$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa File: e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa (raw, json) Hash identifier: JzyVQP4VdpBxCIZjcoAp/aHjLQfHTBHhWyyW5aDUi3s= Subject key identifier: D1:8C:69:67:1D:D4:CF:1C:45:31:57:AE:DA:9B:E2:AD:A5:D7:2F:C1 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584D4A8F8EF2EE8F81978510DF00 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 42 IP address blocks: 208.67.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8e:f2:ee:8f:81:97:85:10:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=3bfb1994-6caa-462b-b500-2e4ef36de460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:e0:56:b2:c4:5d:03:cf:cc:e5:2f:73:e7: 2b:e1:aa:d7:6c:66:81:96:3b:64:01:d1:92:70:14: 55:c2:a4:47:3f:a3:27:45:c8:73:0c:c9:7c:4c:a2: 73:1a:a7:95:70:46:17:38:da:2a:a8:fe:71:d1:15: ad:3c:0d:a8:f5:ac:86:80:e1:43:7a:54:4a:fe:0c: 01:f7:4e:7c:b7:b3:90:aa:37:6c:64:cb:4a:97:77: b4:55:7c:0e:ef:60:7d:b6:c1:d3:1b:e4:8a:4f:f5: 14:ba:e3:62:26:fd:eb:c4:cb:dc:a1:88:36:00:38: 6d:ae:47:34:b2:1b:d2:58:6e:fd:e1:a9:d9:d4:7f: 12:34:a8:5f:7e:4a:0d:f3:89:d6:9e:84:2e:6e:60: c9:1b:e6:43:7d:46:29:71:b4:d0:f2:18:02:96:20: 72:b0:84:f8:d3:07:54:b4:2f:59:c9:19:a8:fe:cc: 67:30:8c:c3:cb:80:7a:9c:08:93:b5:81:42:dd:6e: db:d1:12:a0:6e:a4:ac:47:63:4e:ae:4b:af:6a:5f: 0c:86:84:1c:46:3e:c6:68:c5:fb:f4:4a:bb:94:fa: 5e:a5:f7:c9:48:f7:eb:34:7a:a7:ec:41:53:c3:f3: d8:50:c9:6c:e0:92:c5:81:43:16:ad:46:ce:e7:12: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8C:69:67:1D:D4:CF:1C:45:31:57:AE:DA:9B:E2:AD:A5:D7:2F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 208.67.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4f:42:55:f4:0a:fd:80:58:43:6f:84:eb:7f:51:c1:d3:29: cf:d3:74:6e:a1:33:8a:10:ec:43:50:56:31:b6:37:0d:c9:8e: 38:86:65:9f:1e:e4:85:a9:16:af:1d:e9:17:62:f8:27:07:4e: 4f:fc:74:90:79:df:d7:af:96:78:86:61:62:3f:8d:1b:aa:4c: 72:b9:dc:0f:2a:e9:c2:ab:96:b3:15:32:69:b0:fb:0c:f3:79: 53:28:d1:0f:5a:87:dc:f8:5e:e5:aa:03:5c:16:7b:e6:16:4e: a8:77:4e:2e:9c:35:ea:06:38:db:69:72:62:3a:39:9b:c1:d2: b4:ce:f1:03:52:c8:21:26:4b:f3:41:cf:99:9b:49:e9:36:ed: d8:54:a5:15:c5:25:49:80:6a:8c:5e:17:59:78:dc:17:e2:a5: ef:1a:d7:b2:b8:f0:0f:47:55:1c:9c:6f:e4:c1:dc:ee:4d:24: da:71:58:66:32:4d:85:39:4e:3a:4b:58:fc:a0:52:0b:fa:4f: 3e:72:42:e0:ab:4b:cb:ce:fa:0c:b1:97:4f:4f:3a:1e:11:a2: 0b:60:7f:55:3e:39:3b:b9:d7:28:81:4b:3e:8b:6e:b5:03:62: 3c:43:5f:2e:7e:d7:97:5e:9a:63:a2:a4:03:9a:a5:16:cb:02: 4c:27:20:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj47y7o+Bl4UQ3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk M2JmYjE5OTQtNmNhYS00NjJiLWI1MDAtMmU0ZWYzNmRlNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq17gVrLEXQPPzOUvc+cr4arXbGaBljtkAdGS cBRVwqRHP6MnRchzDMl8TKJzGqeVcEYXONoqqP5x0RWtPA2o9ayGgOFDelRK/gwB 9058t7OQqjdsZMtKl3e0VXwO72B9tsHTG+SKT/UUuuNiJv3rxMvcoYg2ADhtrkc0 shvSWG794anZ1H8SNKhffkoN84nWnoQubmDJG+ZDfUYpcbTQ8hgCliBysIT40wdU tC9ZyRmo/sxnMIzDy4B6nAiTtYFC3W7b0RKgbqSsR2NOrkuval8MhoQcRj7GaMX7 9Eq7lPpepffJSPfrNHqn7EFTw/PYUMls4JLFgUMWrUbO5xIkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGMaWcd1M8cRTFXrtqb4q2l1y/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvZThhNGU5ZWYtZTZkZi0z OTJiLWI0MmItZGIzYzVmOGQwYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ENYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJPQlX0Cv2AWENvhOt/UcHTKc/TdG6hM4oQ7ENQVjG2Nw3JjjiGZZ8e 5IWpFq8d6Rdi+CcHTk/8dJB539evlniGYWI/jRuqTHK53A8q6cKrlrMVMmmw+wzz eVMo0Q9ah9z4XuWqA1wWe+YWTqh3Ti6cNeoGONtpcmI6OZvB0rTO8QNSyCEmS/NB z5mbSek27dhUpRXFJUmAaoxeF1l43Bfipe8a17K48A9HVRycb+TB3O5NJNpxWGYy TYU5TjpLWPygUgv6Tz5yQuCrS8vO+gyxl09POh4Rogtgf1U+OTu51yiBSz6LbrUD YjxDXy5+15demmOipAOapRbLAkwnIOI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:15 2026 by rpki-client