$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa File: 08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa (raw, json) Hash identifier: lWO4a9VhWrbm4Pv0dQm2JsC+wCEYkuzbpcN3HRNyFQ0= Subject key identifier: B9:27:88:B2:FD:D4:F3:53:FF:34:ED:37:40:95:28:E7:95:44:48:25 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584D4A8F8D63FDD5196CD8D42800 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 42 IP address blocks: 67.21.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8d:63:fd:d5:19:6c:d8:d4:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=c9d71ca7-cff2-4529-be0e-f041e6854726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:0f:4f:f8:90:3f:ac:d1:6c:67:d8:ff:8e: 67:a4:9b:25:2c:58:aa:97:e9:71:14:fc:cc:c3:b7: 5c:1a:90:be:e9:d9:54:4b:71:8a:aa:4d:17:a1:df: c4:6b:4b:7e:de:7f:d9:2d:ad:57:d8:8f:06:02:9b: 1c:e6:e7:38:47:32:0d:c2:4d:a0:bd:d8:14:96:d4: 87:08:65:2f:08:0e:9c:59:4a:3a:2a:4a:4f:84:d0: 9b:21:14:ee:03:9a:1c:82:b4:da:62:62:35:41:d2: b8:80:54:14:6c:29:0b:ec:3c:04:9d:a4:af:56:27: c7:2b:68:5b:cc:8e:a5:7b:c4:3d:f0:83:ec:2d:2f: 65:11:cf:39:98:d0:76:47:0d:d8:97:e0:c6:33:1e: 29:89:f5:36:ab:88:05:e1:82:b4:70:0b:99:78:25: a9:be:e7:6f:89:61:9e:d1:c6:4e:2a:ff:9d:b0:36: 49:ff:dc:9a:7c:c7:b3:d8:b1:0c:44:38:ae:a0:63: 19:ae:0e:b1:49:24:cd:6e:fe:1a:10:23:14:59:9d: a8:ed:8f:78:c1:f2:54:6a:55:e0:57:00:8e:05:3d: 52:c7:c9:21:45:d4:1a:54:88:c9:22:44:65:79:a2: e8:f1:b6:61:58:a0:67:cc:13:4d:3c:33:2d:91:ca: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:88:B2:FD:D4:F3:53:FF:34:ED:37:40:95:28:E7:95:44:48:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 67.21.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:81:c4:0a:a1:57:a7:1a:45:c3:90:c7:27:dc:da:c5:33:5e: ad:19:26:7d:a9:fa:e5:ac:cd:1f:7c:1a:37:a5:b0:1a:0b:c5: 43:ff:fa:25:66:08:39:be:81:e6:ae:09:85:e4:bd:e7:b2:ad: 44:b5:32:02:49:79:45:ad:96:ab:eb:d1:de:0b:05:9c:a3:11: d5:c3:97:6a:ac:a3:d3:3d:d5:10:62:a8:41:9e:d6:1d:79:d9: 64:e2:1a:2e:25:7e:5a:2d:8c:e6:04:15:60:5f:25:9f:f6:84: 85:a7:72:97:5f:7e:77:ea:5c:f9:79:f7:81:29:47:37:d5:6c: 47:24:7f:d3:fe:3c:d2:02:00:a0:c3:5f:ce:6f:6c:2b:f5:c2: c6:fa:71:ae:a8:e1:3d:54:5f:99:c2:f4:03:eb:52:55:1b:fa: 13:6e:96:5d:77:fe:9f:a8:1e:4f:25:81:0f:f9:28:f1:71:86: b7:e1:cd:00:62:aa:9c:ea:cc:aa:51:1f:a4:43:91:5b:78:12: b7:33:ec:1b:87:ce:3e:49:fd:e8:f8:2c:af:38:12:6e:ae:ce: fb:1f:86:51:6a:a4:da:aa:f1:cd:06:fe:f5:70:da:08:b0:63: 26:57:e0:2e:7e:45:d0:be:ff:23:e1:cd:d8:aa:47:b7:7b:88: 28:7e:1c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj41j/dUZbNjUKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YzlkNzFjYTctY2ZmMi00NTI5LWJlMGUtZjA0MWU2ODU0NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3QPT/iQP6zRbGfY/45npJslLFiql+lxFPzM w7dcGpC+6dlUS3GKqk0Xod/Ea0t+3n/ZLa1X2I8GApsc5uc4RzINwk2gvdgUltSH CGUvCA6cWUo6KkpPhNCbIRTuA5ocgrTaYmI1QdK4gFQUbCkL7DwEnaSvVifHK2hb zI6le8Q98IPsLS9lEc85mNB2Rw3Yl+DGMx4pifU2q4gF4YK0cAuZeCWpvudviWGe 0cZOKv+dsDZJ/9yafMez2LEMRDiuoGMZrg6xSSTNbv4aECMUWZ2o7Y94wfJUalXg VwCOBT1Sx8khRdQaVIjJIkRleaLo8bZhWKBnzBNNPDMtkcrNbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkniLL91PNT/zTtN0CVKOeVREglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMDhjZmJjOGYtYWQ0Yi0z YmRlLTkwMjktMTE2NGYwYjUzMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaBxAqhV6caRcOQxyfc2sUzXq0ZJn2p+uWszR98GjelsBoLxUP/+iVm CDm+geauCYXkveeyrUS1MgJJeUWtlqvr0d4LBZyjEdXDl2qso9M91RBiqEGe1h15 2WTiGi4lflotjOYEFWBfJZ/2hIWncpdffnfqXPl594EpRzfVbEckf9P+PNICAKDD X85vbCv1wsb6ca6o4T1UX5nC9APrUlUb+hNull13/p+oHk8lgQ/5KPFxhrfhzQBi qpzqzKpRH6RDkVt4Ercz7BuHzj5J/ej4LK84Em6uzvsfhlFqpNqq8c0G/vVw2giw YyZX4C5+RdC+/yPhzdiqR7d7iCh+HDg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:13:11 2026 by rpki-client