$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b575ac7e-82ce-3839-895d-e818ce68d7fa.roa File: b575ac7e-82ce-3839-895d-e818ce68d7fa.roa (raw, json) Hash identifier: 4BxWiQMDEhqS9wlJD4ddCSjtU1ThwoFswmJBkStHXWA= Subject key identifier: 99:BF:21:13:52:7C:02:01:DF:66:C9:24:FC:B1:6B:CF:C5:AD:20:36 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D32E31723CE7BE95B76003C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b575ac7e-82ce-3839-895d-e818ce68d7fa.roa Signing time: Tue 17 Mar 2026 13:29:33 +0000 ROA not before: Tue 17 Mar 2026 13:29:33 +0000 ROA not after: Mon 15 Jun 2026 13:29:33 +0000 asID: 11059 IP address blocks: 74.2.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:e3:17:23:ce:7b:e9:5b:76:00:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 17 13:29:33 2026 GMT Not After : Jun 15 13:29:33 2026 GMT Subject: CN=8989a431-b1d7-4ff7-ab2b-e2af6069cb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:74:43:1f:f6:5f:6b:1c:b1:20:6c:44:c4: 8d:8c:3b:68:68:46:5d:f5:9d:48:e3:b9:6f:31:4e: a5:1e:b9:1e:f7:55:f8:3e:26:29:35:1d:02:ca:d9: d1:1a:aa:cd:7a:bc:80:e0:f6:c3:b6:21:3f:f5:06: 28:f2:c1:03:ba:73:5f:d2:5c:6d:56:db:e8:8a:e3: 0d:8c:46:ad:ae:59:92:a2:b3:83:af:8d:a1:04:de: e4:15:a2:09:39:65:ff:cd:c3:f4:20:0b:e0:a8:9c: 36:c0:2b:c0:07:ba:bc:63:50:2f:34:79:81:49:6d: 04:47:72:30:4f:61:c7:b9:cc:40:7c:03:a9:11:bd: 37:82:fb:60:6d:ae:16:68:4a:9e:6b:62:71:7b:96: 89:7f:11:d9:74:b9:8d:08:8a:1a:a7:56:c6:a4:b3: eb:3f:d7:a4:90:0b:b6:d4:a4:da:2a:f4:c1:68:ed: 30:84:4a:cd:6b:9e:23:82:da:9b:64:69:94:4c:78: a2:16:52:36:48:13:1c:d5:94:9b:e5:3b:48:69:e0: 24:44:d0:81:dd:d1:6e:81:3a:e5:bc:9e:ca:cf:02: d6:6d:3f:3c:01:93:a4:d1:68:46:cc:68:81:2c:17: 02:69:fc:f6:84:6b:64:58:73:56:1b:2a:1a:6e:ed: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BF:21:13:52:7C:02:01:DF:66:C9:24:FC:B1:6B:CF:C5:AD:20:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b575ac7e-82ce-3839-895d-e818ce68d7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8e:fd:11:48:ae:93:41:84:cc:f9:d9:33:7e:1c:a3:c2:36: 7f:26:47:25:cf:93:12:ff:a8:1f:2c:1c:bf:16:5e:16:53:a9: 08:ef:23:ff:84:56:f3:22:fc:98:31:51:d9:75:bb:eb:e2:ef: 5c:76:86:33:0a:6c:38:bd:28:f7:ab:1a:c5:5e:2d:66:e3:53: 7c:4e:f8:59:26:87:46:35:43:1e:cd:b9:6d:fb:82:79:55:78: e5:dd:14:42:9c:a9:ae:f7:bf:af:b2:99:3b:7d:f9:87:09:a5: af:49:6c:c7:8a:05:c3:ca:41:7d:26:7d:b7:d1:0b:9b:f7:20: 8c:4b:30:76:62:da:f8:37:a1:5e:5c:fa:3b:4d:0c:62:12:8e: 39:ad:d2:ce:47:ab:88:5c:6d:0d:ec:97:d5:92:22:49:af:6f: 70:e9:73:c2:51:83:5a:42:91:60:56:bd:9e:9a:a7:4e:17:bd: 3d:dd:a0:b4:76:8a:b3:c2:6d:5b:14:5d:ed:a3:d9:3a:0b:c9: 1a:50:2c:b1:ab:37:9e:b6:0d:d0:14:cd:aa:ae:e3:5b:91:42: a9:0a:e5:02:b3:35:d3:db:34:2e:89:a1:37:8f:b3:81:2b:9c: f1:fd:f4:8e:84:49:7c:82:2e:05:4c:79:2d:30:90:20:e1:c6: db:5d:77:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y4xcjznvpW3YAPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNzEzMjkzM1oXDTI2MDYxNTEzMjkzM1owLzEtMCsGA1UEAxMk ODk4OWE0MzEtYjFkNy00ZmY3LWFiMmItZTJhZjYwNjljYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1h0Qx/2X2scsSBsRMSNjDtoaEZd9Z1I47lv MU6lHrke91X4PiYpNR0CytnRGqrNeryA4PbDtiE/9QYo8sEDunNf0lxtVtvoiuMN jEatrlmSorODr42hBN7kFaIJOWX/zcP0IAvgqJw2wCvAB7q8Y1AvNHmBSW0ER3Iw T2HHucxAfAOpEb03gvtgba4WaEqea2Jxe5aJfxHZdLmNCIoap1bGpLPrP9ekkAu2 1KTaKvTBaO0whErNa54jgtqbZGmUTHiiFlI2SBMc1ZSb5TtIaeAkRNCB3dFugTrl vJ7KzwLWbT88AZOk0WhGzGiBLBcCafz2hGtkWHNWGyoabu0iQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm/IRNSfAIB32bJJPyxa8/FrSA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjU3NWFjN2UtODJjZS0z ODM5LTg5NWQtZTgxOGNlNjhkN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmO/RFIrpNBhMz52TN+HKPCNn8mRyXPkxL/qB8sHL8WXhZTqQjvI/+E VvMi/JgxUdl1u+vi71x2hjMKbDi9KPerGsVeLWbjU3xO+Fkmh0Y1Qx7NuW37gnlV eOXdFEKcqa73v6+ymTt9+YcJpa9JbMeKBcPKQX0mfbfRC5v3IIxLMHZi2vg3oV5c +jtNDGISjjmt0s5Hq4hcbQ3sl9WSIkmvb3Dpc8JRg1pCkWBWvZ6ap04XvT3doLR2 irPCbVsUXe2j2ToLyRpQLLGrN562DdAUzaqu41uRQqkK5QKzNdPbNC6JoTePs4Er nPH99I6ESXyCLgVMeS0wkCDhxttddx0= -----END CERTIFICATE-----Generated at Thu Mar 26 04:47:01 2026 by rpki-client