$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/cdf16987-b221-3735-abca-41f7aadc25d9.roa File: cdf16987-b221-3735-abca-41f7aadc25d9.roa (raw, json) Hash identifier: PkIQ6e8DaZzJcbOjMKkdaIEX2FiZM0s4E8I3O4LwWs0= Subject key identifier: 18:03:FE:25:3B:22:07:F8:32:79:2F:1F:0C:64:D7:D0:5D:CA:C6:E0 Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Certificate serial: 010D0C9F4328584EE61A4E5B80E56B24C8122D00 Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/cdf16987-b221-3735-abca-41f7aadc25d9.roa Signing time: Thu 20 Aug 2026 10:57:26 +0000 ROA not before: Thu 20 Aug 2026 10:57:26 +0000 ROA not after: Wed 18 Nov 2026 11:57:26 +0000 asID: 20473 IP address blocks: 74.63.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:1a:4e:5b:80:e5:6b:24:c8:12:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Validity Not Before: Aug 20 10:57:26 2026 GMT Not After : Nov 18 11:57:26 2026 GMT Subject: CN=8c6650f6-1271-4ea6-92c4-2a22818d7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:2d:65:db:cf:a2:6f:f7:60:43:e7:5c:66: ce:d9:f2:08:ec:3e:ca:62:2e:5c:df:b4:5c:57:3b: e9:5c:9b:86:9d:88:ca:6d:76:b5:b5:d9:78:d4:ae: d0:b4:4c:1f:62:55:1f:9c:1c:55:cc:8d:ed:56:ca: 01:f5:9d:cc:65:20:3e:cf:03:59:54:ac:d4:88:82: 95:68:19:c4:8d:ad:de:ac:bf:fc:18:b9:e2:56:b8: 15:70:c4:22:50:fe:de:91:d6:0e:4a:6b:c8:3e:8a: 2b:82:67:f4:41:5d:f5:81:d5:7a:6b:a1:e0:77:3c: f7:91:8d:08:38:67:7d:08:4f:85:87:62:19:25:ce: 37:61:91:a4:29:60:d3:17:17:8e:65:52:7f:e0:02: 4b:00:b6:ca:fb:ca:6e:6c:62:97:27:20:04:ea:7f: 2f:aa:fe:cf:74:e9:c5:2e:f0:25:bc:d4:35:66:3a: 66:a8:84:54:54:e1:3c:e2:7f:22:3d:b5:43:23:34: 86:d3:45:06:2a:69:86:43:3d:e0:24:21:c8:7f:e3: 0a:40:eb:fb:60:77:63:7f:ff:02:22:02:cd:97:e9: 60:b3:40:7c:db:6e:1a:7b:94:a5:06:6f:9f:1e:06: 01:80:56:2f:3a:49:ee:58:41:d0:25:87:e6:f5:50: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:03:FE:25:3B:22:07:F8:32:79:2F:1F:0C:64:D7:D0:5D:CA:C6:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/cdf16987-b221-3735-abca-41f7aadc25d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl X509v3 Authority Key Identifier: keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer sbgp-ipAddrBlock: critical IPv4: 74.63.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bc:9b:00:4c:2d:aa:c4:5c:41:d3:e1:88:a3:9f:a6:f4:a3: 3f:65:33:f9:84:85:0e:e5:bb:80:e5:bc:03:2e:48:3e:f6:63: 74:47:9f:72:44:ac:78:6e:c7:0f:68:a0:82:f7:78:ad:73:31: 38:6b:ab:7b:ca:3b:ea:aa:82:32:e3:3d:42:03:89:4c:25:5f: cf:17:b5:7f:6d:90:ba:ba:f0:21:fc:68:04:05:81:e2:f7:65: ff:db:e8:0c:5f:c0:65:af:34:44:c4:df:9b:c0:ee:e6:5d:2b: 2e:ae:33:70:4a:08:aa:28:4d:fc:80:95:99:ab:75:b6:34:59: c1:21:13:83:77:58:1a:88:c6:1b:97:8c:42:d9:09:09:90:ab: 86:35:7b:92:08:41:2f:74:07:00:ab:f1:c4:30:d6:91:cd:b7: ae:c8:8a:39:06:69:cb:68:58:80:4e:47:ce:a7:c5:61:5b:9a: 1b:e2:2c:d8:54:e8:31:0b:7b:69:2a:14:82:a7:70:e7:32:74: 44:0c:73:a3:9c:60:6b:1f:3f:d0:43:10:66:f9:36:96:7e:7c: 91:3e:9f:8c:cc:74:a4:67:2b:96:a8:71:ea:12:16:a3:19:01: 1b:47:a0:d6:17:b2:d3:5c:72:40:d7:1d:5b:97:b9:8d:4d:26: 2d:0b:bb:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mGk5bgOVrJMgSLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwM2JhMDEtODZiZS00ZTUxLWI5NWYtYWY2ZTE3YTc5 NzllMB4XDTI2MDgyMDEwNTcyNloXDTI2MTExODExNTcyNlowLzEtMCsGA1UEAxMk OGM2NjUwZjYtMTI3MS00ZWE2LTkyYzQtMmEyMjgxOGQ3OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCUtZdvPom/3YEPnXGbO2fII7D7KYi5c37Rc VzvpXJuGnYjKbXa1tdl41K7QtEwfYlUfnBxVzI3tVsoB9Z3MZSA+zwNZVKzUiIKV aBnEja3erL/8GLniVrgVcMQiUP7ekdYOSmvIPoorgmf0QV31gdV6a6Hgdzz3kY0I OGd9CE+Fh2IZJc43YZGkKWDTFxeOZVJ/4AJLALbK+8pubGKXJyAE6n8vqv7PdOnF LvAlvNQ1ZjpmqIRUVOE84n8iPbVDIzSG00UGKmmGQz3gJCHIf+MKQOv7YHdjf/8C IgLNl+lgs0B8224ae5SlBm+fHgYBgFYvOknuWEHQJYfm9VBebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgD/iU7Igf4MnkvHwxk19BdysbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAz YmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdhNzk3OWUvY2RmMTY5ODctYjIyMS0z NzM1LWFiY2EtNDFmN2FhZGMyNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2UwM2JhMDEtODZiZS00ZTUxLWI5 NWYtYWY2ZTE3YTc5NzllLzNlMDNiYTAxLTg2YmUtNGU1MS1iOTVmLWFmNmUxN2E3 OTc5ZS5jcmwwHwYDVR0jBBgwFoAU00rEQ/6NmukUUAv2fHtKoOM64sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZl MTdhNzk3OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASj8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC8mwBMLarEXEHT4Yijn6b0oz9lM/mEhQ7lu4DlvAMuSD72Y3RHn3JE rHhuxw9ooIL3eK1zMThrq3vKO+qqgjLjPUIDiUwlX88XtX9tkLq68CH8aAQFgeL3 Zf/b6AxfwGWvNETE35vA7uZdKy6uM3BKCKooTfyAlZmrdbY0WcEhE4N3WBqIxhuX jELZCQmQq4Y1e5IIQS90BwCr8cQw1pHNt67IijkGactoWIBOR86nxWFbmhviLNhU 6DELe2kqFIKncOcydEQMc6OcYGsfP9BDEGb5NpZ+fJE+n4zMdKRnK5aoceoSFqMZ ARtHoNYXstNcckDXHVuXuY1NJi0Lu+U= -----END CERTIFICATE-----Generated at Mon Aug 31 10:23:13 2026 by rpki-client