$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/dc87daaa-bfb1-3518-8662-008f4680a796.roa File: dc87daaa-bfb1-3518-8662-008f4680a796.roa (raw, json) Hash identifier: kWd/Gmu/r4AqZPFRxyLGSQZwY5jVNG+qgwn9ZEOG/hU= Subject key identifier: F3:F7:95:23:E9:BB:1C:79:BA:39:F8:B9:39:CC:FD:0E:9B:6D:76:72 Certificate issuer: /CN=6cc45f23-c458-4442-ae7b-a87738f24fe8 Certificate serial: 010D0C9F4328584F6D85D33E07F3A6F90E1016C0 Authority key identifier: E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/dc87daaa-bfb1-3518-8662-008f4680a796.roa Signing time: Wed 07 Oct 2026 23:08:12 +0000 ROA not before: Wed 07 Oct 2026 23:08:12 +0000 ROA not after: Wed 06 Jan 2027 00:08:12 +0000 asID: 40511 IP address blocks: 74.113.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:85:d3:3e:07:f3:a6:f9:0e:10:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc45f23-c458-4442-ae7b-a87738f24fe8 Validity Not Before: Oct 7 23:08:12 2026 GMT Not After : Jan 6 00:08:12 2027 GMT Subject: CN=f4dd8b21-7729-45e6-8ab6-b8cb2c2f78b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:82:da:93:a0:cf:6a:85:c2:42:37:14:6a: 42:3b:31:ca:f8:3d:fd:1c:ec:b7:3b:75:5e:d1:89: 66:b6:57:60:ee:c8:67:3d:c0:56:f3:a0:fe:3b:de: 5a:50:17:99:5c:87:12:05:b0:ab:78:2e:52:63:08: 05:97:9b:d6:d4:23:fe:54:b6:f5:54:48:d9:90:2b: 54:a3:e2:96:39:be:fe:d1:8b:0c:c8:01:89:0b:42: d2:23:16:7d:45:65:68:85:92:ec:2d:b4:c6:24:4c: 0a:b8:bb:72:4a:83:c9:eb:b7:c7:3d:a7:10:8d:d4: c9:eb:7c:4e:4b:20:9e:3c:c3:e5:ed:be:e1:f0:c7: 20:c3:f7:a8:d8:87:a5:3e:a0:83:df:2a:35:3a:04: b0:7d:24:ee:75:55:1b:fb:77:f5:bc:f8:fa:f9:7e: 43:d0:33:37:42:73:30:0d:67:4d:83:1d:92:31:dd: 8a:af:f1:34:c2:e6:30:69:bb:ce:4d:5a:c2:d1:02: f8:ba:46:d0:a3:3f:a6:96:9a:22:4e:ac:17:e1:9c: 2c:a3:af:0c:af:91:59:ef:c8:fa:69:66:f6:f5:0d: c6:0b:be:aa:73:c5:a6:fb:13:02:d1:4e:37:55:54: ad:4f:df:2c:a9:5a:e6:b1:18:6d:27:70:5a:a0:10: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F7:95:23:E9:BB:1C:79:BA:39:F8:B9:39:CC:FD:0E:9B:6D:76:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/dc87daaa-bfb1-3518-8662-008f4680a796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl X509v3 Authority Key Identifier: keyid:E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer sbgp-ipAddrBlock: critical IPv4: 74.113.