$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/2bac16fb-ec7a-3e44-8888-7439b247143e.roa File: 2bac16fb-ec7a-3e44-8888-7439b247143e.roa (raw, json) Hash identifier: 659BYgAtmis4O1p4WdzBAhON444VWgmVqKOEFHSjbaE= Subject key identifier: 49:88:8A:AF:F8:4B:B7:90:AD:A0:B8:83:45:05:ED:67:98:AA:F9:78 Certificate issuer: /CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90 Certificate serial: 010D0C9F4328584D3F64D89CF2FA070C19B7EA00 Authority key identifier: C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/2bac16fb-ec7a-3e44-8888-7439b247143e.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 401650 IP address blocks: 74.115.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d8:9c:f2:fa:07:0c:19:b7:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=744d9790-f783-4d79-a1be-4c8951ff06e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:24:bf:af:09:86:04:1d:63:96:62:42:48: 76:a8:f2:01:21:da:d5:83:bc:ea:b6:c7:16:68:be: 53:6b:a1:07:3c:cd:b3:32:e0:68:18:02:09:57:14: 4e:ff:ab:50:03:ab:e8:33:6f:a2:a3:1b:ea:29:5e: 09:de:64:ca:47:de:98:9a:b2:e4:91:fb:98:3e:2d: 63:c0:a5:7f:14:d8:de:a6:cc:5f:8f:f5:d4:ba:6e: a1:ee:a4:5c:01:8d:99:5f:19:b7:35:9a:25:fc:43: b2:e1:f5:ed:be:b0:b4:df:79:bb:38:77:5f:e2:f6: 63:12:91:6f:46:87:7b:11:46:75:ce:87:ed:07:cf: 2d:a4:af:b9:17:ad:12:d6:d5:7e:51:d2:a1:4a:c5: ca:2b:e9:4e:44:28:1f:88:8d:05:a4:8e:68:3a:29: e6:b0:4a:3b:6f:f5:90:51:a0:72:22:49:3c:79:9d: e3:b3:cf:74:68:a3:5e:1c:1a:35:db:af:83:b0:b8: 28:85:15:37:b9:c7:5a:59:86:d7:be:57:88:4b:7d: 9b:c6:1d:d8:62:d8:79:dc:1c:9e:8a:ee:a9:9f:cc: 21:3c:3d:a7:cd:3a:30:3c:8e:9b:16:c6:56:e4:7c: 48:04:24:a6:ea:67:3e:ca:60:cd:83:7e:6c:f9:e0: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:8A:AF:F8:4B:B7:90:AD:A0:B8:83:45:05:ED:67:98:AA:F9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/2bac16fb-ec7a-3e44-8888-7439b247143e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl X509v3 Authority Key Identifier: keyid:C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer sbgp-ipAddrBlock: critical IPv4: 74.115.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7c:bd:a0:dd:f6:7e:1f:1d:a9:30:df:43:97:40:d8:8f:e7: 26:e5:e7:1a:58:5b:cb:c7:14:6f:cf:cd:be:70:bc:12:ba:b3: b3:02:e8:b8:a8:8e:e3:b2:c1:f8:3f:a0:5d:43:41:48:58:fc: d0:e2:75:14:18:1b:e0:ce:ab:46:cd:e1:cc:71:70:8b:05:61: 7a:83:4d:c2:94:68:47:ea:2e:5a:72:4d:75:05:06:89:96:2d: 9a:f1:d1:a4:e7:23:57:b3:53:de:2c:ef:01:cf:6a:52:66:f0: 3b:af:9c:85:91:13:61:8d:0a:ad:95:16:a6:d0:8b:1e:ab:47: be:e0:db:a8:30:cc:36:07:9d:1a:0e:ea:3b:ac:bb:ac:48:83: d7:cf:85:88:b9:a9:40:f4:9d:8f:c4:a8:63:2c:0a:d0:fd:47: 09:0e:62:f9:84:51:92:3d:96:f8:a3:a2:e3:4a:af:1c:53:7f: 08:b2:a9:0a:6b:21:89:7c:67:40:b0:34:bd:a7:da:5e:ef:8d: 01:35:27:82:fc:01:dd:15:46:41:75:75:5d:56:07:56:5c:f9: 7f:0a:88:17:c2:e5:68:61:20:9b:e1:48:87:55:1f:99:22:81: b5:22:3a:ca:d9:04:f9:28:0b:1c:b4:03:f6:4a:b7:71:61:08: 29:12:77:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNic8voHDBm36gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIxYTMzZDQtOWU4Yy00NjViLTg2ZDYtYWIwYjEzN2Nh ZTkwMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzQ0ZDk3OTAtZjc4My00ZDc5LWExYmUtNGM4OTUxZmYwNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDckv68JhgQdY5ZiQkh2qPIBIdrVg7zqtscW aL5Ta6EHPM2zMuBoGAIJVxRO/6tQA6voM2+ioxvqKV4J3mTKR96YmrLkkfuYPi1j wKV/FNjepsxfj/XUum6h7qRcAY2ZXxm3NZol/EOy4fXtvrC033m7OHdf4vZjEpFv Rod7EUZ1zoftB88tpK+5F60S1tV+UdKhSsXKK+lORCgfiI0FpI5oOinmsEo7b/WQ UaByIkk8eZ3js890aKNeHBo126+DsLgohRU3ucdaWYbXvleIS32bxh3YYth53Bye iu6pn8whPD2nzTowPI6bFsZW5HxIBCSm6mc+ymDNg35s+eDzFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmIiq/4S7eQraC4g0UF7WeYqvl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YjFh MzNkNC05ZThjLTQ2NWItODZkNi1hYjBiMTM3Y2FlOTAvMmJhYzE2ZmItZWM3YS0z ZTQ0LTg4ODgtNzQzOWIyNDcxNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGIxYTMzZDQtOWU4Yy00NjViLTg2 ZDYtYWIwYjEzN2NhZTkwLzRiMWEzM2Q0LTllOGMtNDY1Yi04NmQ2LWFiMGIxMzdj YWU5MC5jcmwwHwYDVR0jBBgwFoAUx+B1/O35S86QXAHOJypDPVW/10YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YjFhMzNkNC05ZThjLTQ2NWItODZkNi1hYjBi MTM3Y2FlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd8vaDd9n4fHakw30OXQNiP5ybl5xpYW8vHFG/Pzb5wvBK6s7MC6Lio juOywfg/oF1DQUhY/NDidRQYG+DOq0bN4cxxcIsFYXqDTcKUaEfqLlpyTXUFBomW LZrx0aTnI1ezU94s7wHPalJm8DuvnIWRE2GNCq2VFqbQix6rR77g26gwzDYHnRoO 6jusu6xIg9fPhYi5qUD0nY/EqGMsCtD9RwkOYvmEUZI9lvijouNKrxxTfwiyqQpr IYl8Z0CwNL2n2l7vjQE1J4L8Ad0VRkF1dV1WB1Zc+X8KiBfC5WhhIJvhSIdVH5ki gbUiOsrZBPkoCxy0A/ZKt3FhCCkSdws= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:37 2026 by rpki-client