$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa File: ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa (raw, json) Hash identifier: f+YK4VPWG3Hxf9buW2p3kmOG4kspOcRSu+CVNemF/ZU= Subject key identifier: A1:AB:39:26:E4:04:6D:EB:CA:BD:55:CA:FA:B3:71:F3:DA:0E:83:8A Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F5B9804E2128EC270E6BF3B00 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 16740 IP address blocks: 74.126.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:04:e2:12:8e:c2:70:e6:bf:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=e1d8a144-05f6-4014-a7a0-0dc7911c98cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:7f:49:77:16:dc:26:bf:77:a6:bc:18:f5: c1:28:db:ea:ef:9e:1b:cf:d4:49:0b:96:dd:44:bd: 8d:6d:00:9d:b9:78:ad:14:0d:76:71:02:43:5f:41: 1f:e5:57:ec:04:f5:65:0c:cb:10:0c:bd:b4:05:6c: cb:66:86:a0:d1:91:4d:58:1c:c7:d2:2c:bc:bb:ed: f5:29:a0:f9:15:6b:a4:91:b9:59:e0:8e:0e:fd:a6: 2a:e3:da:2d:2c:74:f9:b5:04:26:aa:d5:91:b8:48: ba:c9:14:87:72:20:3f:b8:13:17:a9:78:d0:fb:9b: 17:db:0f:38:8c:03:69:a6:db:ad:55:86:7f:9a:db: 1b:db:fe:34:ea:8a:a2:25:69:e2:78:c9:97:62:f0: d6:e1:88:ce:f4:61:02:a7:68:06:c3:34:09:c2:74: 2c:23:2b:76:51:7b:c1:5e:c4:37:f2:57:16:28:d3: 70:22:7e:9a:0d:8f:66:cb:71:9c:f0:e1:92:2b:1e: 50:ba:11:23:ff:6d:ec:fe:21:24:b7:9d:9f:4c:59: c6:e5:25:1d:a1:52:c0:32:3d:dd:90:a4:a1:05:29: d1:25:18:2b:9a:16:d8:cd:62:ad:1d:ee:be:49:cc: d3:5d:f8:98:79:d4:78:16:30:d4:5d:ef:04:de:21: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AB:39:26:E4:04:6D:EB:CA:BD:55:CA:FA:B3:71:F3:DA:0E:83:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.126.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bb:78:b6:2b:d9:e8:94:6e:a8:44:aa:c6:c6:b0:05:40:be: 2b:3e:24:e4:61:ea:10:de:66:df:a4:5a:eb:81:aa:31:f4:bd: 2f:62:be:54:62:a4:a6:6b:ee:b3:11:02:aa:c9:40:60:f3:e4: e0:56:ab:7e:c2:1f:ef:c5:ba:4c:6e:0c:ab:b0:a2:4e:51:90: a0:f2:51:95:d1:d2:00:df:e9:b1:a9:d7:1a:9e:1a:ea:06:80: 37:9a:51:2b:3c:c1:cd:b5:0d:86:c7:7a:a7:f9:d5:55:f7:66: 6c:7b:fd:da:dd:a7:94:fd:1d:a2:fb:fe:01:a5:cc:c1:06:f7: 69:f7:6c:90:50:da:0e:bd:f1:74:fd:68:69:2b:8d:e2:7e:ab: 86:f6:1a:54:94:c0:d7:23:c1:08:ba:2b:76:98:63:14:23:2b: 46:c6:6a:f7:2a:41:bc:0a:bb:e6:76:a7:82:12:15:eb:3f:81: f0:d7:32:76:d9:98:e1:10:6d:b0:1a:db:5f:65:10:92:8a:1d: 34:00:a8:86:f6:80:20:24:6c:20:9d:3f:c4:d5:9b:b2:2a:7e: 5d:e7:9f:6f:13:fa:65:e6:d2:e7:de:4c:60:26:d4:64:c6:cb: d2:33:f3:e4:51:0e:00:c2:3f:97:62:1f:42:29:8d:3c:1f:02: 1b:97:05:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmATiEo7CcOa/OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTFkOGExNDQtMDVmNi00MDE0LWE3YTAtMGRjNzkxMWM5OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/J/SXcW3Ca/d6a8GPXBKNvq754bz9RJC5bd RL2NbQCduXitFA12cQJDX0Ef5VfsBPVlDMsQDL20BWzLZoag0ZFNWBzH0iy8u+31 KaD5FWukkblZ4I4O/aYq49otLHT5tQQmqtWRuEi6yRSHciA/uBMXqXjQ+5sX2w84 jANpptutVYZ/mtsb2/406oqiJWnieMmXYvDW4YjO9GECp2gGwzQJwnQsIyt2UXvB XsQ38lcWKNNwIn6aDY9my3Gc8OGSKx5QuhEj/23s/iEkt52fTFnG5SUdoVLAMj3d kKShBSnRJRgrmhbYzWKtHe6+SczTXfiYedR4FjDUXe8E3iEqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGrOSbkBG3ryr1VyvqzcfPaDoOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYWNlMzA0YzMtZjI1Mi0z NjRkLWE2ZTMtZjBiNTc4ZGQxYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC7eLYr2eiUbqhEqsbGsAVAvis+JORh6hDeZt+kWuuBqjH0vS9ivlRi pKZr7rMRAqrJQGDz5OBWq37CH+/FukxuDKuwok5RkKDyUZXR0gDf6bGp1xqeGuoG gDeaUSs8wc21DYbHeqf51VX3Zmx7/drdp5T9HaL7/gGlzMEG92n3bJBQ2g698XT9 aGkrjeJ+q4b2GlSUwNcjwQi6K3aYYxQjK0bGavcqQbwKu+Z2p4ISFes/gfDXMnbZ mOEQbbAa219lEJKKHTQAqIb2gCAkbCCdP8TVm7Iqfl3nn28T+mXm0ufeTGAm1GTG y9Iz8+RRDgDCP5diH0IpjTwfAhuXBS0= -----END CERTIFICATE-----Generated at Sun Oct 4 18:30:21 2026 by rpki-client