$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa File: cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa (raw, json) Hash identifier: Eox7tfFisi3JoclYizO5gej6jkRn8obOOqZsPRMX+yw= Subject key identifier: D9:07:56:63:AA:34:A7:63:1E:66:2E:17:E7:28:83:A8:18:8D:8E:1C Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584D4A8F8DF991DDB9C1C87BD2C0 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 42 IP address blocks: 68.65.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8d:f9:91:dd:b9:c1:c8:7b:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=8d498537-71b6-47fd-b43b-290935a7b314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:86:0d:db:25:01:01:93:64:24:19:83:2c: c5:4a:69:89:fb:01:7b:04:c8:50:ce:5b:e6:b4:31: 58:af:a1:fa:18:39:88:c5:e9:86:9b:da:36:a4:c6: ff:1c:56:1e:28:f9:99:f6:be:8c:61:90:16:3c:e4: fb:36:d7:eb:aa:07:95:b4:81:01:2c:13:fd:ce:dc: c5:d2:f6:98:35:f3:29:90:ee:a8:ca:78:13:5e:c9: 4b:e9:01:c8:f2:1c:7e:62:61:a1:28:ab:cc:2e:7e: 1c:8e:ae:7e:74:0d:cd:d6:2c:7d:da:81:67:b0:8a: 8d:ba:5b:12:cf:75:99:71:bd:60:3f:bc:eb:8e:bc: c0:13:f6:22:19:2d:6b:35:e4:7c:59:93:8c:a9:51: ca:ce:05:ff:23:b3:40:af:d3:9e:fa:e3:ef:4f:65: e1:f6:6b:a4:7f:74:23:1f:ce:37:71:07:7c:0c:a7: 0a:2a:94:f6:1a:38:0b:4b:e0:6d:09:d0:6d:d6:d7: 21:22:83:80:53:50:c9:77:ec:8f:75:e8:0e:02:03: 49:1e:e6:1b:de:7f:13:9b:b3:90:b2:7c:51:62:a8: c0:1a:83:4b:61:ef:31:e1:65:a1:5c:8c:54:7f:f6: cf:73:7d:ff:5c:28:5d:20:62:0b:49:f9:0f:4f:4e: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:07:56:63:AA:34:A7:63:1E:66:2E:17:E7:28:83:A8:18:8D:8E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 68.65.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:66:81:20:d5:35:dc:b5:9d:62:26:2f:19:4d:b4:50:47:b7: 17:77:ca:50:9d:99:5f:4c:88:e5:2f:b2:2f:91:69:5b:e5:43: b2:5c:cd:1f:dd:ae:d4:54:09:5d:70:9f:e7:2b:58:36:67:17: 87:2b:88:9a:55:f6:d0:00:e8:7f:a0:cf:57:1a:83:bf:fd:ff: 53:85:55:84:99:51:a2:fd:34:22:35:e4:e2:14:66:f5:6a:7c: 19:4d:13:ef:b1:b8:e3:52:19:5b:3c:d4:73:b4:1e:54:02:f4: 90:b2:b1:95:27:8d:1e:ba:e3:34:02:86:0c:d7:3d:f4:fe:25: f1:4f:90:6e:fd:07:5d:b4:99:87:97:68:18:08:fa:ee:03:f4: b6:68:16:71:5d:6f:06:76:03:a9:38:a6:d4:60:7f:fd:8c:27: d9:24:9d:c2:3b:c6:0f:77:9e:bd:40:52:4d:09:c5:e7:2d:6e: 2a:6c:ae:d2:a7:e9:a0:6c:21:81:90:47:31:35:c4:de:3b:89: 4c:cf:20:b3:78:63:25:51:0f:5c:3f:64:f4:26:10:b6:12:2d: cd:5c:f1:9f:ae:6c:c5:b4:59:51:30:85:6c:6b:26:fe:ef:26: ca:f7:5d:41:63:6d:ab:41:19:58:de:a7:c4:90:bb:16:dd:fd: dc:0d:54:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj435kd25wch70sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OGQ0OTg1MzctNzFiNi00N2ZkLWI0M2ItMjkwOTM1YTdiMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0caGDdslAQGTZCQZgyzFSmmJ+wF7BMhQzlvm tDFYr6H6GDmIxemGm9o2pMb/HFYeKPmZ9r6MYZAWPOT7NtfrqgeVtIEBLBP9ztzF 0vaYNfMpkO6oyngTXslL6QHI8hx+YmGhKKvMLn4cjq5+dA3N1ix92oFnsIqNulsS z3WZcb1gP7zrjrzAE/YiGS1rNeR8WZOMqVHKzgX/I7NAr9Oe+uPvT2Xh9mukf3Qj H843cQd8DKcKKpT2GjgLS+BtCdBt1tchIoOAU1DJd+yPdegOAgNJHuYb3n8Tm7OQ snxRYqjAGoNLYe8x4WWhXIxUf/bPc33/XChdIGILSfkPT06XLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkHVmOqNKdjHmYuF+cog6gYjY4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvY2Q4YjkyM2UtODJjYS0z YjkzLWI5MjEtYWMyMDljZWJmOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJmgSDVNdy1nWImLxlNtFBHtxd3ylCdmV9MiOUvsi+RaVvlQ7JczR/d rtRUCV1wn+crWDZnF4criJpV9tAA6H+gz1cag7/9/1OFVYSZUaL9NCI15OIUZvVq fBlNE++xuONSGVs81HO0HlQC9JCysZUnjR664zQChgzXPfT+JfFPkG79B120mYeX aBgI+u4D9LZoFnFdbwZ2A6k4ptRgf/2MJ9kkncI7xg93nr1AUk0JxectbipsrtKn 6aBsIYGQRzE1xN47iUzPILN4YyVRD1w/ZPQmELYSLc1c8Z+ubMW0WVEwhWxrJv7v Jsr3XUFjbatBGVjep8SQuxbd/dwNVBM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:05 2026 by rpki-client