38eej2cskjzwsAGws3VMy z+hBby2OY2PTYj2MLb7kMdKttDghJrKpeXiDoGor+QSIB2kAp7esmQdYDwq6R9fG LyjbHYetYglbOYCo7uQd72GDA/RNE5j5buLmDGw24mDDl0SRZtGYVHZ0XH6ztbgg t8n7nm8Ieng42T4+0hMHbXqNEz7g0NPsC69wsfvbZCeYOEcTMQ4tpDudpdOPA8FS apzsdVPKBEIK0IXpiUbBFyLFZ3/H2ahrR1FVsfmbqoelWQrjZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCd7Dsz5lb26fChf9F7++njun+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzk1ZDk3MGEtNGFhMS0z MGI3LTkyOWMtNjJiYTg0MTU5ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrojVHYwmPeax2t1cv+x5wA3kEVZVSIminvjw1hxrpMshoeRBdJK14O dOPGTUxdxi6+ajxl+JaRMucoYGxjcqKXJdTRL/jBN8rCBl0CxsJnEtpc3AgWj8OM oGRIvsyEkdf2YbSGnuXnOwqYz9E3LemRFcUkVbzvagzENDtvkQ5ZjI11FB7XWIpe SoYXPc8HDGk+WzF07vM1fjrZiBB8Sy0vEgVDZ/r485tpOFF30o4dHs6RHvCLxxKF /lrQin6gQ53dgVByV/OFkdIMIP+s23E/sVy/pn3Lj7jiDpUkJKBjYlFVavq05nB7 5NUIyR16T6DzEqIkiQyVX3uK9dK1/YI= -----END CERTIFICATE-----Generated at Sat Oct 10 22:25:53 2026 by rpki-client