$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/90012e42-9e0c-334a-a554-c479066f86a9.roa File: 90012e42-9e0c-334a-a554-c479066f86a9.roa (raw, json) Hash identifier: J8F609JAz6YQtrblDt0aGBlBwjbkbFBjNoWyD/2b41U= Subject key identifier: C1:7D:9D:07:BA:FB:DB:E2:43:DB:D6:38:D3:62:45:2F:4A:09:4D:BD Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584D4A8F8E1A1A3E9712E02E8960 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/90012e42-9e0c-334a-a554-c479066f86a9.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 42 IP address blocks: 199.254.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8e:1a:1a:3e:97:12:e0:2e:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=804b19b6-17d8-4213-89ed-79637c387bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:fe:27:90:95:35:70:47:2f:34:87:e2:a6: 67:9b:65:0b:ff:79:fd:78:15:c5:50:c5:a3:b3:19: cc:8b:df:d2:2d:ba:bf:20:d2:97:83:1f:c1:19:ca: 35:42:18:64:20:16:a1:de:12:24:eb:e2:b0:10:a7: d1:29:a9:2f:f7:54:c3:f5:d3:65:a7:37:e4:1f:3a: a9:4e:44:b1:5e:0c:9c:d4:b6:93:aa:de:2c:ce:18: 96:f6:87:62:6c:a1:a5:eb:4b:c8:54:d2:1c:35:b6: e4:2d:d2:85:c3:16:04:1b:80:9f:cb:01:2b:62:ea: f0:9a:96:8a:bf:23:49:ce:c4:48:92:69:7f:4b:34: ba:5e:15:a0:7f:44:09:6f:5e:5c:19:4b:70:7e:3d: e0:96:7e:6b:71:ca:39:12:a3:f6:36:ee:04:a9:89: 3a:78:92:45:54:4c:62:35:e1:14:8e:01:6e:28:c0: ba:e1:c1:0a:93:b1:d7:60:e0:e6:f9:d2:4d:46:73: 28:5b:3d:7a:f7:43:16:8d:35:98:f1:33:33:e5:93: fd:8d:49:f5:17:3d:c2:0f:a7:df:ba:b9:a6:b9:a0: 41:6e:2b:e2:a7:b5:90:a0:83:09:46:5e:48:83:3c: c3:c2:14:93:ef:07:31:ad:4a:56:6a:fe:a2:3d:bd: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7D:9D:07:BA:FB:DB:E2:43:DB:D6:38:D3:62:45:2F:4A:09:4D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/90012e42-9e0c-334a-a554-c479066f86a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 199.254.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:40:f7:3e:3c:e5:5d:8b:79:4b:82:69:72:4e:ce:80:da:0a: 50:7e:3a:4e:ff:a4:a3:7b:45:65:4d:e2:5d:17:ef:64:ff:ac: 7e:6c:42:1f:08:07:7d:21:a7:a5:4c:c8:83:0e:fc:2a:70:1a: 15:3a:22:18:f9:fe:2f:06:29:da:5e:16:8b:22:c3:af:d8:40: 0d:b3:b2:a1:6e:80:cb:13:54:48:70:39:d4:c0:f6:10:7d:93: 0a:c7:f1:f8:05:a5:a1:5a:ca:1d:06:d3:73:c9:03:91:b2:aa: 29:9a:be:6b:8b:fe:5c:be:2a:3d:a5:21:50:79:6a:12:69:fe: 62:45:01:c7:4c:ac:42:e5:b3:0d:a4:33:26:44:35:4f:61:97: 89:ca:b2:f5:d5:03:be:1e:1e:68:30:ad:e3:c4:b2:4e:b3:0d: 8a:51:0d:8b:1a:3f:dd:74:91:1e:0a:a4:57:83:cf:ee:84:c7: 42:85:d7:70:b4:23:15:6a:fa:61:3f:d9:9c:07:f6:5a:0c:70: f8:39:c3:22:9a:a8:68:73:3b:cf:e9:5e:7d:35:83:85:b0:69: f0:55:5d:a3:20:ca:fc:e3:53:46:82:4d:cf:1d:4a:19:f0:b2: 44:93:8d:02:4d:64:23:e9:40:a6:cd:2d:39:5c:b8:f0:d6:76: 01:8d:eb:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj44aGj6XEuAuiWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ODA0YjE5YjYtMTdkOC00MjEzLTg5ZWQtNzk2MzdjMzg3YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoID+J5CVNXBHLzSH4qZnm2UL/3n9eBXFUMWj sxnMi9/SLbq/INKXgx/BGco1QhhkIBah3hIk6+KwEKfRKakv91TD9dNlpzfkHzqp TkSxXgyc1LaTqt4szhiW9odibKGl60vIVNIcNbbkLdKFwxYEG4CfywErYurwmpaK vyNJzsRIkml/SzS6XhWgf0QJb15cGUtwfj3gln5rcco5EqP2Nu4EqYk6eJJFVExi NeEUjgFuKMC64cEKk7HXYODm+dJNRnMoWz1690MWjTWY8TMz5ZP9jUn1Fz3CD6ff urmmuaBBbivip7WQoIMJRl5IgzzDwhST7wcxrUpWav6iPb0A4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF9nQe6+9viQ9vWONNiRS9KCU29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvOTAwMTJlNDItOWUwYy0z MzRhLWE1NTQtYzQ3OTA2NmY4NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/6rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBA9z485V2LeUuCaXJOzoDaClB+Ok7/pKN7RWVN4l0X72T/rH5sQh8I B30hp6VMyIMO/CpwGhU6Ihj5/i8GKdpeFosiw6/YQA2zsqFugMsTVEhwOdTA9hB9 kwrH8fgFpaFayh0G03PJA5GyqimavmuL/ly+Kj2lIVB5ahJp/mJFAcdMrELlsw2k MyZENU9hl4nKsvXVA74eHmgwrePEsk6zDYpRDYsaP910kR4KpFeDz+6Ex0KF13C0 IxVq+mE/2ZwH9loMcPg5wyKaqGhzO8/pXn01g4WwafBVXaMgyvzjU0aCTc8dShnw skSTjQJNZCPpQKbNLTlcuPDWdgGN66E= -----END CERTIFICATE-----Generated at Thu Mar 26 18:52:31 2026 by rpki-client