$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41c1e839-7d6a-36b7-b7b2-99476a209991.roa File: 41c1e839-7d6a-36b7-b7b2-99476a209991.roa (raw, json) Hash identifier: 0SHtmndz+vhu8gYiHirb36Ms5YeMF4EEcf25RqXl2io= Subject key identifier: FF:82:66:AF:F2:0D:15:75:FE:82:02:08:B1:C2:E6:F6:71:A9:07:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D3B34D3C1D32AA9753628DF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41c1e839-7d6a-36b7-b7b2-99476a209991.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 213784 IP address blocks: 74.0.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d3:c1:d3:2a:a9:75:36:28:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=2661a246-db84-4b04-9457-eaac4f6fde28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3b:95:37:c6:c7:12:6b:ee:15:15:d2:52:24: 54:9f:ce:ed:63:a4:78:fa:81:ba:97:fa:fb:c5:84: 8e:28:6e:e9:9c:7e:f1:8b:f6:25:3f:ac:ef:97:16: 8c:b3:be:5a:26:e8:f8:9e:e2:b9:ed:14:2f:5e:56: 0f:a0:77:0b:d8:72:e5:16:21:45:7a:f2:a2:ad:15: fd:31:56:78:21:d1:8e:75:bc:86:dc:b0:1b:76:e1: ff:72:07:22:a6:ff:40:00:27:98:5d:6a:22:b0:21: b3:54:6f:5c:57:5a:54:6f:cf:2b:1a:19:ed:2c:67: 29:da:ee:5f:87:7a:d0:c6:16:35:6a:f9:0d:d7:20: b9:b9:41:d1:05:7c:fc:72:58:91:4d:aa:3e:74:2b: d6:13:ef:b8:b8:36:5f:24:a7:ad:79:42:99:57:ff: a3:b4:13:cf:54:22:28:2e:81:6e:fd:7c:f1:f8:8b: f1:e1:6a:f7:14:78:fe:47:3b:c2:9e:22:dd:60:79: 69:2d:77:8c:ea:5c:df:30:ea:4e:d4:c0:b6:31:37: 9a:d8:c6:e2:75:12:b9:a7:d3:27:b9:6e:e5:0b:d3: e3:cb:6b:f3:5f:63:12:28:e1:4c:b2:e6:d4:22:ad: 2c:84:31:a8:3b:b9:3d:f0:ad:f3:da:f1:aa:2e:12: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:66:AF:F2:0D:15:75:FE:82:02:08:B1:C2:E6:F6:71:A9:07:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41c1e839-7d6a-36b7-b7b2-99476a209991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.0.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fd:2c:a0:a1:4d:e9:0d:ec:d3:4b:5e:2a:54:5b:8f:8e:ec: 8d:74:08:65:c5:58:3f:00:f1:97:66:5d:0a:73:f5:d8:36:d9: 6c:6f:4f:08:f2:9d:f3:10:66:60:ec:5a:46:5d:64:ed:a8:aa: 97:86:2a:e9:94:5c:3b:9b:ca:6b:0d:3f:0e:b8:49:9a:ab:84: 29:73:62:49:ac:4d:76:2a:09:9e:df:19:a5:ef:76:72:ad:99: e7:4d:b6:e4:6c:dc:82:12:ee:60:30:b1:f2:fb:7c:9b:9e:23: 43:65:95:d6:4e:a0:0a:6a:fc:a8:94:71:c8:79:ea:49:5b:2c: 07:87:ca:42:81:dc:b7:03:e7:51:1a:f6:cb:c6:39:22:83:65: d5:36:1e:5c:70:67:a8:ae:5a:bb:9e:12:7a:93:74:16:13:d5: f0:6c:0c:57:fd:d3:6f:e6:11:d4:2a:01:e7:e2:9b:60:99:bf: 46:33:b4:82:1a:96:42:a1:19:cb:97:5d:c2:d3:ca:5d:99:5e: 08:f3:b1:b3:c0:25:12:5c:eb:6b:7a:0f:ba:f5:d8:5d:09:ae: c9:0c:97:d5:03:02:58:57:e6:79:61:22:c9:65:54:87:55:ea: 9c:70:27:b7:ab:9e:a5:e2:cf:5b:e5:f1:ff:49:2c:43:f4:cc: de:a1:8c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNPB0yqpdTYo34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MjY2MWEyNDYtZGI4NC00YjA0LTk0NTctZWFhYzRmNmZkZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDuVN8bHEmvuFRXSUiRUn87tY6R4+oG6l/r7 xYSOKG7pnH7xi/YlP6zvlxaMs75aJuj4nuK57RQvXlYPoHcL2HLlFiFFevKirRX9 MVZ4IdGOdbyG3LAbduH/cgcipv9AACeYXWoisCGzVG9cV1pUb88rGhntLGcp2u5f h3rQxhY1avkN1yC5uUHRBXz8cliRTao+dCvWE++4uDZfJKeteUKZV/+jtBPPVCIo LoFu/Xzx+Ivx4Wr3FHj+RzvCniLdYHlpLXeM6lzfMOpO1MC2MTea2MbidRK5p9Mn uW7lC9Pjy2vzX2MSKOFMsubUIq0shDGoO7k98K3z2vGqLhJtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+CZq/yDRV1/oICCLHC5vZxqQdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDFjMWU4MzktN2Q2YS0z NmI3LWI3YjItOTk0NzZhMjA5OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET9LKChTekN7NNLXipUW4+O7I10CGXFWD8A8ZdmXQpz9dg22WxvTwjy nfMQZmDsWkZdZO2oqpeGKumUXDubymsNPw64SZqrhClzYkmsTXYqCZ7fGaXvdnKt medNtuRs3IIS7mAwsfL7fJueI0NlldZOoApq/KiUcch56klbLAeHykKB3LcD51Ea 9svGOSKDZdU2HlxwZ6iuWrueEnqTdBYT1fBsDFf902/mEdQqAefim2CZv0YztIIa lkKhGcuXXcLTyl2ZXgjzsbPAJRJc62t6D7r12F0JrskMl9UDAlhX5nlhIsllVIdV 6pxwJ7ernqXiz1vl8f9JLEP0zN6hjDc= -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:46 2026 by rpki-client