$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa File: 4a94a50c-a556-39b0-83af-a1d6940051da.roa (raw, json) Hash identifier: PUdbMata07DlR7mbjG3O8+NoeV0OQMOaWt8C5xf3Jo8= Subject key identifier: C8:48:21:92:9C:E5:C2:AD:30:6D:E9:9D:92:EA:10:79:D3:B6:F3:6D Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Certificate serial: 010D0C9F4328584D3DFF98850D1CC62C936BAF80 Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 18491 IP address blocks: 74.220.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:98:85:0d:1c:c6:2c:93:6b:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e43b775f-d54d-41a5-a565-776bd8a20846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:0c:0f:9e:56:9f:77:4c:dc:b6:d1:09:d1: 33:85:45:1b:6a:a7:77:6d:9f:8f:6a:58:33:b4:ec: 72:3f:91:f2:08:32:b3:8e:c2:e6:c4:12:08:1a:40: 40:80:be:bb:a2:3e:2d:c6:64:69:86:fc:d7:95:ee: 8f:50:2b:50:cd:e6:7c:05:05:1c:39:61:65:40:1a: 81:fd:4e:27:55:47:fe:a0:1f:fe:e1:23:de:9d:9b: 6c:23:4c:4e:96:e5:1f:77:bc:a4:0e:64:ae:85:39: d2:76:9a:52:64:08:5c:da:ab:fb:a6:93:e5:99:f0: 73:6f:e6:bf:c7:a2:44:33:51:89:bc:26:a8:5e:03: b0:df:f2:af:96:e8:f6:73:2c:85:f8:c8:e3:3c:88: 1a:fc:0f:c3:bc:31:5f:4b:04:57:e7:d6:92:ef:d2: ee:0b:7f:f0:ef:ab:6f:43:94:3f:72:ac:90:c4:b2: 53:db:3a:f7:49:90:d8:7b:e8:d8:5e:8a:f7:39:8e: 40:bc:58:0a:bd:5f:9f:a5:20:f7:73:15:2c:44:fa: d8:43:a6:ec:bf:a2:d4:9f:5c:2a:8c:e9:eb:1e:11: 8b:8d:51:ae:0c:45:2c:2b:f1:4a:74:a5:80:5a:e7: 52:70:55:ca:89:b1:cf:64:7e:9c:75:22:28:79:7c: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:48:21:92:9C:E5:C2:AD:30:6D:E9:9D:92:EA:10:79:D3:B6:F3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl X509v3 Authority Key Identifier: keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer sbgp-ipAddrBlock: critical IPv4: 74.220.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:71:9e:d5:94:bb:f0:2c:d1:ec:b6:83:83:66:d4:b9:fc:6d: 0c:9a:eb:b0:bf:ba:cc:97:de:96:b0:7f:91:8c:7d:63:14:e2: 48:eb:5f:30:21:c7:5d:76:21:0e:86:f4:98:2c:a5:82:5a:45: 0b:a1:b7:ed:ba:8d:08:1a:62:dd:ec:41:a2:be:c7:98:2e:8f: 5d:89:86:15:82:08:a6:7e:1a:ea:ce:95:02:a2:ea:c4:2e:e3: 24:8d:31:63:53:e0:2e:cc:a5:73:9b:59:b0:8f:c6:74:73:e9: 71:29:ba:89:67:8f:0a:d6:80:29:79:11:db:e0:fb:1d:0c:77: 4b:bb:1f:1c:9a:3f:72:a5:be:3a:98:49:36:be:c1:d8:e3:00: 3a:1a:3c:6c:33:dc:e2:44:ec:39:f6:27:ad:39:23:a9:b7:19: 05:8a:88:50:ed:20:f1:58:74:0e:22:71:dd:14:ca:04:f2:0e: a1:03:2e:4f:da:62:3a:d3:dc:ee:ea:2c:ff:9b:48:13:54:1f: 58:5e:e7:8b:5e:01:d2:6d:7c:21:b1:e2:da:90:95:e4:a9:9e: cf:10:3d:e6:6f:0f:a0:bb:a0:c0:13:16:f4:22:39:f8:e3:90: 1c:12:8b:9f:cb:93:34:06:3a:0e:51:bb:39:e6:10:23:37:5a: 5a:d3:f1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5iFDRzGLJNrr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj MTZiMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTQzYjc3NWYtZDU0ZC00MWE1LWE1NjUtNzc2YmQ4YTIwODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsUMD55Wn3dM3LbRCdEzhUUbaqd3bZ+Palgz tOxyP5HyCDKzjsLmxBIIGkBAgL67oj4txmRphvzXle6PUCtQzeZ8BQUcOWFlQBqB /U4nVUf+oB/+4SPenZtsI0xOluUfd7ykDmSuhTnSdppSZAhc2qv7ppPlmfBzb+a/ x6JEM1GJvCaoXgOw3/Kvluj2cyyF+MjjPIga/A/DvDFfSwRX59aS79LuC3/w76tv Q5Q/cqyQxLJT2zr3SZDYe+jYXor3OY5AvFgKvV+fpSD3cxUsRPrYQ6bsv6LUn1wq jOnrHhGLjVGuDEUsK/FKdKWAWudScFXKibHPZH6cdSIoeXz4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhIIZKc5cKtMG3pnZLqEHnTtvNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvNGE5NGE1MGMtYTU1Ni0z OWIwLTgzYWYtYTFkNjk0MDA1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0 YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlxntWUu/As0ey2g4Nm1Ln8bQya67C/usyX3pawf5GMfWMU4kjrXzAh x112IQ6G9JgspYJaRQuht+26jQgaYt3sQaK+x5guj12JhhWCCKZ+GurOlQKi6sQu 4ySNMWNT4C7MpXObWbCPxnRz6XEpuolnjwrWgCl5Edvg+x0Md0u7HxyaP3KlvjqY STa+wdjjADoaPGwz3OJE7Dn2J605I6m3GQWKiFDtIPFYdA4icd0UygTyDqEDLk/a YjrT3O7qLP+bSBNUH1he54teAdJtfCGx4tqQleSpns8QPeZvD6C7oMATFvQiOfjj kBwSi5/LkzQGOg5RuznmECM3WlrT8YA= -----END CERTIFICATE-----Generated at Fri Mar 27 08:16:01 2026 by rpki-client