$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc8c66bf-089b-3401-967a-64175f979583.roa File: cc8c66bf-089b-3401-967a-64175f979583.roa (raw, json) Hash identifier: rxa5NLQR+LfOTvkwL+kUUkyeP/juua141p3dxGf6jPI= Subject key identifier: FA:CD:E7:1E:0D:1E:F2:D8:52:B9:2D:36:B7:54:B2:90:A9:B5:46:C9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ED0477D726A33AD09CD7A11C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc8c66bf-089b-3401-967a-64175f979583.roa Signing time: Wed 12 Aug 2026 15:20:42 +0000 ROA not before: Wed 12 Aug 2026 15:20:42 +0000 ROA not after: Tue 10 Nov 2026 16:20:42 +0000 asID: 197860 IP address blocks: 74.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:47:7d:72:6a:33:ad:09:cd:7a:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 12 15:20:42 2026 GMT Not After : Nov 10 16:20:42 2026 GMT Subject: CN=28a7960b-83be-4151-9965-7a8d3275c125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:56:9e:65:50:56:44:0b:33:21:a2:b0:fd:fd: d9:98:59:ab:dd:47:ed:5d:19:c9:46:f7:0e:93:cb: e2:bf:21:f6:98:6e:21:95:7c:a7:20:e0:eb:7c:33: f0:7d:b2:fa:0c:25:b8:07:a2:77:ca:69:a0:83:42: f6:82:33:15:22:08:39:a4:d5:1c:e8:85:76:e1:8a: ce:76:80:12:4e:e3:df:62:fd:19:2c:98:29:1b:2c: df:c1:48:63:bf:eb:68:ed:ad:ff:4c:43:75:d1:db: b5:d1:4f:de:3b:cd:c8:39:ef:3f:b0:06:39:97:87: b6:e8:4e:19:b0:6d:24:6b:35:66:4d:d8:04:d1:7e: 07:c9:43:f1:53:d5:ff:55:5e:21:18:e5:e5:c5:e7: ae:06:66:af:28:3a:48:c7:e3:6a:8d:c0:b0:15:09: da:4a:b2:4a:63:60:5c:7e:4c:1c:6c:64:cb:3d:1a: 5b:08:a1:eb:a7:b3:76:ba:e4:4e:51:ef:7b:19:f5: a6:a5:39:bc:59:e8:31:0d:25:e4:a8:8d:3d:df:9f: 13:ef:6c:1a:ec:5d:77:f5:ef:32:ff:81:6e:0c:7a: c2:92:88:1b:1d:ce:02:17:43:53:6e:d0:58:49:8a: f2:6e:33:e4:a9:28:08:1d:2b:bd:d5:39:6e:e5:d3: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:E7:1E:0D:1E:F2:D8:52:B9:2D:36:B7:54:B2:90:A9:B5:46:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc8c66bf-089b-3401-967a-64175f979583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:ce:3a:a0:7b:38:ad:b1:b0:97:b9:7d:b9:62:29:49:fa: b4:b1:2c:2b:f4:37:98:6d:46:06:0d:ca:a1:2d:07:b8:84:8b: 94:8a:96:08:b8:43:7e:28:64:89:24:99:f5:d1:24:8a:69:95: 08:6d:8b:01:1d:5a:61:65:12:e6:a0:1f:59:3d:92:96:ac:a9: ec:9a:92:6e:4b:c5:95:04:d2:be:03:04:4c:b0:d2:fa:03:39: 06:01:07:d5:88:ca:98:16:c2:8e:55:65:42:17:ec:5d:20:d0: 3d:45:c7:cc:56:ca:30:6b:55:0a:1a:f4:9f:6f:cb:fc:da:a8: 2a:2c:1b:31:a4:f1:ee:41:60:a5:d5:e4:e2:19:63:c6:4d:87: d7:aa:31:f4:dc:5d:06:35:57:71:65:df:34:2f:b1:2f:62:88: 8f:bc:e7:74:6e:6e:0f:f0:ac:f7:b8:c0:30:54:66:47:c5:ec: 05:50:3e:dc:d5:07:e4:5f:ec:13:1a:ac:4e:96:30:60:12:6f: 35:5e:ee:dd:1e:23:cf:92:91:ff:af:4f:3d:1d:1f:dc:9a:49: f0:68:7e:24:02:11:dd:8a:74:52:9d:fe:94:f4:08:d9:cf:16: 3e:a6:a0:a3:61:83:59:a6:8c:11:61:54:a8:15:8f:68:e0:39: f1:bf:6b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QR31yajOtCc16EcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxMjE1MjA0MloXDTI2MTExMDE2MjA0MlowLzEtMCsGA1UEAxMk MjhhNzk2MGItODNiZS00MTUxLTk5NjUtN2E4ZDMyNzVjMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2laeZVBWRAszIaKw/f3ZmFmr3UftXRnJRvcO k8vivyH2mG4hlXynIODrfDPwfbL6DCW4B6J3ymmgg0L2gjMVIgg5pNUc6IV24YrO doASTuPfYv0ZLJgpGyzfwUhjv+to7a3/TEN10du10U/eO83IOe8/sAY5l4e26E4Z sG0kazVmTdgE0X4HyUPxU9X/VV4hGOXlxeeuBmavKDpIx+NqjcCwFQnaSrJKY2Bc fkwcbGTLPRpbCKHrp7N2uuROUe97GfWmpTm8WegxDSXkqI09358T72wa7F139e8y /4FuDHrCkogbHc4CF0NTbtBYSYrybjPkqSgIHSu91Tlu5dPj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrN5x4NHvLYUrktNrdUspCptUbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2M4YzY2YmYtMDg5Yi0z NDAxLTk2N2EtNjQxNzVmOTc5NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADArzjqgezitsbCXuX25YilJ+rSxLCv0N5htRgYNyqEtB7iEi5SKlgi4 Q34oZIkkmfXRJIpplQhtiwEdWmFlEuagH1k9kpasqeyakm5LxZUE0r4DBEyw0voD OQYBB9WIypgWwo5VZUIX7F0g0D1Fx8xWyjBrVQoa9J9vy/zaqCosGzGk8e5BYKXV 5OIZY8ZNh9eqMfTcXQY1V3Fl3zQvsS9iiI+853Rubg/wrPe4wDBUZkfF7AVQPtzV B+Rf7BMarE6WMGASbzVe7t0eI8+Skf+vTz0dH9yaSfBofiQCEd2KdFKd/pT0CNnP Fj6moKNhg1mmjBFhVKgVj2jgOfG/a0c= -----END CERTIFICATE-----Generated at Wed Aug 26 08:05:57 2026 by rpki-client