$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa File: fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa (raw, json) Hash identifier: VZsl2angus7sBxtlPX1Z1j3jvSCwO1ltTLpkXZlwan4= Subject key identifier: FD:98:FA:25:AF:C9:6C:9B:64:A1:0E:AE:32:88:A6:BB:AD:5F:BD:AC Certificate issuer: /CN=f32917d5-115d-4c33-8f66-98c515f1b37c Certificate serial: 010D0C9F4328584D3F64DABB99012CFD4BD22280 Authority key identifier: 01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 14556 IP address blocks: 74.114.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:da:bb:99:01:2c:fd:4b:d2:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32917d5-115d-4c33-8f66-98c515f1b37c Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=85d13d6b-b84c-4ccd-a0c3-99f3e52a655e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:12:b3:7f:d9:62:20:24:c3:5b:5e:cd:7e:76: da:c5:a2:b1:dc:ac:3b:21:a3:ee:25:f0:67:47:8b: 98:d5:ac:57:d6:f3:b0:ff:7c:7e:0a:74:60:74:48: e8:c2:90:82:8d:35:e0:1e:03:c0:b6:59:bf:8f:d6: 9c:7b:ad:9e:87:18:f5:ee:a0:c1:95:69:2e:28:e2: b7:b7:8f:4d:4c:db:a9:57:39:1c:39:eb:35:d4:e1: 4a:34:80:5f:18:f8:97:3b:d9:7d:14:e5:8a:4d:cf: 2c:6a:64:dd:9c:bf:38:b8:8b:55:29:00:6f:86:45: c2:be:06:d6:cc:35:63:0d:20:a1:13:b2:6d:04:67: 13:19:d1:3c:64:65:bf:44:db:98:1d:73:ce:7b:bb: 8c:5a:37:f4:69:56:d2:e0:e9:37:f7:79:59:10:62: 71:9a:27:c0:47:eb:ed:49:f5:23:f5:50:c0:7b:9c: 88:4d:7f:73:44:37:80:35:a2:b2:4b:e1:84:94:11: 4c:52:82:c3:af:cd:b4:fc:fc:c2:51:c1:7f:3c:60: ec:a3:03:5b:89:b1:44:23:06:41:ae:35:b8:34:db: bd:14:16:2f:57:d3:d0:86:e1:27:26:41:d2:42:81: 9a:ca:a1:25:53:fe:7c:c7:97:2f:53:50:1b:d9:88: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:98:FA:25:AF:C9:6C:9B:64:A1:0E:AE:32:88:A6:BB:AD:5F:BD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.crl X509v3 Authority Key Identifier: keyid:01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer sbgp-ipAddrBlock: critical IPv4: 74.114.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ed:06:ef:72:d2:28:78:64:15:d2:6f:6c:39:c3:98:a0:cb:00: 19:5a:72:e5:6b:3a:be:4d:6b:fa:b7:f7:e0:28:e9:80:a7:eb: 39:7a:57:2b:1c:91:2c:5b:ab:ba:8d:1c:23:36:33:84:95:c9: e2:ac:86:f0:bf:cc:80:5f:43:ab:8a:45:e3:8f:72:58:39:65: fe:12:f0:8d:61:6b:19:f1:c8:cd:22:a8:b2:84:ad:0d:2f:94: df:d2:d6:f0:d7:10:eb:0f:02:ec:23:f1:1e:80:3c:3c:e4:91: c6:de:4c:f0:83:7e:a0:5d:72:ae:a5:04:f8:b6:96:48:16:bd: 73:cd:cf:a4:16:75:d2:2b:c5:aa:c0:56:90:24:6e:df:93:01: 55:56:02:59:69:39:06:f2:c3:bc:87:42:8f:92:fe:b4:95:56: 26:e8:fa:c2:cc:ab:83:56:3e:0f:df:f4:d1:cd:e0:1a:be:d5: a7:34:b5:ec:76:88:5a:3f:39:36:82:ed:06:42:4d:ba:83:99: bc:6f:fe:a4:ff:b7:b5:76:8e:18:5f:37:c0:d8:fe:78:7a:a4: 5a:9b:cc:64:5d:03:e3:1c:a9:07:da:cc:54:0b:14:0b:1b:6a: 9e:d0:42:ea:a5:26:c9:d4:5e:32:ec:d0:96:19:9f:d8:68:d8: cf:e8:37:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNq7mQEs/UvSIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyOTE3ZDUtMTE1ZC00YzMzLThmNjYtOThjNTE1ZjFi MzdjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ODVkMTNkNmItYjg0Yy00Y2NkLWEwYzMtOTlmM2U1MmE2NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixKzf9liICTDW17NfnbaxaKx3Kw7IaPuJfBn R4uY1axX1vOw/3x+CnRgdEjowpCCjTXgHgPAtlm/j9ace62ehxj17qDBlWkuKOK3 t49NTNupVzkcOes11OFKNIBfGPiXO9l9FOWKTc8samTdnL84uItVKQBvhkXCvgbW zDVjDSChE7JtBGcTGdE8ZGW/RNuYHXPOe7uMWjf0aVbS4Ok393lZEGJxmifAR+vt SfUj9VDAe5yITX9zRDeANaKyS+GElBFMUoLDr820/PzCUcF/PGDsowNbibFEIwZB rjW4NNu9FBYvV9PQhuEnJkHSQoGayqElU/58x5cvU1Ab2YhtKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Y+iWvyWybZKEOrjKIprutX72sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI5 MTdkNS0xMTVkLTRjMzMtOGY2Ni05OGM1MTVmMWIzN2MvZmVjM2IwNjItYjljOS0z OWNmLTk2ZTctNGZlMjdlOTQxNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjMyOTE3ZDUtMTE1ZC00YzMzLThm NjYtOThjNTE1ZjFiMzdjL2YzMjkxN2Q1LTExNWQtNGMzMy04ZjY2LTk4YzUxNWYx YjM3Yy5jcmwwHwYDVR0jBBgwFoAUAXmXE6SvNMEveFKkwMPYUK8q1aIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI5MTdkNS0xMTVkLTRjMzMtOGY2Ni05OGM1 MTVmMWIzN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO0G73LSKHhkFdJvbDnDmKDLABlacuVrOr5Na/q39+Ao6YCn6zl6Vysc kSxbq7qNHCM2M4SVyeKshvC/zIBfQ6uKReOPclg5Zf4S8I1haxnxyM0iqLKErQ0v lN/S1vDXEOsPAuwj8R6APDzkkcbeTPCDfqBdcq6lBPi2lkgWvXPNz6QWddIrxarA VpAkbt+TAVVWAllpOQbyw7yHQo+S/rSVVibo+sLMq4NWPg/f9NHN4Bq+1ac0tex2 iFo/OTaC7QZCTbqDmbxv/qT/t7V2jhhfN8DY/nh6pFqbzGRdA+McqQfazFQLFAsb ap7QQuqlJsnUXjLs0JYZn9ho2M/oN00= -----END CERTIFICATE-----Generated at Thu Mar 26 22:06:49 2026 by rpki-client