$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa File: 0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa (raw, json) Hash identifier: D3UdqCbXIq0hjDPyDnbSyUGclGoI8fKo4CEXjOoJBTU= Subject key identifier: 4C:B2:A2:84:E4:37:20:29:43:4A:5E:84:F7:B1:49:EA:DC:38:00:FC Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584D40CB9E320A736D0223E70A00 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 400702 IP address blocks: 74.118.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9e:32:0a:73:6d:02:23:e7:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=6b37af6b-e179-4af7-a5d1-de1453480a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:2c:92:ce:c7:ea:cd:46:97:6e:64:f1:20: 30:ea:1f:2c:b9:54:1e:67:3d:83:fb:ae:27:d2:6f: 13:3d:d2:9c:66:1a:a4:1d:d8:1a:ba:6e:10:69:db: 03:da:6e:cc:d6:05:8e:50:be:df:f6:3f:dc:8a:06: cb:47:af:28:8e:f6:5f:8a:64:05:a7:23:e4:12:bc: af:99:1d:fe:1c:07:c1:51:a8:5c:ac:fb:17:56:50: 01:7d:b7:66:85:20:d2:e5:8d:86:34:7d:fd:83:fd: 42:5d:0b:26:38:60:b8:7b:0c:30:65:11:82:9a:b8: 33:98:5c:da:8a:28:48:63:de:6a:59:5a:2d:c0:a7: 0e:83:d9:f1:4e:a6:de:59:01:56:34:86:92:9f:2d: 38:f6:0b:ce:87:98:cb:10:96:00:8d:2c:09:f8:27: 2f:10:e9:fd:f3:d9:74:6f:58:f9:6f:b4:3f:b9:80: a9:a6:d5:c7:c0:0e:ad:8e:44:d7:35:b2:59:0e:27: 71:bf:64:df:78:8f:e6:43:39:f9:78:c4:c3:65:f4: 19:73:cc:d3:aa:b9:84:41:d2:5d:49:3c:c5:48:35: 50:bf:9d:ff:65:98:91:b4:52:97:9b:a1:64:f5:34: 94:73:11:66:c5:86:bf:c5:39:8c:fb:c6:d1:25:06: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B2:A2:84:E4:37:20:29:43:4A:5E:84:F7:B1:49:EA:DC:38:00:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 74.118.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:70:85:15:52:93:fd:a8:17:0c:0f:b8:40:f0:e9:70:90:e6: 3b:ab:d4:84:5e:e2:77:b4:c2:a5:bd:10:7e:f2:46:85:11:a3: 19:2c:55:21:39:6c:8e:11:37:b7:36:53:85:9f:09:a9:d1:f0: b3:87:a4:b2:80:01:69:55:85:9a:fc:78:3a:e5:f9:52:e0:9e: f8:0d:d3:9c:0f:6d:03:c1:e0:8c:4a:a6:af:7c:7e:f6:85:55: 12:b3:a1:c6:60:26:41:37:33:e4:43:47:a9:f3:01:01:9b:a9: 9d:8e:68:55:60:5e:18:66:b8:15:b4:d0:55:aa:e3:02:b4:4b: 14:0f:f8:b0:dd:79:27:f5:99:96:86:a7:b4:d3:bc:6a:e0:14: 7e:24:32:b1:b3:8d:82:30:d6:6e:fc:e8:3a:24:62:e0:ca:68: 67:7c:fd:cb:3c:77:6f:b7:01:50:0b:29:47:76:39:88:3f:a9: 3b:34:54:11:21:5f:4c:a3:0b:96:78:7c:aa:64:70:36:87:dd: 35:06:4b:49:23:ce:08:fb:ad:c3:4e:04:13:63:57:50:a7:1c: d5:2c:36:06:e8:25:e8:51:2c:94:5b:76:d0:76:27:0f:60:75: 4d:4a:ac:97:02:b0:ad:df:f2:cf:d3:a2:cc:fe:b3:64:33:0e: 6e:09:53:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay54yCnNtAiPnCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NmIzN2FmNmItZTE3OS00YWY3LWE1ZDEtZGUxNDUzNDgwYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp60sks7H6s1Gl25k8SAw6h8suVQeZz2D+64n 0m8TPdKcZhqkHdgaum4QadsD2m7M1gWOUL7f9j/cigbLR68ojvZfimQFpyPkEryv mR3+HAfBUahcrPsXVlABfbdmhSDS5Y2GNH39g/1CXQsmOGC4ewwwZRGCmrgzmFza iihIY95qWVotwKcOg9nxTqbeWQFWNIaSny049gvOh5jLEJYAjSwJ+CcvEOn989l0 b1j5b7Q/uYCpptXHwA6tjkTXNbJZDidxv2TfeI/mQzn5eMTDZfQZc8zTqrmEQdJd STzFSDVQv53/ZZiRtFKXm6Fk9TSUcxFmxYa/xTmM+8bRJQaWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyyooTkNyApQ0pehPexSercOAD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvMDU3MGQ3YTItNGQ5ZS0z ODVlLTk5NTUtM2ZjN2Q4Y2E3N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChwhRVSk/2oFwwPuEDw6XCQ5jur1IRe4ne0wqW9EH7yRoURoxksVSE5 bI4RN7c2U4WfCanR8LOHpLKAAWlVhZr8eDrl+VLgnvgN05wPbQPB4IxKpq98fvaF VRKzocZgJkE3M+RDR6nzAQGbqZ2OaFVgXhhmuBW00FWq4wK0SxQP+LDdeSf1mZaG p7TTvGrgFH4kMrGzjYIw1m786DokYuDKaGd8/cs8d2+3AVALKUd2OYg/qTs0VBEh X0yjC5Z4fKpkcDaH3TUGS0kjzgj7rcNOBBNjV1CnHNUsNgboJehRLJRbdtB2Jw9g dU1KrJcCsK3f8s/Tosz+s2QzDm4JU4w= -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:05 2026 by rpki-client