$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/052a04b3-56f9-34c1-9936-bbc1fefa2c6b.roa File: 052a04b3-56f9-34c1-9936-bbc1fefa2c6b.roa (raw, json) Hash identifier: XIStJ+Ut8uBGvokkjF2BnZIWGVnJKJH015EMCeTepok= Subject key identifier: 4A:5D:FB:9D:E4:34:6B:6A:BD:8F:22:2B:BE:AF:4D:A4:A9:6D:47:7A Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F5B98000D02B3C436A43E4300 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/052a04b3-56f9-34c1-9936-bbc1fefa2c6b.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 16740 IP address blocks: 74.126.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:00:0d:02:b3:c4:36:a4:3e:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=dc8f28d7-a960-4804-9259-fc2596ad5824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:fa:5e:6f:5e:8c:38:52:28:69:cf:e6:2e: d4:39:b3:63:87:61:a8:ee:65:15:7e:39:e3:4e:10: 6a:d9:96:1e:a6:e6:d5:ae:18:e1:de:f6:fe:96:3f: 86:3f:b7:ef:b2:f0:e0:0a:c1:3c:ae:ae:ae:09:84: 20:59:8b:4b:c7:9c:85:b5:ec:4f:33:df:be:31:30: a3:fc:d3:56:79:ef:01:90:4a:00:3b:bd:fe:be:b1: 88:87:e2:43:5a:46:45:71:06:70:ce:6b:4e:ba:e9: 48:e4:ab:04:83:5e:51:1a:39:4a:fc:43:21:b5:9a: 3f:92:a6:09:0e:ac:e2:e0:6c:0d:af:65:9c:6a:f5: 90:2f:d2:e0:52:46:02:5c:7e:52:57:94:d1:ed:92: 38:8e:dc:78:75:0d:ea:ad:9b:75:ec:55:13:5d:12: c2:27:83:a3:28:79:08:55:10:7f:91:ca:21:03:73: 9b:36:ea:15:fc:50:68:d7:0a:2a:fa:c6:31:bc:18: 75:04:8b:4f:c1:06:eb:58:e5:19:00:16:a4:85:9a: 01:7a:ae:af:a7:b0:f9:05:90:dd:6e:00:7b:0b:02: 7c:07:ce:f1:cf:2c:59:7c:0a:45:ba:09:a1:d3:81: 38:e1:c1:f1:7c:32:e1:af:11:a3:1e:7f:67:18:9b: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5D:FB:9D:E4:34:6B:6A:BD:8F:22:2B:BE:AF:4D:A4:A9:6D:47:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/052a04b3-56f9-34c1-9936-bbc1fefa2c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.126.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f8:88:8c:be:6a:79:a1:1a:2c:89:6c:94:11:28:81:26:e6: 7a:bb:cc:05:bd:2a:de:8d:02:dc:92:e8:5a:73:8b:31:cd:6b: ec:fe:76:fe:3d:a8:08:2a:c2:57:28:7b:44:56:54:d7:2c:53: cb:83:d1:79:81:d6:d4:69:44:4f:fd:3f:43:70:c8:ad:42:73: 12:a1:77:73:f8:2f:66:8e:b2:93:6b:c6:78:e7:a8:96:58:99: 00:14:59:21:58:4b:26:06:9d:58:72:e5:7f:73:f4:0e:d3:28: 16:75:0a:26:a3:38:8d:55:d7:43:d7:14:1e:9b:98:47:03:35: aa:9f:94:c4:2a:b7:2a:96:1c:38:98:b9:d4:b7:e4:3f:cd:c3: 56:eb:ab:c7:31:b1:a8:dc:b9:be:62:85:2f:10:a7:31:6c:20: 70:23:62:e2:8e:de:48:40:2e:a2:c0:e6:a2:7a:4a:f0:3e:59: bb:3c:58:9e:22:d1:8b:80:da:8f:96:87:86:db:69:2c:c1:da: 01:85:98:9f:b1:61:c9:d1:95:d4:e2:30:60:19:fd:09:04:d8: 29:f1:32:a4:a7:1b:3e:a0:61:00:70:70:bb:a3:3e:61:d7:6b: 81:3e:09:a4:b8:50:67:02:4b:9d:72:05:d9:50:1b:d9:6b:96: 7d:51:b5:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmAANArPENqQ+QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ZGM4ZjI4ZDctYTk2MC00ODA0LTkyNTktZmMyNTk2YWQ1ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxef6Xm9ejDhSKGnP5i7UObNjh2Go7mUVfjnj ThBq2ZYepubVrhjh3vb+lj+GP7fvsvDgCsE8rq6uCYQgWYtLx5yFtexPM9++MTCj /NNWee8BkEoAO73+vrGIh+JDWkZFcQZwzmtOuulI5KsEg15RGjlK/EMhtZo/kqYJ Dqzi4GwNr2WcavWQL9LgUkYCXH5SV5TR7ZI4jtx4dQ3qrZt17FUTXRLCJ4OjKHkI VRB/kcohA3ObNuoV/FBo1woq+sYxvBh1BItPwQbrWOUZABakhZoBeq6vp7D5BZDd bgB7CwJ8B87xzyxZfApFugmh04E44cHxfDLhrxGjHn9nGJudxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpd+53kNGtqvY8iK76vTaSpbUd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMDUyYTA0YjMtNTZmOS0z NGMxLTk5MzYtYmJjMWZlZmEyYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT4iIy+anmhGiyJbJQRKIEm5nq7zAW9Kt6NAtyS6FpzizHNa+z+dv49 qAgqwlcoe0RWVNcsU8uD0XmB1tRpRE/9P0NwyK1CcxKhd3P4L2aOspNrxnjnqJZY mQAUWSFYSyYGnVhy5X9z9A7TKBZ1CiajOI1V10PXFB6bmEcDNaqflMQqtyqWHDiY udS35D/Nw1brq8cxsajcub5ihS8QpzFsIHAjYuKO3khALqLA5qJ6SvA+Wbs8WJ4i 0YuA2o+Wh4bbaSzB2gGFmJ+xYcnRldTiMGAZ/QkE2CnxMqSnGz6gYQBwcLujPmHX a4E+CaS4UGcCS51yBdlQG9lrln1RtSQ= -----END CERTIFICATE-----Generated at Sun Oct 4 19:59:52 2026 by rpki-client