$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa File: 8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa (raw, json) Hash identifier: iNoBolJwoFuCQbXLKjukQcl2bURa1Nc1vWoCfMIa9p0= Subject key identifier: 3E:F0:27:9F:72:5B:D0:43:F1:BF:DE:36:36:4E:1C:8A:AF:B2:74:0B Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584D44FA75F70E334C66E5B13C00 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 395301 IP address blocks: 208.74.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:75:f7:0e:33:4c:66:e5:b1:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0a9b6a49-01e2-483c-b136-2dfaccba6518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7d:ca:2d:51:fe:72:b1:93:49:1c:64:94:33: 44:f9:95:4d:c5:0a:92:2f:9f:80:e3:92:38:23:4f: f9:a1:2c:d0:6d:71:74:56:e9:13:c0:81:1a:4a:46: d4:55:de:df:71:28:2d:78:30:f7:2b:ac:a9:c2:f3: 71:e4:82:c6:77:d4:0a:f2:b6:e9:c5:04:05:60:9d: ef:d3:f9:2a:bc:45:69:f7:69:95:c1:c7:10:bf:3d: 24:1b:d4:50:3d:29:44:2c:b0:ba:ed:48:0a:e1:97: 43:9f:e3:26:54:7c:06:fb:fb:3e:8a:11:8f:ca:29: c1:2c:45:7a:b7:70:2b:c7:c4:29:ea:98:64:c5:75: fb:14:31:86:45:a4:f8:be:b9:2f:b7:8c:41:b7:99: e8:0a:57:47:65:68:29:0b:cd:5f:25:60:d8:28:de: 10:34:db:71:fd:1e:2d:f1:07:fc:6b:2a:3b:fb:7f: 9c:c9:92:60:70:12:8e:05:4d:cb:6d:3e:3a:a4:4d: 94:a1:45:dc:10:ff:a8:20:a0:ea:35:ee:b3:77:33: a6:e9:63:49:28:f8:9d:da:9a:29:35:b3:a1:24:2e: 43:fc:c1:a7:4d:44:f7:28:a8:d3:f0:79:96:d5:37: ef:63:bd:e5:27:82:10:28:a0:5c:f7:8e:39:a3:84: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F0:27:9F:72:5B:D0:43:F1:BF:DE:36:36:4E:1C:8A:AF:B2:74:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/8bef79a7-ec5f-3797-83a8-aa00b0bc6e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 208.74.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dc:fc:74:ef:7d:8d:82:7f:5f:f7:60:b9:1e:fd:39:53:98: e4:d7:5d:70:14:bd:a1:b5:73:58:9b:c7:13:11:bc:6b:70:47: 40:a2:ec:9a:59:e0:41:8c:1d:a1:b8:4f:de:ca:79:0b:c2:7c: 09:a7:45:6b:54:8d:68:4a:d6:aa:cc:2e:a4:0e:9d:3a:74:d1: 49:92:ca:ec:b8:6e:6e:5b:48:c0:e0:c8:32:f0:9e:51:4e:ce: d1:67:97:8c:10:87:b1:f2:fa:46:c2:78:1e:79:53:32:de:e3: 9a:61:de:49:63:11:b8:68:e6:33:71:11:e9:49:b7:e9:c3:d5: b3:36:c2:4e:ab:29:37:ed:54:75:af:82:2e:48:4f:4e:54:47: 55:56:c0:6b:ad:d6:4b:8a:26:5e:aa:cf:49:d9:a7:05:a2:8e: c5:96:7e:ea:ee:f6:3e:01:56:de:57:a3:70:ba:6c:c1:e3:06: 2c:17:b5:b8:cc:ad:95:2b:51:65:41:ab:1f:24:9b:74:30:d9: ed:0f:17:cc:5b:56:c9:ab:90:41:56:0a:88:85:07:9c:2d:20: 8d:f0:19:18:a6:ef:ed:7c:8e:48:b1:1c:0a:86:62:a7:75:ca: aa:45:47:9e:bb:69:65:bf:bb:90:ed:93:db:35:88:ae:a9:38: f9:9d:c7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nX3DjNMZuWxPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGE5YjZhNDktMDFlMi00ODNjLWIxMzYtMmRmYWNjYmE2NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA533KLVH+crGTSRxklDNE+ZVNxQqSL5+A45I4 I0/5oSzQbXF0VukTwIEaSkbUVd7fcSgteDD3K6ypwvNx5ILGd9QK8rbpxQQFYJ3v 0/kqvEVp92mVwccQvz0kG9RQPSlELLC67UgK4ZdDn+MmVHwG+/s+ihGPyinBLEV6 t3Arx8Qp6phkxXX7FDGGRaT4vrkvt4xBt5noCldHZWgpC81fJWDYKN4QNNtx/R4t 8Qf8ayo7+3+cyZJgcBKOBU3LbT46pE2UoUXcEP+oIKDqNe6zdzOm6WNJKPid2pop NbOhJC5D/MGnTUT3KKjT8HmW1TfvY73lJ4IQKKBc9445o4T/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7wJ59yW9BD8b/eNjZOHIqvsnQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvOGJlZjc5YTctZWM1Zi0z Nzk3LTgzYTgtYWEwMGIwYmM2ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHc/HTvfY2Cf1/3YLke/TlTmOTXXXAUvaG1c1ibxxMRvGtwR0Ci7JpZ 4EGMHaG4T97KeQvCfAmnRWtUjWhK1qrMLqQOnTp00UmSyuy4bm5bSMDgyDLwnlFO ztFnl4wQh7Hy+kbCeB55UzLe45ph3kljEbho5jNxEelJt+nD1bM2wk6rKTftVHWv gi5IT05UR1VWwGut1kuKJl6qz0nZpwWijsWWfuru9j4BVt5Xo3C6bMHjBiwXtbjM rZUrUWVBqx8km3Qw2e0PF8xbVsmrkEFWCoiFB5wtII3wGRim7+18jkixHAqGYqd1 yqpFR567aWW/u5Dtk9s1iK6pOPmdx2k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:36 2026 by rpki-client