$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b1b54c0-a339-363e-b009-de1db025c8c5.roa File: 3b1b54c0-a339-363e-b009-de1db025c8c5.roa (raw, json) Hash identifier: tddcrnfTj8C0DxZXktWJzYJhuJVj4omuTrP0n4DNmSA= Subject key identifier: EF:23:A5:ED:B6:60:87:89:69:12:C2:B8:23:17:76:00:A8:CE:D7:F6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D3B34D40D2B1FD53372277800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b1b54c0-a339-363e-b009-de1db025c8c5.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 174 IP address blocks: 74.0.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d4:0d:2b:1f:d5:33:72:27:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=8c9b7a92-1261-43a4-87ca-32f1b3774274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:d5:1a:79:a7:bf:f6:61:a9:b0:74:8a:6d: 5e:6e:e6:d8:12:06:60:c5:39:c4:1b:20:44:c8:d1: 0b:a0:8a:c0:bf:0a:77:fd:75:05:39:44:1c:77:8c: 4d:b2:a5:b5:f1:8a:46:ba:98:c5:ef:c2:16:10:e2: 7b:5a:dc:98:65:3e:25:71:6b:72:b1:5f:73:81:a5: fc:8e:7e:b8:ae:f2:e2:2b:c3:1a:17:80:df:79:62: 9a:34:3a:ce:d3:26:61:df:0f:8a:11:64:e3:6a:2c: dd:1a:2c:96:80:c2:4c:b9:94:78:7f:e8:ae:ba:8c: 34:c8:3b:59:00:68:77:70:a9:f5:0f:7c:45:27:ff: e1:4f:20:18:06:19:fe:31:3e:65:7e:94:2c:88:cb: 9c:6e:d6:4e:9d:82:d3:e1:a1:2d:b5:6a:6e:5c:06: 12:11:e1:d6:83:5a:a0:42:e9:5d:ed:8e:7e:e2:e1: 23:30:52:f2:46:fe:a1:d6:8e:b0:26:8f:c6:c8:28: 94:9c:f0:ae:59:dc:c9:ac:4d:4b:54:3e:5e:b3:aa: b1:f4:4a:7b:2e:2a:99:04:d7:44:f2:54:59:a9:27: df:cf:16:16:f2:cb:32:38:25:f1:b4:ec:e5:27:7b: e7:06:a9:22:47:fc:89:29:d4:1c:3c:8d:56:17:19: 53:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:23:A5:ED:B6:60:87:89:69:12:C2:B8:23:17:76:00:A8:CE:D7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b1b54c0-a339-363e-b009-de1db025c8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:46:96:e4:91:48:40:a1:78:26:99:4d:aa:29:06:12:6a:32: c8:42:bb:6d:f6:a1:31:82:20:55:0e:e4:45:2e:7a:34:e1:e2: e7:cc:48:43:05:16:e4:16:ee:ed:b7:1c:c2:aa:b8:7f:fb:df: 82:78:38:6c:51:92:aa:01:0f:0a:99:9c:53:09:1b:d0:b8:b4: 58:8d:d8:f2:76:51:42:e0:4c:3a:8f:73:b6:61:af:7a:b9:62: 23:5a:d3:32:e4:47:f0:c0:b6:a2:cd:3d:58:50:2a:82:4b:4c: 17:77:2b:11:fa:cf:25:d2:bb:ad:05:4c:f9:8a:a7:fa:79:8f: 0d:4e:ef:96:1e:02:63:36:d4:7c:49:45:45:0c:f1:77:6a:cc: a4:92:81:35:7a:de:5f:99:74:0f:04:8c:ab:1f:b9:b9:f6:ed: 07:ba:50:29:e2:15:b4:59:0f:66:92:6d:29:57:78:4e:4c:80: 41:ec:ad:2a:83:bc:33:97:a1:af:6f:7d:8d:0d:d5:3b:dd:42: bd:87:74:73:37:fb:74:46:8e:51:a2:c7:e0:b5:f2:7e:ac:55: 2b:2c:8c:f8:0e:ac:ed:10:7c:e1:ec:dc:53:32:40:20:e3:9f: e9:6e:fa:c4:60:e6:5c:3e:29:3f:72:8c:f6:c4:1c:25:5c:2c: 85:cd:16:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNQNKx/VM3IneAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk OGM5YjdhOTItMTI2MS00M2E0LTg3Y2EtMzJmMWIzNzc0Mjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyLVGnmnv/ZhqbB0im1ebubYEgZgxTnEGyBE yNELoIrAvwp3/XUFOUQcd4xNsqW18YpGupjF78IWEOJ7WtyYZT4lcWtysV9zgaX8 jn64rvLiK8MaF4DfeWKaNDrO0yZh3w+KEWTjaizdGiyWgMJMuZR4f+iuuow0yDtZ AGh3cKn1D3xFJ//hTyAYBhn+MT5lfpQsiMucbtZOnYLT4aEttWpuXAYSEeHWg1qg Quld7Y5+4uEjMFLyRv6h1o6wJo/GyCiUnPCuWdzJrE1LVD5es6qx9Ep7LiqZBNdE 8lRZqSffzxYW8ssyOCXxtOzlJ3vnBqkiR/yJKdQcPI1WFxlTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8jpe22YIeJaRLCuCMXdgCoztf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2IxYjU0YzAtYTMzOS0z NjNlLWIwMDktZGUxZGIwMjVjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRGluSRSECheCaZTaopBhJqMshCu232oTGCIFUO5EUuejTh4ufMSEMF FuQW7u23HMKquH/734J4OGxRkqoBDwqZnFMJG9C4tFiN2PJ2UULgTDqPc7Zhr3q5 YiNa0zLkR/DAtqLNPVhQKoJLTBd3KxH6zyXSu60FTPmKp/p5jw1O75YeAmM21HxJ RUUM8XdqzKSSgTV63l+ZdA8EjKsfubn27Qe6UCniFbRZD2aSbSlXeE5MgEHsrSqD vDOXoa9vfY0N1TvdQr2HdHM3+3RGjlGix+C18n6sVSssjPgOrO0QfOHs3FMyQCDj n+lu+sRg5lw+KT9yjPbEHCVcLIXNFkE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:37 2026 by rpki-client