$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/bca3176c-2818-3c35-aef6-921040bc10af.roa File: bca3176c-2818-3c35-aef6-921040bc10af.roa (raw, json) Hash identifier: DisGzdN+bh48NPtl/dRbbAZ04y7EFnBceTIFi0cf8hQ= Subject key identifier: 7B:D9:8D:A2:6E:7A:07:CA:BA:70:64:44:4A:95:36:79:32:68:E4:58 Certificate issuer: /CN=4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51 Certificate serial: 010D0C9F4328584D4D5A971D432BB8BBC12ADE80 Authority key identifier: 13:69:5C:7A:B2:9F:43:61:0B:E7:CE:B5:62:26:6E:E3:7E:6C:62:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/bca3176c-2818-3c35-aef6-921040bc10af.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 398969 IP address blocks: 74.120.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:97:1d:43:2b:b8:bb:c1:2a:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=a4ade213-1f71-4dd9-82ef-571702fd68d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:60:c3:44:87:eb:98:21:32:14:cc:e5:a6:ad: 4d:20:21:d8:8d:8d:7b:50:b6:ca:5c:a5:c6:ce:f5: c8:5b:4a:0f:eb:32:f2:dd:0d:7a:a2:e3:c5:41:1c: d6:6e:37:9f:53:98:84:a0:d3:94:df:d9:8a:84:ac: e7:53:41:27:63:07:7c:6d:12:52:ea:73:79:77:01: 87:75:1d:8c:7c:76:3a:4c:f7:79:4e:63:f6:30:ea: 09:f8:64:79:2b:2b:e4:d6:f9:80:3c:ce:30:42:a7: 25:ed:60:9f:6f:b6:46:24:a2:9b:53:05:8b:0d:71: 3e:14:74:45:1e:96:cc:54:16:3d:27:42:29:d2:d0: 64:02:dd:67:54:91:16:88:88:08:c7:34:fa:cd:bd: bd:85:7a:93:d0:61:44:21:20:fb:bd:b8:a6:00:44: 7e:71:0c:d8:78:02:04:b1:7d:15:64:cb:0e:56:28: ad:0a:e0:94:19:04:63:f1:00:97:9c:e7:9f:63:9e: 01:cd:59:25:c9:91:3d:5f:bd:7c:cf:ba:a7:5a:bd: 0e:40:c1:f0:32:36:4c:80:23:4c:85:1e:8b:9a:96: 7d:77:91:c4:bf:08:71:af:ea:0f:36:54:83:ee:62: 80:b1:99:55:fe:0d:4e:67:a8:72:01:63:8a:b3:b4: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:8D:A2:6E:7A:07:CA:BA:70:64:44:4A:95:36:79:32:68:E4:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/bca3176c-2818-3c35-aef6-921040bc10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.crl X509v3 Authority Key Identifier: keyid:13:69:5C:7A:B2:9F:43:61:0B:E7:CE:B5:62:26:6E:E3:7E:6C:62:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4fc70333-94fe-4c18-b4f8-6a8b9a1a1d51.cer sbgp-ipAddrBlock: critical IPv4: 74.120.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:d2:6d:d6:c6:09:b4:21:e0:d2:e6:06:35:a1:31:d1:94:ec: 56:b0:1d:a5:67:9e:4f:13:4e:01:50:86:9c:d1:07:44:20:be: 17:96:a2:c8:3a:b8:0a:4a:c3:a6:55:46:e4:db:04:78:2d:7f: a9:7b:33:db:48:a3:10:6a:08:57:a1:93:2e:62:94:3b:bc:f5: be:e7:c2:02:22:bf:db:b8:4a:45:d1:9a:a4:5d:e1:e5:58:d3: 40:c4:19:3f:9c:f8:1d:e1:a7:51:73:30:41:c9:cc:a7:ba:f9: f1:93:89:57:dc:f3:be:bb:95:1c:d5:b1:67:b3:6b:e9:f8:a8: bd:b1:c8:4a:a3:1c:28:6f:bb:ec:ad:35:fa:f0:5d:0c:b4:42: f2:65:50:dc:c1:7f:ec:0c:b5:f2:ce:a8:0d:a6:a7:f5:21:a5: dc:26:1a:e6:56:88:a1:c1:6f:f7:3f:af:f9:44:e1:7a:9d:ea: 32:10:99:45:c4:ef:30:1b:e0:a7:de:03:00:58:68:a7:7e:3c: 09:cc:55:e0:c6:da:91:5b:89:2e:96:46:52:cf:66:7e:bc:c4: 00:cd:f3:54:70:34:a6:1b:21:97:51:62:16:01:be:76:2f:57: 0a:bb:87:11:d1:3e:f7:91:5b:dc:35:0e:b3:5c:82:03:ba:b6: cb:fb:05:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpcdQyu4u8Eq3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjNzAzMzMtOTRmZS00YzE4LWI0ZjgtNmE4YjlhMWEx ZDUxMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTRhZGUyMTMtMWY3MS00ZGQ5LTgyZWYtNTcxNzAyZmQ2OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWDDRIfrmCEyFMzlpq1NICHYjY17ULbKXKXG zvXIW0oP6zLy3Q16ouPFQRzWbjefU5iEoNOU39mKhKznU0EnYwd8bRJS6nN5dwGH dR2MfHY6TPd5TmP2MOoJ+GR5Kyvk1vmAPM4wQqcl7WCfb7ZGJKKbUwWLDXE+FHRF HpbMVBY9J0Ip0tBkAt1nVJEWiIgIxzT6zb29hXqT0GFEISD7vbimAER+cQzYeAIE sX0VZMsOViitCuCUGQRj8QCXnOefY54BzVklyZE9X718z7qnWr0OQMHwMjZMgCNM hR6LmpZ9d5HEvwhxr+oPNlSD7mKAsZlV/g1OZ6hyAWOKs7TCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvZjaJuegfKunBkREqVNnkyaORYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZmM3 MDMzMy05NGZlLTRjMTgtYjRmOC02YThiOWExYTFkNTEvYmNhMzE3NmMtMjgxOC0z YzM1LWFlZjYtOTIxMDQwYmMxMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGZjNzAzMzMtOTRmZS00YzE4LWI0 ZjgtNmE4YjlhMWExZDUxLzRmYzcwMzMzLTk0ZmUtNGMxOC1iNGY4LTZhOGI5YTFh MWQ1MS5jcmwwHwYDVR0jBBgwFoAUE2lcerKfQ2EL5861YiZu435sYhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZmM3MDMzMy05NGZlLTRjMTgtYjRmOC02YThi OWExYTFkNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXSbdbGCbQh4NLmBjWhMdGU7FawHaVnnk8TTgFQhpzRB0QgvheWosg6 uApKw6ZVRuTbBHgtf6l7M9tIoxBqCFehky5ilDu89b7nwgIiv9u4SkXRmqRd4eVY 00DEGT+c+B3hp1FzMEHJzKe6+fGTiVfc8767lRzVsWeza+n4qL2xyEqjHChvu+yt NfrwXQy0QvJlUNzBf+wMtfLOqA2mp/UhpdwmGuZWiKHBb/c/r/lE4Xqd6jIQmUXE 7zAb4KfeAwBYaKd+PAnMVeDG2pFbiS6WRlLPZn68xADN81RwNKYbIZdRYhYBvnYv Vwq7hxHRPveRW9w1DrNcggO6tsv7BXA= -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:10 2026 by rpki-client