$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa File: a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa (raw, json) Hash identifier: 9lqZr8X177L92swAc1/2SS9aYfuv9qhu6nnX+rrXInU= Subject key identifier: D0:A8:75:D7:2A:46:35:7E:B4:9C:8B:0B:38:F8:F8:01:D2:B0:A9:3F Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2A74E1E2F903B1363E7A3A00 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16433 IP address blocks: 74.123.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e1:e2:f9:03:b1:36:3e:7a:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=e9f3885c-555b-4f01-beab-bcc9d4ae70af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:84:a0:12:ce:31:99:fd:1d:e0:a5:13:47: 8f:b4:2c:4b:4f:7d:d4:7d:af:21:f0:0c:36:c3:2e: 6c:c6:9a:22:e7:af:2e:6f:49:f4:1c:cf:47:87:e8: 9d:e8:7c:b8:44:89:c4:61:23:99:db:24:f0:05:df: 76:8c:af:05:60:76:1a:73:45:09:89:0d:6c:2d:27: f5:77:65:31:24:4d:02:e7:1b:9e:9b:35:a8:44:d1: 92:ba:aa:b2:37:38:f4:b8:78:cc:05:29:d7:70:29: 44:89:1f:10:f3:fc:3b:d6:26:ad:be:30:18:82:22: 23:fb:bc:6f:03:32:f5:35:3d:b4:b2:0a:ab:e0:d4: b2:d8:52:9b:d9:aa:53:8a:dc:a3:89:26:22:3f:6e: 62:ba:79:34:ed:aa:47:3e:e9:b0:b2:c9:34:e5:c6: a1:47:ba:05:a2:2d:62:11:0c:8e:ce:aa:cc:d3:b6: 29:1e:6a:36:bf:fd:20:47:85:1a:34:af:0b:32:70: e3:9b:0e:e7:9f:1c:bc:4b:e4:42:9c:cd:29:a2:c6: 05:f9:ac:5b:27:3d:73:21:11:be:5a:a5:ac:62:5e: 30:66:7e:81:67:e7:f5:a2:f4:06:89:ff:3b:bb:35: 2a:52:7d:ff:86:98:60:7a:f9:84:23:75:5b:b1:31: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A8:75:D7:2A:46:35:7E:B4:9C:8B:0B:38:F8:F8:01:D2:B0:A9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 74.123.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b4:60:86:2e:60:b1:8f:a4:40:d5:be:9d:56:a0:3c:68:e7: b0:b0:7f:4e:ab:5a:d8:2a:c6:9c:73:31:73:d0:79:90:a5:c2: ae:b1:b9:dd:c8:90:ef:32:70:e4:dc:58:ad:3e:df:1f:28:7e: bf:45:dc:df:86:d9:52:29:8f:cf:e6:5d:f8:c1:a3:24:cc:86: ae:f0:18:33:20:7f:83:c0:4d:31:ff:7f:ec:b4:fd:6f:d8:cc: f9:0e:bc:84:0f:39:6d:1d:0d:c7:33:d6:21:bc:12:79:03:d1: 31:a3:fd:fc:58:7f:d4:1e:ab:16:03:24:44:89:c1:ce:5d:2e: 61:6a:1f:06:76:58:47:31:7e:4c:8d:c0:73:6a:13:f4:64:61: 91:4a:5d:ca:9d:2d:83:08:44:fd:f4:81:40:0c:97:04:90:79: ef:1b:ce:1a:77:b4:77:03:5a:82:9d:33:8d:a2:cf:92:30:0a: 59:79:e3:dd:4e:55:16:81:88:90:b6:1c:05:a3:5c:df:47:e4: 91:8e:3b:f6:62:ff:c4:b3:8a:86:3f:6f:75:95:3c:48:19:1f: 46:0b:60:ec:5e:8e:53:b0:a2:50:21:bb:5f:33:d4:00:e7:21: ed:17:da:c4:a9:cc:94:3a:f7:32:cf:31:ab:2a:5d:01:96:d6: d1:64:a8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOHi+QOxNj56OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZTlmMzg4NWMtNTU1Yi00ZjAxLWJlYWItYmNjOWQ0YWU3MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGEoBLOMZn9HeClE0ePtCxLT33Ufa8h8Aw2 wy5sxpoi568ub0n0HM9Hh+id6Hy4RInEYSOZ2yTwBd92jK8FYHYac0UJiQ1sLSf1 d2UxJE0C5xuemzWoRNGSuqqyNzj0uHjMBSnXcClEiR8Q8/w71iatvjAYgiIj+7xv AzL1NT20sgqr4NSy2FKb2apTityjiSYiP25iunk07apHPumwssk05cahR7oFoi1i EQyOzqrM07YpHmo2v/0gR4UaNK8LMnDjmw7nnxy8S+RCnM0posYF+axbJz1zIRG+ WqWsYl4wZn6BZ+f1ovQGif87uzUqUn3/hphgevmEI3VbsTEY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCoddcqRjV+tJyLCzj4+AHSsKk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYTk0YTJiNmItOTAzZS0z N2NiLWJkZTctYzliODVlZDcyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq0YIYuYLGPpEDVvp1WoDxo57Cwf06rWtgqxpxzMXPQeZClwq6xud3I kO8ycOTcWK0+3x8ofr9F3N+G2VIpj8/mXfjBoyTMhq7wGDMgf4PATTH/f+y0/W/Y zPkOvIQPOW0dDccz1iG8EnkD0TGj/fxYf9QeqxYDJESJwc5dLmFqHwZ2WEcxfkyN wHNqE/RkYZFKXcqdLYMIRP30gUAMlwSQee8bzhp3tHcDWoKdM42iz5IwCll5491O VRaBiJC2HAWjXN9H5JGOO/Zi/8SzioY/b3WVPEgZH0YLYOxejlOwolAhu18z1ADn Ie0X2sSpzJQ69zLPMasqXQGW1tFkqMs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:24 2026 by rpki-client