$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/40dea16b-9d61-368e-9a91-cce26b0e8384.roa File: 40dea16b-9d61-368e-9a91-cce26b0e8384.roa (raw, json) Hash identifier: 3qtViC0KcpnzkBJ9WJV/lqrpISdDqRCb1vacG4UjvLA= Subject key identifier: 73:0A:8D:1B:3C:A0:52:02:38:3A:35:BA:28:17:0F:4F:B4:78:BB:5E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E6B0A29756A91830389053368 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/40dea16b-9d61-368e-9a91-cce26b0e8384.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 834 IP address blocks: 74.1.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:29:75:6a:91:83:03:89:05:33:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=f7db2332-5f64-421a-97fa-59a77740d6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:22:0c:4a:24:0b:53:a1:6b:c6:99:f8:18: 2d:44:51:fc:45:b3:81:a2:06:f9:54:01:ab:12:90: 92:d3:9d:ee:72:a9:43:83:b0:a7:8c:cf:23:4f:10: ac:30:49:38:e8:c6:7d:df:8d:fa:7d:e4:c5:e8:0d: b3:b2:79:45:f7:23:b7:f2:f7:aa:2f:5d:86:d6:c1: f4:e6:7a:85:d6:07:82:5b:3c:21:cc:91:2a:12:a0: 01:65:6e:68:a7:5b:04:12:88:64:8e:cf:a7:f3:70: 38:e1:5a:f6:a4:10:48:2c:c0:89:61:94:92:e0:91: c0:4f:5c:02:a3:24:00:f5:1d:6a:8f:2d:f2:82:b4: 2e:6a:ce:71:54:59:da:49:d7:de:89:d3:bf:27:ad: ae:31:5c:25:fb:c7:d0:7a:ab:55:c1:c4:7d:ba:e6: 5a:5d:e9:6b:36:5c:64:e8:37:87:ed:07:34:72:af: 82:9e:f3:e2:f5:61:bb:7a:ec:2a:28:30:e5:1f:c5: 15:90:97:a6:6c:97:c4:42:27:b6:0b:8e:25:8d:c8: 60:b7:89:86:40:09:a9:a4:ef:94:c4:4b:57:35:ee: 0c:d0:72:c6:40:36:ff:ab:48:ee:a5:4a:92:0e:cf: 7e:8d:b9:d9:2b:5b:68:c3:27:1c:d4:54:8f:f3:4a: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:8D:1B:3C:A0:52:02:38:3A:35:BA:28:17:0F:4F:B4:78:BB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/40dea16b-9d61-368e-9a91-cce26b0e8384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:f3:d3:9d:25:e2:36:14:55:48:80:00:10:69:7c:dd:3c:7c: 27:ca:4d:4e:39:ec:83:87:fa:b7:86:32:7f:d6:58:ae:0e:dc: 1b:fb:cd:24:3b:bd:f5:72:db:da:c2:05:68:40:fc:4b:31:24: 51:9f:77:a9:2c:f4:e7:d0:44:b6:8a:dc:c6:99:85:15:ee:10: e5:eb:d6:61:42:72:a2:25:45:cb:42:1f:c3:3d:61:fc:44:c5: b3:25:87:1c:60:68:f7:c1:2f:03:31:18:2c:e9:50:42:b2:48: de:26:e4:d7:8d:11:d3:ab:dc:e0:c5:de:ee:24:96:24:03:e3: 49:20:7b:58:30:82:9c:a0:57:b4:a6:9d:38:15:1e:c3:7c:7c: 93:1f:4a:ff:ff:16:4c:9d:39:84:06:94:73:8a:46:1f:6a:61: fe:b3:c3:ac:30:f7:06:d4:e7:da:5e:48:c1:5d:08:4e:a0:39: ef:56:37:30:c2:9b:98:e6:c2:38:b1:b6:c5:af:d2:12:6a:04: f9:f3:29:8b:f0:3b:6d:2c:cd:2f:40:5d:cd:ad:48:1e:aa:fd: 6d:bb:45:ca:4a:52:13:38:af:57:dc:9e:84:3c:fe:87:4f:7d: a0:25:20:e2:f2:e5:6b:5c:ec:a7:a9:7a:db:ac:71:68:a8:85: 2a:36:b3:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCil1apGDA4kFM2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjdkYjIzMzItNWY2NC00MjFhLTk3ZmEtNTlhNzc3NDBkNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix8iDEokC1Oha8aZ+BgtRFH8RbOBogb5VAGr EpCS053ucqlDg7CnjM8jTxCsMEk46MZ93436feTF6A2zsnlF9yO38veqL12G1sH0 5nqF1geCWzwhzJEqEqABZW5op1sEEohkjs+n83A44Vr2pBBILMCJYZSS4JHAT1wC oyQA9R1qjy3ygrQuas5xVFnaSdfeidO/J62uMVwl+8fQeqtVwcR9uuZaXelrNlxk 6DeH7Qc0cq+CnvPi9WG7euwqKDDlH8UVkJembJfEQie2C44ljchgt4mGQAmppO+U xEtXNe4M0HLGQDb/q0jupUqSDs9+jbnZK1towycc1FSP80psxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMKjRs8oFICODo1uigXD0+0eLteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDBkZWExNmItOWQ2MS0z NjhlLTlhOTEtY2NlMjZiMGU4Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbz050l4jYUVUiAABBpfN08fCfKTU457IOH+reGMn/WWK4O3Bv7zSQ7 vfVy29rCBWhA/EsxJFGfd6ks9OfQRLaK3MaZhRXuEOXr1mFCcqIlRctCH8M9YfxE xbMlhxxgaPfBLwMxGCzpUEKySN4m5NeNEdOr3ODF3u4kliQD40kge1gwgpygV7Sm nTgVHsN8fJMfSv//FkydOYQGlHOKRh9qYf6zw6ww9wbU59peSMFdCE6gOe9WNzDC m5jmwjixtsWv0hJqBPnzKYvwO20szS9AXc2tSB6q/W27RcpKUhM4r1fcnoQ8/odP faAlIOLy5Wtc7KepetuscWiohSo2s2Q= -----END CERTIFICATE-----Generated at Fri Jul 10 13:50:53 2026 by rpki-client