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:67:ec:a5:3f:2e:19:1b:0b:f2:41:97:70:a4:7f:52:6b:cb: 09:2a:0d:5d:7b:da:54:de:e0:4c:69:a6:e5:b8:87:13:50:7e: 01:a4:9c:83:f2:ca:ff:29:e4:1a:14:e3:b6:66:3f:45:7d:39: 0c:67:a5:23:ad:d5:94:fe:3b:17:93:b2:5b:44:6e:7b:50:83: 7c:34:14:82:84:20:fc:89:52:0d:54:f9:f9:40:d9:4a:93:8f: a5:fa:6d:b8:20:53:fc:3b:75:6c:4b:0c:54:d5:78:94:84:7b: b8:6b:e8:25:07:b9:32:05:6b:35:f8:9e:69:a4:c1:7b:d7:9c: 8f:ce:95:ba:34:2d:5e:0f:ad:50:63:3c:44:94:53:06:a5:14: 6b:30:25:31:88:28:3e:c0:18:f6:16:c1:85:fa:3e:a0:92:ef: 7b:22:5f:02:13:42:39:d8:36:10:05:5d:e7:b3:34:b0:8c:50: 3b:cc:a5:d6:11:46:7e:04:87:37:8e:2d:69:d3:59:a8:b4:fa: 9d:6b:3a:1b:34:e3:38:8e:00:d7:c3:32:28:8a:0e:8f:8e:d6: f1:fe:4e:10:6a:b8:28:ef:bd:43:1a:02:a8:68:6f:04:e4:38: c8:49:81:52:5e:d4:1d:24:9f:53:c3:dd:94:72:37:63:ac:c4: 59:f3:ae:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9thdM+B/Om+Q4QFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNjNDVmMjMtYzQ1OC00NDQyLWFlN2ItYTg3NzM4ZjI0 ZmU4MB4XDTI2MTAwNzIzMDgxMloXDTI3MDEwNjAwMDgxMlowLzEtMCsGA1UEAxMk ZjRkZDhiMjEtNzcyOS00NWU2LThhYjYtYjhjYjJjMmY3OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1KC2pOgz2qFwkI3FGpCOzHK+D39HOy3O3Ve 0Ylmtldg7shnPcBW86D+O95aUBeZXIcSBbCreC5SYwgFl5vW1CP+VLb1VEjZkCtU o+KWOb7+0YsMyAGJC0LSIxZ9RWVohZLsLbTGJEwKuLtySoPJ67fHPacQjdTJ63xO SyCePMPl7b7h8Mcgw/eo2IelPqCD3yo1OgSwfSTudVUb+3f1vPj6+X5D0DM3QnMw DWdNgx2SMd2Kr/E0wuYwabvOTVrC0QL4ukbQoz+mlpoiTqwX4Zwso68Mr5FZ78j6 aWb29Q3GC76qc8Wm+xMC0U43VVStT98sqVrmsRhtJ3BaoBAdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP3lSPpuxx5ujn4uTnM/Q6bbXZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82Y2M0 NWYyMy1jNDU4LTQ0NDItYWU3Yi1hODc3MzhmMjRmZTgvZGM4N2RhYWEtYmZiMS0z NTE4LTg2NjItMDA4ZjQ2ODBhNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNmNjNDVmMjMtYzQ1OC00NDQyLWFl N2ItYTg3NzM4ZjI0ZmU4LzZjYzQ1ZjIzLWM0NTgtNDQ0Mi1hZTdiLWE4NzczOGYy NGZlOC5jcmwwHwYDVR0jBBgwFoAU4Jza38+5RPB+gzu9s2jIzHsrZMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82Y2M0NWYyMy1jNDU4LTQ0NDItYWU3Yi1hODc3 MzhmMjRmZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJn7KU/LhkbC/JBl3Ckf1JrywkqDV172lTe4ExppuW4hxNQfgGknIPy yv8p5BoU47ZmP0V9OQxnpSOt1ZT+OxeTsltEbntQg3w0FIKEIPyJUg1U+flA2UqT j6X6bbggU/w7dWxLDFTVeJSEe7hr6CUHuTIFazX4nmmkwXvXnI/Olbo0LV4PrVBj PESUUwalFGswJTGIKD7AGPYWwYX6PqCS73siXwITQjnYNhAFXeezNLCMUDvMpdYR Rn4EhzeOLWnTWai0+p1rOhs04ziOANfDMiiKDo+O1vH+ThBquCjvvUMaAqhobwTk OMhJgVJe1B0kn1PD3ZRyN2OsxFnzrt0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:55:55 2026 by rpki-client