$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a2b648cd-bf14-3770-933c-4ec68d860071.roa File: a2b648cd-bf14-3770-933c-4ec68d860071.roa (raw, json) Hash identifier: vRW2zMNgSarDKBGPQH6GZphSskg06zx98/hK/vS+frs= Subject key identifier: 3B:3E:C6:4C:5A:DC:F3:1A:7F:20:7D:FD:87:66:EF:B9:26:A1:79:1F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584FA2C88367BDB13AD930F82500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a2b648cd-bf14-3770-933c-4ec68d860071.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 13737 IP address blocks: 74.1.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:83:67:bd:b1:3a:d9:30:f8:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=09395c6d-b11a-4910-8c54-119f9f15458e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:3b:63:2c:17:d0:78:b1:77:73:0e:c9:9a: 85:04:7b:cb:b7:ec:7b:cf:bc:00:04:76:4a:a7:74: 97:11:5e:ea:77:08:3e:c4:ff:a4:1b:ad:e3:d9:df: 4b:62:37:b4:27:98:1b:00:38:d7:61:bf:5a:fa:bb: e2:6a:98:70:65:71:6a:76:ab:2b:ee:5a:89:42:b3: 3f:af:e4:76:9c:8e:c4:61:13:7d:ff:19:0d:48:51: f3:0c:0a:57:95:69:d7:09:e5:71:31:7d:db:42:6d: 00:05:d5:f6:4f:c8:27:09:bd:00:22:ab:93:d4:27: 91:ec:bc:d4:ab:8e:0b:ae:b8:d5:2a:d4:41:36:4e: 7e:64:2f:11:03:04:20:55:3e:df:9b:ae:06:81:66: e3:9c:af:a0:76:f8:a0:a9:98:73:7c:9b:29:a6:d1: 1e:b2:ed:cd:21:ac:53:00:a3:51:ca:c2:41:85:5d: 05:44:94:37:79:86:f0:21:a1:2b:d5:ba:97:2c:23: 56:8b:c2:9e:69:f1:d0:29:bb:59:c3:72:88:32:be: be:dd:29:4a:20:65:44:33:3f:15:78:48:ea:8c:6e: 8c:5e:1d:2b:24:ed:82:fb:93:2b:29:05:a2:78:3d: 2a:2c:6c:16:c9:44:71:82:28:48:f4:34:3e:5c:a9: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:C6:4C:5A:DC:F3:1A:7F:20:7D:FD:87:66:EF:B9:26:A1:79:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a2b648cd-bf14-3770-933c-4ec68d860071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:97:7d:fa:04:1b:fb:85:fa:e9:43:70:70:9e:61:4a:8f:2a: 4f:b3:b9:4c:54:ad:59:c7:b8:17:2d:e8:a8:0e:78:40:74:e3: 05:fe:a6:8e:a5:aa:c0:81:ff:d9:67:b6:06:58:ad:aa:8b:b0: e1:21:c5:08:14:58:ad:cd:44:30:24:ea:0c:19:41:a4:64:0f: 79:ef:16:76:9b:d7:aa:90:40:7d:de:96:27:5c:3a:ec:42:72: fd:a5:7b:95:9d:26:b9:a2:cb:83:c9:e5:0b:c5:64:77:cc:03: 2f:2f:1f:67:10:d2:31:e1:3b:50:cd:85:e3:0f:95:d1:1a:a7: 00:39:fc:00:30:d3:3e:ac:3c:48:f6:c9:fd:d6:b3:48:1c:6a: 11:59:8c:7c:19:ed:63:de:a9:a7:36:d2:dc:d4:e4:0f:40:57: 1c:7c:cd:79:b7:58:a1:b0:45:ea:02:b8:6c:69:62:1f:07:5c: 80:b6:40:74:60:1e:7c:de:99:d5:77:8b:23:79:36:6a:10:42: c4:d6:6b:47:a2:6c:26:ad:4f:a0:a3:e8:81:b4:99:a3:ec:84: 6b:1f:8e:b6:48:12:39:f3:52:dd:cf:4f:35:50:e7:de:f7:06: 5f:80:f0:be:7a:2a:27:29:c1:d2:c3:c3:ae:69:2b:57:da:f5: fc:42:88:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyINnvbE62TD4JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk MDkzOTVjNmQtYjExYS00OTEwLThjNTQtMTE5ZjlmMTU0NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0U7YywX0Hixd3MOyZqFBHvLt+x7z7wABHZK p3SXEV7qdwg+xP+kG63j2d9LYje0J5gbADjXYb9a+rviaphwZXFqdqsr7lqJQrM/ r+R2nI7EYRN9/xkNSFHzDApXlWnXCeVxMX3bQm0ABdX2T8gnCb0AIquT1CeR7LzU q44LrrjVKtRBNk5+ZC8RAwQgVT7fm64GgWbjnK+gdvigqZhzfJspptEesu3NIaxT AKNRysJBhV0FRJQ3eYbwIaEr1bqXLCNWi8KeafHQKbtZw3KIMr6+3SlKIGVEMz8V eEjqjG6MXh0rJO2C+5MrKQWieD0qLGwWyURxgihI9DQ+XKmz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs+xkxa3PMafyB9/Ydm77kmoXkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTJiNjQ4Y2QtYmYxNC0z NzcwLTkzM2MtNGVjNjhkODYwMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+XffoEG/uF+ulDcHCeYUqPKk+zuUxUrVnHuBct6KgOeEB04wX+po6l qsCB/9lntgZYraqLsOEhxQgUWK3NRDAk6gwZQaRkD3nvFnab16qQQH3elidcOuxC cv2le5WdJrmiy4PJ5QvFZHfMAy8vH2cQ0jHhO1DNheMPldEapwA5/AAw0z6sPEj2 yf3Ws0gcahFZjHwZ7WPeqac20tzU5A9AVxx8zXm3WKGwReoCuGxpYh8HXIC2QHRg HnzemdV3iyN5NmoQQsTWa0eibCatT6Cj6IG0maPshGsfjrZIEjnzUt3PTzVQ5973 Bl+A8L56KicpwdLDw65pK1fa9fxCiI0= -----END CERTIFICATE-----Generated at Tue Oct 27 14:54:20 2026 by rpki-client