$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a2b648cd-bf14-3770-933c-4ec68d860071.roa File: a2b648cd-bf14-3770-933c-4ec68d860071.roa (raw, json) Hash identifier: lPaqUWBObKFMUxFeGD/XgUr9WXTOSMVku3JwK/8RiTs= Subject key identifier: 13:A1:43:D1:8E:8C:A7:22:FA:0B:08:4A:7D:21:6E:59:7F:50:8B:5B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F00DCCEB8DACC31303DF1EFF0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a2b648cd-bf14-3770-933c-4ec68d860071.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 13737 IP address blocks: 74.1.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:ce:b8:da:cc:31:30:3d:f1:ef:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=ed442105-157c-4652-bd0c-fabd6b8858df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:be:88:92:6c:cb:4f:09:ea:25:af:bb:7b: b1:63:47:8e:d8:70:74:04:ee:96:0e:5c:92:1f:16: d1:bd:a6:a4:8f:fa:27:ef:42:11:a9:94:19:ee:0c: 28:f2:8d:d6:52:73:1c:2f:7f:03:d6:e5:11:be:18: 6b:65:51:c4:5d:7b:9f:0e:97:23:2a:c8:23:56:de: 1d:58:ab:54:69:08:1d:1f:9b:2a:04:40:bc:d3:8e: 64:34:61:a5:b9:5b:21:b7:15:23:12:a3:2c:2d:8c: 81:ed:35:a8:5b:99:28:57:85:28:7e:62:5b:70:ff: 02:58:98:59:28:82:dc:dc:c8:6f:ea:e8:3c:5f:e5: da:1a:30:df:61:b6:d8:31:09:44:d4:cb:d6:0d:85: 43:6a:db:74:a9:a0:fd:d3:43:97:1c:cc:62:4d:8b: ab:ad:44:6e:d1:64:74:14:c9:fd:6d:62:4f:03:45: 35:ef:88:55:5e:6c:4c:27:b6:ba:70:8c:02:b9:21: b6:09:c0:f6:ee:b0:46:5c:1a:85:cc:2d:59:54:d0: 01:f2:67:d2:e8:a1:58:ea:a8:07:08:25:52:60:a9: 63:9b:59:7a:b5:05:75:87:9e:1e:e2:1d:f1:b8:d8: 5f:fc:bb:d1:22:a7:ce:c0:6c:15:99:b4:11:ab:bf: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A1:43:D1:8E:8C:A7:22:FA:0B:08:4A:7D:21:6E:59:7F:50:8B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a2b648cd-bf14-3770-933c-4ec68d860071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.1.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:39:27:f4:9b:9c:3c:ed:87:48:47:cc:86:76:bd:b2:b2:00: 8d:8e:81:49:c8:75:5c:5d:92:41:f2:91:70:89:2c:39:f3:ba: f8:40:b6:ac:47:d0:21:28:df:b4:c4:cb:6d:3e:11:0a:5f:4e: bc:94:91:b6:56:12:db:3f:61:0d:65:6e:b4:cf:71:b3:a7:e5: 97:ab:8c:97:7c:fc:18:a1:5e:f9:50:aa:e9:c7:c0:94:19:45: e0:b1:07:dc:0b:17:ea:b1:13:fc:53:c5:77:ce:ec:43:f1:fc: 2c:11:9a:a8:f4:aa:db:82:60:c7:97:b4:d5:bc:e9:e8:b0:00: b8:1d:dd:20:cd:27:ae:f4:95:4c:d0:be:b5:c9:78:a9:53:88: db:49:ce:1a:e5:1b:40:4c:0c:20:d3:b9:fd:35:8b:3a:0b:b0: 61:e6:e5:4d:95:40:b3:81:b3:96:ee:4f:75:e4:2a:e8:1f:66: 56:df:cc:54:ee:2a:3b:d1:19:51:f5:55:3e:3c:0f:9b:a6:86: 6b:a4:73:6b:ae:fe:98:d7:dc:96:76:94:3c:83:a6:07:7d:59: 19:41:91:5d:76:6c:35:5b:91:a8:cc:5c:59:0b:ba:2b:f7:f1: 7f:38:f9:fd:b5:5c:b8:ab:47:54:26:d7:99:49:21:b3:80:46: c5:d0:d6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3M642swxMD3x7/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ0NDIxMDUtMTU3Yy00NjUyLWJkMGMtZmFiZDZiODg1OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0a+iJJsy08J6iWvu3uxY0eO2HB0BO6WDlyS HxbRvaakj/on70IRqZQZ7gwo8o3WUnMcL38D1uURvhhrZVHEXXufDpcjKsgjVt4d WKtUaQgdH5sqBEC8045kNGGluVshtxUjEqMsLYyB7TWoW5koV4UofmJbcP8CWJhZ KILc3Mhv6ug8X+XaGjDfYbbYMQlE1MvWDYVDatt0qaD900OXHMxiTYurrURu0WR0 FMn9bWJPA0U174hVXmxMJ7a6cIwCuSG2CcD27rBGXBqFzC1ZVNAB8mfS6KFY6qgH CCVSYKljm1l6tQV1h54e4h3xuNhf/LvRIqfOwGwVmbQRq7/s/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOhQ9GOjKci+gsISn0hbll/UItbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTJiNjQ4Y2QtYmYxNC0z NzcwLTkzM2MtNGVjNjhkODYwMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE5J/SbnDzth0hHzIZ2vbKyAI2OgUnIdVxdkkHykXCJLDnzuvhAtqxH 0CEo37TEy20+EQpfTryUkbZWEts/YQ1lbrTPcbOn5ZerjJd8/BihXvlQqunHwJQZ ReCxB9wLF+qxE/xTxXfO7EPx/CwRmqj0qtuCYMeXtNW86eiwALgd3SDNJ670lUzQ vrXJeKlTiNtJzhrlG0BMDCDTuf01izoLsGHm5U2VQLOBs5buT3XkKugfZlbfzFTu KjvRGVH1VT48D5umhmukc2uu/pjX3JZ2lDyDpgd9WRlBkV12bDVbkajMXFkLuiv3 8X84+f21XLirR1Qm15lJIbOARsXQ1kI= -----END CERTIFICATE-----Generated at Fri Sep 11 09:27:55 2026 by rpki-client