$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa File: a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa (raw, json) Hash identifier: wb4zGy6zNc+YfaDBqqCG1BDxVTuYokbJ6kEatyMhuLs= Subject key identifier: CA:AE:21:95:10:76:45:B3:A5:05:9F:BB:BE:7B:04:36:21:0B:FB:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E640F6CCF765759A5A4572AB0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 834 IP address blocks: 74.2.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:6c:cf:76:57:59:a5:a4:57:2a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=f5db2d24-352c-4e26-9fba-4040bf4168f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:43:bf:9e:6b:3d:77:e7:1e:b3:fa:65:2d: 6d:08:ca:b1:81:6f:cb:c5:79:72:81:7f:6e:5d:dc: 93:71:6f:a8:a4:a0:a3:8d:17:12:94:44:2a:c9:60: 87:ba:be:2b:37:f0:b6:2f:e5:05:2b:b6:07:1c:16: 72:d2:70:60:b3:dc:2d:76:2e:03:ac:b5:24:6b:b6: 33:cf:56:4a:3f:68:1e:ab:4c:24:e4:ff:0e:0b:ee: 44:cc:ae:87:d9:41:f8:df:2a:57:e0:ae:c3:fc:01: 35:39:ce:84:89:96:3b:c3:5d:78:2d:e2:1d:7d:7b: 21:36:07:f1:bc:ae:63:e9:b8:c6:6d:1e:86:10:3b: e8:7f:f7:d7:96:62:ae:e1:88:ee:ea:dd:c8:75:22: 00:0c:df:e8:12:45:cf:52:b3:5e:07:72:c3:aa:73: b8:f0:0e:7b:b3:8f:8a:18:7f:a2:11:d9:f2:dc:bd: 02:fc:34:13:57:f1:d7:ff:a8:a8:fc:fe:b0:a7:f6: a8:73:b2:f8:59:9a:79:1f:a6:42:22:97:01:21:71: 7c:9c:b8:2c:7d:96:8f:33:a0:33:76:aa:ba:24:0c: 0f:f0:30:2d:20:27:7f:31:a0:0c:48:77:fd:41:c8: 02:bd:66:bf:95:3d:1b:8d:a6:59:5d:73:69:bf:16: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:21:95:10:76:45:B3:A5:05:9F:BB:BE:7B:04:36:21:0B:FB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a75d1112-a8d8-3611-aab6-f7265c4a02e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5e:84:13:62:9a:cb:1f:7b:29:f4:c3:0a:0a:48:4c:4a:d1: b0:65:56:2a:7c:7e:f4:c9:5b:3e:78:e2:55:e9:3c:51:3c:57: 62:c6:57:67:14:98:8e:ad:13:70:cc:cb:41:1c:95:bc:fd:34: 5d:18:90:fc:52:3f:bd:cd:fc:bc:58:6f:9b:54:0a:ce:5b:da: 03:64:95:75:98:93:fd:0c:41:ec:d3:13:e6:ed:d7:09:4c:a8: fe:83:ab:d3:e9:b9:19:48:a4:36:b8:4f:45:98:c1:97:0e:86: 60:12:b1:7d:12:f9:7f:04:d0:30:1e:54:bc:6c:a7:31:5e:f1: 0d:f1:84:a1:c0:fe:ff:22:07:df:4f:09:1a:85:0e:6e:5c:4d: 12:4a:01:b2:d1:32:2e:92:38:f7:95:da:7f:bc:2f:67:62:84: 24:4e:ac:c5:ef:92:c5:cd:25:9a:a0:46:75:21:41:e8:75:9b: c2:dc:bb:1d:4d:e9:a2:40:2f:85:ad:e2:36:a3:24:7f:ff:5f: f0:f3:e6:56:a0:6b:c7:e5:5e:c0:e1:84:47:20:b5:3a:8c:76: 33:4b:2f:ee:68:52:3a:6d:71:86:84:e1:23:7a:31:ef:21:dc: 19:76:f6:45:3a:f6:7b:4d:27:3f:8e:cf:3d:5a:3b:c5:69:89: 5e:47:f3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2zPdldZpaRXKrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjVkYjJkMjQtMzUyYy00ZTI2LTlmYmEtNDA0MGJmNDE2OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsZDv55rPXfnHrP6ZS1tCMqxgW/LxXlygX9u XdyTcW+opKCjjRcSlEQqyWCHur4rN/C2L+UFK7YHHBZy0nBgs9wtdi4DrLUka7Yz z1ZKP2geq0wk5P8OC+5EzK6H2UH43ypX4K7D/AE1Oc6EiZY7w114LeIdfXshNgfx vK5j6bjGbR6GEDvof/fXlmKu4Yju6t3IdSIADN/oEkXPUrNeB3LDqnO48A57s4+K GH+iEdny3L0C/DQTV/HX/6io/P6wp/aoc7L4WZp5H6ZCIpcBIXF8nLgsfZaPM6Az dqq6JAwP8DAtICd/MaAMSHf9QcgCvWa/lT0bjaZZXXNpvxay3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMquIZUQdkWzpQWfu757BDYhC/tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTc1ZDExMTItYThkOC0z NjExLWFhYjYtZjcyNjVjNGEwMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdehBNimssfeyn0wwoKSExK0bBlVip8fvTJWz544lXpPFE8V2LGV2cU mI6tE3DMy0Eclbz9NF0YkPxSP73N/LxYb5tUCs5b2gNklXWYk/0MQezTE+bt1wlM qP6Dq9PpuRlIpDa4T0WYwZcOhmASsX0S+X8E0DAeVLxspzFe8Q3xhKHA/v8iB99P CRqFDm5cTRJKAbLRMi6SOPeV2n+8L2dihCROrMXvksXNJZqgRnUhQeh1m8Lcux1N 6aJAL4Wt4jajJH//X/Dz5laga8flXsDhhEcgtTqMdjNLL+5oUjptcYaE4SN6Me8h 3Bl29kU69ntNJz+Ozz1aO8VpiV5H8+k= -----END CERTIFICATE-----Generated at Fri Jul 10 13:53:06 2026 by rpki-client