$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/cdf16987-b221-3735-abca-41f7aadc25d9.roa File: cdf16987-b221-3735-abca-41f7aadc25d9.roa (raw, json) Hash identifier: jx4amGVVnNG44HgJsjROpkDnKGG0/YdPLa9dECd74o0= Subject key identifier: 94:DC:B4:76:4B:EC:46:F1:06:64:49:A2:73:07:62:95:40:89:7B:42 Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Certificate serial: 010D0C9F4328584F8842EC1BA98633F7D9331B00 Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/cdf16987-b221-3735-abca-41f7aadc25d9.roa Signing time: Sat 17 Oct 2026 13:00:12 +0000 ROA not before: Sat 17 Oct 2026 13:00:12 +0000 ROA not after: Fri 15 Jan 2027 14:00:12 +0000 asID: 20473 IP address blocks: 74.63.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:88:42:ec:1b:a9:86:33:f7:d9:33:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Validity Not Before: Oct 17 13:00:12 2026 GMT Not After : Jan 15 14:00:12 2027 GMT Subject: CN=efb44e27-a094-4af4-9794-0a9b612d4b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:ac:67:4b:5b:ea:04:53:5f:db:7c:29:b1: c8:a4:77:5c:4f:25:dd:8c:bb:69:74:59:8b:af:0d: 47:e1:48:2a:f9:bf:2c:f4:64:39:2a:3e:a8:03:f6: 73:a4:77:4a:1e:5d:0b:62:ad:8e:d4:be:db:e4:10: 4f:72:4b:77:fd:3f:b4:4c:9d:2f:ca:34:0a:85:f6: af:56:06:41:1c:1f:c5:00:71:39:f4:70:48:6c:d6: c5:d0:0a:88:71:2a:43:39:e6:93:76:fe:b1:cc:ac: aa:70:e8:b4:d6:a9:83:f5:74:5c:4e:19:9b:0d:35: f2:f6:71:b5:0a:b2:87:71:e9:14:8b:66:8e:a3:88: 69:cb:7d:7a:14:94:ac:cd:b5:c8:82:e1:56:d7:f7: 8d:25:0b:f9:d2:ed:1f:ee:76:27:20:fa:f1:1d:1c: bb:17:c4:9d:1a:e2:b6:5d:29:38:b4:ad:90:37:6f: eb:32:e5:0c:b6:03:83:3c:d9:dd:6c:34:50:c2:b2: 30:65:86:97:b4:51:fb:b7:40:f2:26:ba:93:a1:65: a5:31:aa:32:dd:13:81:c1:34:55:0f:d7:61:e8:3b: 4c:d5:4d:99:79:63:21:93:77:13:be:67:11:45:f3: 9a:4b:d9:07:9a:f0:34:e6:12:dd:a8:b3:88:4a:9d: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:B4:76:4B:EC:46:F1:06:64:49:A2:73:07:62:95:40:89:7B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/cdf16987-b221-3735-abca-41f7aadc25d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl X509v3 Authority Key Identifier: keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer sbgp-ipAddrBlock: critical IPv4: 74.63.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a4:30:4a:fc:11:a9:33:cc:bd:84:7a:bc:d5:53:3c:0f:38: b7:21:b6:69:a3:f9:6a:7b:c3:83:59:5c:a6:d3:5a:25:d4:0c: a5:4b:a5:72:e2:4c:ab:e9:66:e3:bf:b7:61:84:11:c7:6d:99: 9e:b7:66:c9:17:ed:e7:3b:02:2f:1f:6d:11:5a:bc:aa:3d:29: 3d:0b:df:0a:2a:50:fb:b4:40:a5:03:79:04:18:a7:87:8c:3e: 0e:1f:9d:5b:6b:f2:28:09:be:81:e2:f6:d3:72:c0:10:bd:7f: b8:46:f5:7e:11:98:59:64:c7:23:d3:31:3f:6c:53:50:1a:82: a1:26:83:79:48:31:10:d7:76:08:58:50:81:a6:b6:80:fe:a0: d7:77:bb:e3:b1:0c:85:84:69:dc:49:b5:a1:66:31:9e:71:7c: 18:8a:6a:7a:c1:9a:89:aa:51:f9:0c:1e:f7:15:75:ba:4f:4e: f9:d6:74:11:0d:32:b7:e3:ef:88:81:1e:5f:10:c2:2e:0b:d1: 00:78:11:5d:05:d3:d1:e7:20:48:55:a9:e7:ac:53:d5:64:9c: 81:8d:70:00:a8:01:c5:2f:b8:ca:53:87:be:65:2f:3e:8d:d7: 34:02:5b:52:47:a1:2f:27:15:ea:97:e4:f8:1e:ce:2b:12:c4: 49:b0:68:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+IQuwbqYYz99kzGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwM2JhMDEtODZiZS00ZTUxLWI5NWYtYWY2ZTE3YTc5 NzllMB4XDTI2MTAxNzEzMDAxMloXDTI3MDExNTE0MDAxMlowLzEtMCsGA1UEAxMk ZWZiNDRlMjctYTA5NC00YWY0LTk3OTQtMGE5YjYxMmQ0YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBusZ0tb6gRTX9t8KbHIpHdcTyXdjLtpdFmL rw1H4Ugq+b8s9GQ5Kj6oA/ZzpHdKHl0LYq2O1L7b5BBPckt3/T+0TJ0vyjQKhfav VgZBHB/FAHE59HBIbNbF0AqIcSpDOeaTdv6xzKyqcOi01qmD9XRcThmbDTXy9nG1 CrKHcekUi2aOo4hpy316FJSszbXIguFW1/eNJQv50u0f7nYnIPrxHRy7F8SdGuK2 XSk4tK2QN2/rMuUMtgODPNndbDRQwrIwZYaXtFH7t0DyJrqToWWlMaoy3ROBwTRV D9dh6DtM1U2ZeWMhk3cTvmcRRfOaS9kHmvA05hLdqLOISp0PWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTctHZL7EbxBmRJonMHYpVAiXtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAz YmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdhNzk3OWUvY2RmMTY5ODctYjIyMS0z NzM1LWFiY2EtNDFmN2FhZGMyNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2UwM2JhMDEtODZiZS00ZTUxLWI5 NWYtYWY2ZTE3YTc5NzllLzNlMDNiYTAxLTg2YmUtNGU1MS1iOTVmLWFmNmUxN2E3 OTc5ZS5jcmwwHwYDVR0jBBgwFoAU00rEQ/6NmukUUAv2fHtKoOM64sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZl MTdhNzk3OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASj8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+kMEr8EakzzL2EerzVUzwPOLchtmmj+Wp7w4NZXKbTWiXUDKVLpXLi TKvpZuO/t2GEEcdtmZ63ZskX7ec7Ai8fbRFavKo9KT0L3woqUPu0QKUDeQQYp4eM Pg4fnVtr8igJvoHi9tNywBC9f7hG9X4RmFlkxyPTMT9sU1AagqEmg3lIMRDXdghY UIGmtoD+oNd3u+OxDIWEadxJtaFmMZ5xfBiKanrBmomqUfkMHvcVdbpPTvnWdBEN Mrfj74iBHl8Qwi4L0QB4EV0F09HnIEhVqeesU9VknIGNcACoAcUvuMpTh75lLz6N 1zQCW1JHoS8nFeqX5PgezisSxEmwaDE= -----END CERTIFICATE-----Generated at Tue Oct 20 22:11:17 2026 by rpki-client