$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5843970c-16f5-3ccc-b327-2f936e7290ee.roa File: 5843970c-16f5-3ccc-b327-2f936e7290ee.roa (raw, json) Hash identifier: veS/N2Epq7aD9r+/qMhShRt1E7mo6/mZfURq2VkKZfU= Subject key identifier: FE:56:C9:CC:14:DD:63:81:EC:18:65:C5:46:68:4B:46:EA:8A:FC:47 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4F08089E2228884E2CAB8580 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5843970c-16f5-3ccc-b327-2f936e7290ee.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16740 IP address blocks: 74.188.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:08:9e:22:28:88:4e:2c:ab:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=f21d0ff8-2d70-4722-94cf-2b8560f9fa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:b4:ae:b4:26:b3:fa:81:cc:f6:88:0e:20: 91:f3:2c:49:5f:c7:98:43:ea:d6:54:4c:2f:ba:2e: 48:4a:b2:cb:0e:4c:80:77:3d:93:6a:90:f0:19:9a: a0:83:f4:dd:ee:81:1a:74:6f:1c:b9:be:8f:19:da: a4:7d:bf:1f:8e:53:dd:bc:5f:32:7a:26:23:09:0d: 38:cc:a7:7c:3f:2d:78:d6:fa:aa:da:9c:7a:ca:8e: 34:66:ef:3a:94:8a:8e:10:8b:9b:2a:af:71:1e:76: f5:4c:8d:8e:60:43:83:16:a0:d2:b2:ea:bf:30:33: cb:6b:6f:16:a7:df:09:10:b9:5f:38:9a:bb:c3:56: 6f:36:2e:a6:d4:5d:d6:7c:ff:17:91:83:70:2a:f1: c3:2f:cd:03:c4:d6:a0:fc:de:de:97:82:58:40:db: 25:47:87:9c:e1:a1:d2:3b:13:f8:40:97:e9:f4:f0: d9:89:67:c6:f2:4d:9c:79:0a:6b:31:96:40:e7:d1: 7b:bd:eb:e4:c9:92:bb:c3:ec:02:fc:ce:42:a6:af: ca:de:70:26:f5:74:df:b0:00:d8:dd:c2:c2:1a:fb: 25:4d:72:dc:2a:73:11:97:c9:48:3e:24:6f:f1:39: 63:0c:ac:60:4c:9b:a8:39:0a:12:a7:b5:41:d8:d9: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:56:C9:CC:14:DD:63:81:EC:18:65:C5:46:68:4B:46:EA:8A:FC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5843970c-16f5-3ccc-b327-2f936e7290ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.188.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:24:94:d6:ed:31:35:39:8e:2f:6b:1e:2c:3f:54:9d:83:e9: b9:80:5b:c2:20:7d:9e:21:71:4e:19:65:b7:ca:94:72:de:2e: 54:f3:d7:ce:95:9f:38:49:f9:b2:60:4c:c2:06:aa:3e:79:13: 21:43:73:ba:60:63:27:77:f5:71:64:08:be:74:21:59:6b:a2: 67:1c:7d:10:ab:a6:c7:72:e0:6f:f7:6d:e4:02:13:57:bd:44: e4:2a:f8:3c:72:88:93:6a:56:23:f4:eb:e5:9f:b9:ef:53:09: db:36:8b:d3:cf:bc:00:19:74:be:db:4a:61:55:29:83:98:47: b7:2d:c4:22:b1:51:07:f9:5a:d3:cb:ab:97:b4:43:56:63:ad: 35:60:3c:b4:13:33:ba:c9:34:a7:d1:4c:3b:67:8d:3f:ee:e2: e7:c3:5c:05:e5:95:b9:a2:bd:37:33:03:82:bf:98:0b:56:7c: d8:ac:ce:06:75:2b:ee:4b:2f:d1:a6:6e:82:2f:6e:f9:fe:09: 4b:ce:fc:5a:8e:08:c5:1e:28:22:41:a1:99:1c:1b:73:5f:9d: f6:e5:f1:e0:a7:6c:9b:0a:a5:90:ad:df:21:cf:17:d5:da:97: 85:3b:e2:63:1e:10:4b:44:43:c2:20:9d:6f:79:3a:bf:e7:92: af:03:72:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAieIiiITiyrhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZjIxZDBmZjgtMmQ3MC00NzIyLTk0Y2YtMmI4NTYwZjlmYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fa0rrQms/qBzPaIDiCR8yxJX8eYQ+rWVEwv ui5ISrLLDkyAdz2TapDwGZqgg/Td7oEadG8cub6PGdqkfb8fjlPdvF8yeiYjCQ04 zKd8Py141vqq2px6yo40Zu86lIqOEIubKq9xHnb1TI2OYEODFqDSsuq/MDPLa28W p98JELlfOJq7w1ZvNi6m1F3WfP8XkYNwKvHDL80DxNag/N7el4JYQNslR4ec4aHS OxP4QJfp9PDZiWfG8k2ceQprMZZA59F7vevkyZK7w+wC/M5Cpq/K3nAm9XTfsADY 3cLCGvslTXLcKnMRl8lIPiRv8TljDKxgTJuoOQoSp7VB2NkBqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5WycwU3WOB7BhlxUZoS0bqivxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNTg0Mzk3MGMtMTZmNS0z Y2NjLWIzMjctMmY5MzZlNzI5MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASrz/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgklNbtMTU5ji9rHiw/VJ2D6bmAW8IgfZ4hcU4ZZbfKlHLeLlTz186V nzhJ+bJgTMIGqj55EyFDc7pgYyd39XFkCL50IVlromccfRCrpsdy4G/3beQCE1e9 ROQq+DxyiJNqViP06+Wfue9TCds2i9PPvAAZdL7bSmFVKYOYR7ctxCKxUQf5WtPL q5e0Q1ZjrTVgPLQTM7rJNKfRTDtnjT/u4ufDXAXllbmivTczA4K/mAtWfNiszgZ1 K+5LL9GmboIvbvn+CUvO/FqOCMUeKCJBoZkcG3Nfnfbl8eCnbJsKpZCt3yHPF9Xa l4U74mMeEEtEQ8IgnW95Or/nkq8DciA= -----END CERTIFICATE-----Generated at Wed Oct 7 23:29:20 2026 by rpki-client