$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a23e584e-82da-343a-90cc-4189f4456035.roa File: a23e584e-82da-343a-90cc-4189f4456035.roa (raw, json) Hash identifier: esPRU+c0qgSf2p7s835XtqTITSmUh2pSwvsJ2XfvhKc= Subject key identifier: FF:19:82:74:B2:2F:E0:A3:4F:FC:4A:0B:30:A3:44:E7:1D:A9:99:3F Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F5B97FFD1E6249EA6432DFEE0 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a23e584e-82da-343a-90cc-4189f4456035.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 16740 IP address blocks: 74.126.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:ff:d1:e6:24:9e:a6:43:2d:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=8b91bb92-9d05-4435-bdea-96e8ddcf53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:28:bc:4f:c6:dd:63:49:5b:bd:5c:7e:97: 96:b0:11:f7:be:09:dd:70:66:7e:bd:3f:3e:c9:36: c2:92:9d:37:a6:67:ca:79:53:84:ec:36:28:1b:03: c9:36:bd:98:73:e6:a4:aa:51:0a:02:2a:ef:b5:16: 8f:00:59:e1:3e:2d:b5:16:35:79:97:21:bd:dc:8e: 36:f8:86:21:bd:02:e8:ff:1c:9a:57:c3:fe:d2:43: 89:28:6a:ed:66:cc:3a:24:e5:5c:a1:de:b3:35:60: d8:f5:0a:f6:76:06:7f:ca:64:3a:08:fe:05:ce:9d: ab:72:d6:c5:29:8e:b2:3c:db:ad:01:ce:3d:27:1d: 73:fa:4f:cf:17:3e:7b:3a:45:b1:39:88:c9:be:46: 76:89:c9:76:9e:2a:90:80:d8:00:0d:1f:4d:32:f0: 0f:cb:cf:2a:51:44:c7:ba:02:8b:f4:26:22:a0:6a: 23:db:54:78:a0:a6:f0:76:d3:dd:92:f8:fb:2e:11: d6:5f:3f:6f:8e:17:24:1d:e1:12:3f:29:67:b1:8b: d0:c1:23:b5:06:18:18:d7:c3:40:04:56:6a:e8:cc: 82:29:94:bb:c7:9e:a2:ba:66:90:92:b5:90:1f:ed: f8:3b:12:ef:db:4f:cb:0f:b2:3f:0e:21:a9:70:83: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:82:74:B2:2F:E0:A3:4F:FC:4A:0B:30:A3:44:E7:1D:A9:99:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a23e584e-82da-343a-90cc-4189f4456035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.126.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b5:50:db:c6:68:3c:cb:9e:f4:5e:51:db:7b:8e:14:6a:35: aa:3e:27:12:88:13:fe:94:e6:50:d4:64:f0:6b:05:36:03:94: e0:91:32:16:6f:3a:8e:ec:98:cc:58:2c:f3:99:70:73:59:36: 2d:7b:0f:92:3a:f8:f3:d5:f7:74:7d:0a:08:1c:f9:26:18:77: 31:4b:f3:04:3e:87:6e:a5:bd:ab:44:da:a7:16:9a:3f:cf:19: b7:b1:82:e9:8f:2c:52:3e:00:b2:8c:27:4f:f9:dd:78:1a:3a: ba:74:6a:ae:62:cb:6c:ce:fd:cb:e9:a0:80:5d:03:ab:dd:f6: 34:1d:09:3d:76:00:fd:07:b3:de:7d:4c:a0:0a:07:56:90:da: 3b:d8:d2:05:81:ba:58:b1:f5:97:3e:50:21:99:db:5b:f5:3b: d8:7e:5f:e2:70:2f:d8:01:61:de:66:62:90:76:78:5b:9b:39: 2a:2a:e9:1a:f7:3b:0a:30:47:0e:6f:98:d5:ef:c6:4b:07:bf: b9:f4:37:a6:ba:35:5b:98:06:5d:52:40:a5:bc:37:3c:58:a0: c1:c3:97:98:a5:99:46:c6:f2:13:77:19:d2:3b:c2:9c:29:bc: 06:3b:31:46:ee:2d:b9:80:b6:44:4d:49:09:d2:f0:ff:45:89: 67:22:81:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl//R5iSepkMt/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk OGI5MWJiOTItOWQwNS00NDM1LWJkZWEtOTZlOGRkY2Y1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn78ovE/G3WNJW71cfpeWsBH3vgndcGZ+vT8+ yTbCkp03pmfKeVOE7DYoGwPJNr2Yc+akqlEKAirvtRaPAFnhPi21FjV5lyG93I42 +IYhvQLo/xyaV8P+0kOJKGrtZsw6JOVcod6zNWDY9Qr2dgZ/ymQ6CP4Fzp2rctbF KY6yPNutAc49Jx1z+k/PFz57OkWxOYjJvkZ2icl2niqQgNgADR9NMvAPy88qUUTH ugKL9CYioGoj21R4oKbwdtPdkvj7LhHWXz9vjhckHeESPylnsYvQwSO1BhgY18NA BFZq6MyCKZS7x56iumaQkrWQH+34OxLv20/LD7I/DiGpcIPdaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8ZgnSyL+CjT/xKCzCjROcdqZk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYTIzZTU4NGUtODJkYS0z NDNhLTkwY2MtNDE4OWY0NDU2MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK1UNvGaDzLnvReUdt7jhRqNao+JxKIE/6U5lDUZPBrBTYDlOCRMhZv Oo7smMxYLPOZcHNZNi17D5I6+PPV93R9Cggc+SYYdzFL8wQ+h26lvatE2qcWmj/P GbexgumPLFI+ALKMJ0/53XgaOrp0aq5iy2zO/cvpoIBdA6vd9jQdCT12AP0Hs959 TKAKB1aQ2jvY0gWBulix9Zc+UCGZ21v1O9h+X+JwL9gBYd5mYpB2eFubOSoq6Rr3 OwowRw5vmNXvxksHv7n0N6a6NVuYBl1SQKW8NzxYoMHDl5ilmUbG8hN3GdI7wpwp vAY7MUbuLbmAtkRNSQnS8P9FiWcigVQ= -----END CERTIFICATE-----Generated at Sun Oct 4 20:05:37 2026 by rpki-client