$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ac9010c9-c091-397c-b40d-fbeba657711f.roa File: ac9010c9-c091-397c-b40d-fbeba657711f.roa (raw, json) Hash identifier: ClcbHosMEit0ju1l9+tRlkuoO7zWeWWnnkBP0eND1eA= Subject key identifier: A6:6F:15:D5:DE:49:1E:6C:CA:2E:FA:47:EC:67:C1:CC:54:12:BC:F9 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584D2A74C43A4937F6CF6BA92680 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ac9010c9-c091-397c-b40d-fbeba657711f.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 398420 IP address blocks: 74.115.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c4:3a:49:37:f6:cf:6b:a9:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=21b3c2fe-e074-4a7f-bc0d-7fb7542521a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:60:82:e4:70:81:90:6e:0e:0b:d0:ca:f1: 8d:17:66:c1:30:ee:df:2a:30:af:6c:6d:e4:56:58: 4f:16:8a:3c:30:c8:f7:ea:c4:8c:82:53:f8:10:b4: 4e:f3:a0:65:7f:94:11:e9:b4:18:f7:8b:83:25:8a: dc:93:fb:2f:c5:44:0f:4f:3a:77:49:7d:35:43:23: f5:58:7f:f0:ae:0b:0e:7f:52:9f:3b:96:1d:13:ac: d6:2b:fc:a6:6b:91:b6:87:12:0e:c7:a5:88:3f:54: 59:80:ce:0f:19:80:a7:b4:58:81:39:0e:67:e9:9a: 5d:f5:6d:1a:31:7c:84:67:61:d2:b3:b8:2a:f4:20: 14:8c:78:4e:89:61:1a:ab:e0:7f:01:e6:59:e6:58: ab:d1:23:28:14:06:bf:38:12:05:f6:1a:87:1b:83: d1:5a:b2:df:18:77:e1:7a:e7:dd:ad:36:c2:f9:bf: 5c:d8:66:cb:ae:26:3b:c7:ef:6f:13:b9:87:20:77: 0b:4b:c6:6a:cb:0f:50:eb:6f:c6:d5:3d:fa:9f:15: e8:d1:15:58:15:6f:c8:00:6f:3f:b8:bc:1e:fe:75: bf:95:e1:18:af:dd:50:1a:96:7d:c3:7c:68:db:18: 6a:65:e9:7e:63:18:7a:99:6d:0f:4c:54:bb:e1:f1: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6F:15:D5:DE:49:1E:6C:CA:2E:FA:47:EC:67:C1:CC:54:12:BC:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ac9010c9-c091-397c-b40d-fbeba657711f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a6:82:6f:b0:1b:a8:11:76:77:8a:96:28:ef:18:ef:62:97: 7e:f3:81:07:db:89:b9:1b:0e:4b:f9:dc:b0:9e:f7:af:0b:83: 85:d2:e7:d1:38:a9:5a:fd:61:8c:8a:4b:88:c7:42:f8:64:12: 49:5a:28:bd:f9:98:d5:d9:63:35:8c:59:a2:03:c8:23:e4:25: f9:ad:89:fa:7a:aa:c5:3b:74:12:59:46:8b:14:2e:42:6b:31: c7:2f:14:4f:b3:d6:fb:e6:75:e2:4a:8a:52:ec:1e:04:10:6e: f0:26:6c:6f:07:66:fd:b0:22:d7:2a:ab:96:f9:27:30:4e:02: c2:86:c1:ae:27:f3:c0:9f:fc:bc:ac:36:5a:a3:6f:e0:24:41: 36:b8:7d:1c:2e:4a:a0:9b:0b:1a:ec:da:66:b8:93:08:ca:21: 15:52:00:f0:b0:60:c9:fe:e7:d7:68:f2:60:fa:8a:68:21:b8: c8:35:16:ef:d6:72:47:a4:19:b6:43:65:1d:18:25:9b:bf:24: ca:22:1d:93:c8:14:b2:d6:02:73:dd:60:cf:c1:9a:d8:3c:4f: 4a:c8:74:06:4c:29:6f:6d:13:3d:fa:9d:d5:b7:42:b1:57:60: d0:fa:f7:3d:4b:9b:19:f6:38:59:3d:3d:07:08:f7:90:5e:a0: 4b:4c:a6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMQ6STf2z2upJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjFiM2MyZmUtZTA3NC00YTdmLWJjMGQtN2ZiNzU0MjUyMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeVgguRwgZBuDgvQyvGNF2bBMO7fKjCvbG3k VlhPFoo8MMj36sSMglP4ELRO86Blf5QR6bQY94uDJYrck/svxUQPTzp3SX01QyP1 WH/wrgsOf1KfO5YdE6zWK/yma5G2hxIOx6WIP1RZgM4PGYCntFiBOQ5n6Zpd9W0a MXyEZ2HSs7gq9CAUjHhOiWEaq+B/AeZZ5lir0SMoFAa/OBIF9hqHG4PRWrLfGHfh eufdrTbC+b9c2GbLriY7x+9vE7mHIHcLS8Zqyw9Q62/G1T36nxXo0RVYFW/IAG8/ uLwe/nW/leEYr91QGpZ9w3xo2xhqZel+Yxh6mW0PTFS74fHgZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZvFdXeSR5syi76R+xnwcxUErz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYWM5MDEwYzktYzA5MS0z OTdjLWI0MGQtZmJlYmE2NTc3MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOmgm+wG6gRdneKlijvGO9il37zgQfbibkbDkv53LCe968Lg4XS59E4 qVr9YYyKS4jHQvhkEklaKL35mNXZYzWMWaIDyCPkJfmtifp6qsU7dBJZRosULkJr MccvFE+z1vvmdeJKilLsHgQQbvAmbG8HZv2wItcqq5b5JzBOAsKGwa4n88Cf/Lys Nlqjb+AkQTa4fRwuSqCbCxrs2ma4kwjKIRVSAPCwYMn+59do8mD6imghuMg1Fu/W ckekGbZDZR0YJZu/JMoiHZPIFLLWAnPdYM/Bmtg8T0rIdAZMKW9tEz36ndW3QrFX YND69z1Lmxn2OFk9PQcI95BeoEtMpjo= -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:12 2026 by rpki-client