$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a2867aa4-e978-34d1-b2e6-666918a28dde.roa File: a2867aa4-e978-34d1-b2e6-666918a28dde.roa (raw, json) Hash identifier: Ht5oUYZco4+8hvEBmc7cclhXgsTixaqnL+FGRYx4ino= Subject key identifier: BC:96:CF:C5:DA:55:3B:96:44:59:49:DB:52:DD:C0:B2:F0:D0:59:2C Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F5B97FEF20731775834FC5540 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a2867aa4-e978-34d1-b2e6-666918a28dde.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 16740 IP address blocks: 74.126.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fe:f2:07:31:77:58:34:fc:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=a81b1c48-85cc-467c-a65c-c3842c52f7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:30:61:ba:84:8b:bc:2e:f5:10:09:81:b2: 4c:a9:50:47:e2:8f:83:9a:73:35:03:c4:0d:c9:c2: de:6f:51:e6:fd:6b:80:53:45:c0:5c:d9:39:c6:13: c9:d8:ad:79:e1:86:fb:df:d2:ac:b0:3c:bf:a9:75: 8e:16:97:f9:05:f0:60:66:b4:d7:1f:88:4a:94:80: 70:5c:6e:b3:22:6a:89:f0:7a:5c:db:20:b1:34:2f: e4:f1:0a:14:b7:8c:80:c5:cd:62:24:08:fb:99:61: ff:57:51:be:56:d3:ac:3b:21:8d:24:66:4f:0b:5b: 2b:9e:6b:64:b2:fa:80:49:78:54:db:84:26:ef:84: 4b:68:b9:3c:9d:cb:08:11:ee:d5:9f:88:5a:76:48: 81:a6:80:b7:a4:5b:9a:4c:e2:b2:84:9c:37:15:f7: 6b:72:b4:c1:18:41:1e:d9:46:b9:1b:a9:de:a4:4a: 0d:d1:44:72:64:66:6b:e5:64:ac:10:26:78:0c:43: 50:3b:5c:61:62:44:b2:c6:b2:08:71:e6:0d:ed:3e: e2:0f:2f:76:19:56:dc:3a:73:42:05:50:8d:b6:7c: b9:cd:7a:53:78:87:f3:16:a6:47:ab:51:82:ca:e1: 25:24:cb:50:ba:4b:29:04:46:70:ef:7a:d3:5e:2d: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:CF:C5:DA:55:3B:96:44:59:49:DB:52:DD:C0:B2:F0:D0:59:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a2867aa4-e978-34d1-b2e6-666918a28dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.126.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:62:02:2e:cf:57:9f:32:b9:04:7a:23:bc:ff:7c:77:c0:ba: d4:77:b8:ba:ca:4c:0c:e8:fc:88:b0:8c:29:96:c1:78:68:b2: 46:ec:14:8c:ac:a8:1b:fc:f5:46:ab:ba:c1:e2:5d:8a:87:08: 72:4b:86:08:c3:45:8f:2b:04:2e:3a:11:b0:73:19:e0:1a:0f: bf:9e:4d:ff:b8:1c:af:15:7c:70:8f:64:c0:80:50:e9:28:6c: 0b:29:1c:b8:bb:62:6e:14:04:46:27:54:4e:c5:a9:28:d3:4e: 9e:e4:86:a3:c5:22:6b:03:2d:ba:ce:7e:32:7a:34:fc:ca:cc: 0a:b9:2b:2d:f5:8f:c5:50:40:2b:c3:03:36:bb:f6:62:60:a6: 3d:10:9f:fd:23:42:9d:3e:bc:99:db:96:f1:21:9a:64:12:e2: 69:a2:c4:ae:ad:ae:54:5e:f6:05:02:7a:03:3f:2f:d4:46:1a: 06:68:33:bd:fb:1d:05:fb:29:98:50:89:31:c9:cc:ac:fb:00: c4:24:c0:e4:1d:4d:48:59:bd:40:bf:54:5c:70:7b:da:25:6c: 17:49:0e:f6:cc:83:a3:85:11:56:68:ac:95:f2:6b:d4:59:59: 62:75:df:5b:02:a6:ba:68:45:2f:1c:62:4f:ed:15:2a:d6:7c: f5:c1:4a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/7yBzF3WDT8VUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk YTgxYjFjNDgtODVjYy00NjdjLWE2NWMtYzM4NDJjNTJmN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4wYbqEi7wu9RAJgbJMqVBH4o+DmnM1A8QN ycLeb1Hm/WuAU0XAXNk5xhPJ2K154Yb739KssDy/qXWOFpf5BfBgZrTXH4hKlIBw XG6zImqJ8Hpc2yCxNC/k8QoUt4yAxc1iJAj7mWH/V1G+VtOsOyGNJGZPC1srnmtk svqASXhU24Qm74RLaLk8ncsIEe7Vn4hadkiBpoC3pFuaTOKyhJw3FfdrcrTBGEEe 2Ua5G6nepEoN0URyZGZr5WSsECZ4DENQO1xhYkSyxrIIceYN7T7iDy92GVbcOnNC BVCNtny5zXpTeIfzFqZHq1GCyuElJMtQukspBEZw73rTXi24twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyWz8XaVTuWRFlJ21LdwLLw0FksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYTI4NjdhYTQtZTk3OC0z NGQxLWIyZTYtNjY2OTE4YTI4ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJiAi7PV58yuQR6I7z/fHfAutR3uLrKTAzo/IiwjCmWwXhoskbsFIys qBv89UarusHiXYqHCHJLhgjDRY8rBC46EbBzGeAaD7+eTf+4HK8VfHCPZMCAUOko bAspHLi7Ym4UBEYnVE7FqSjTTp7khqPFImsDLbrOfjJ6NPzKzAq5Ky31j8VQQCvD Aza79mJgpj0Qn/0jQp0+vJnblvEhmmQS4mmixK6trlRe9gUCegM/L9RGGgZoM737 HQX7KZhQiTHJzKz7AMQkwOQdTUhZvUC/VFxwe9olbBdJDvbMg6OFEVZorJXya9RZ WWJ131sCprpoRS8cYk/tFSrWfPXBSkE= -----END CERTIFICATE-----Generated at Mon Oct 5 15:22:44 2026 by rpki-client