$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0609bd5a-968b-3376-9d73-cd1407b06b8a.roa File: 0609bd5a-968b-3376-9d73-cd1407b06b8a.roa (raw, json) Hash identifier: Oi0fP0qTk7OOEUsGGx2wbRj5HDxIQ73napjpk28ZFEQ= Subject key identifier: 16:E8:07:80:A3:27:C9:8F:2F:22:E6:0F:D7:21:E1:E5:6B:28:B9:F1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CABAA831A6AB23EF00CD00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0609bd5a-968b-3376-9d73-cd1407b06b8a.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 71.88.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:ba:a8:31:a6:ab:23:ef:00:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=8eca408e-765f-4cee-abf6-64e25042cdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:04:a5:cf:bd:3e:86:19:b3:0c:04:6b:92: 81:6e:fb:09:ca:13:40:3c:79:d8:fd:a0:eb:53:4b: a9:7e:7b:cc:63:64:95:57:11:29:bd:a9:cc:3f:45: bb:ef:a4:87:9a:9a:2b:c8:3a:e3:25:2c:76:da:68: 7d:eb:5d:22:56:e2:f2:93:b4:10:62:ea:02:9b:db: de:f2:8a:78:00:9b:ad:4e:75:e0:b9:bd:08:02:dd: 69:5c:d7:0f:41:b8:9d:57:d4:28:75:84:ae:14:63: d8:d8:5a:b2:c0:9a:5f:15:38:f8:52:b4:9e:24:df: 8e:f2:cd:26:db:49:a4:0b:0f:d3:59:92:10:1d:dc: 9f:8e:05:d6:34:1e:f3:2d:8d:aa:d3:36:22:88:5a: da:42:4a:ca:5a:b2:ce:76:fc:a3:73:dd:ba:27:e4: d1:34:29:40:a7:8c:d7:a4:4a:d8:08:9a:da:f8:6c: e7:98:05:bb:57:37:4b:27:81:f8:8b:dd:f1:b0:cb: 8a:ca:1c:79:74:18:c0:3a:af:e2:74:ed:30:cf:75: 07:35:3d:b4:8e:0c:67:70:7a:ea:2f:06:6f:b2:52: 43:88:b2:7e:83:6f:45:9e:6c:8e:06:d8:af:28:9f: 79:b3:db:66:e2:6d:a7:e7:b8:2b:b3:44:b3:a5:1f: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E8:07:80:A3:27:C9:8F:2F:22:E6:0F:D7:21:E1:E5:6B:28:B9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0609bd5a-968b-3376-9d73-cd1407b06b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.88.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:94:70:f2:c3:04:dc:f1:0c:94:39:d1:90:27:02:0f:58:bc: 0b:55:35:aa:93:05:61:03:10:23:7b:46:81:7e:8d:25:3c:1a: 70:03:1a:db:4a:66:a8:4d:34:4a:4b:3b:7c:35:70:d3:08:63: 48:07:73:f7:70:48:02:29:62:4f:99:7a:63:ea:4a:c9:1d:2b: a6:c8:fb:97:d8:1c:f7:d4:54:fb:cc:1e:95:ef:96:2d:d0:1a: fa:98:04:58:fa:f6:1e:f2:8b:df:eb:82:22:b8:63:71:b1:06: 13:b1:2c:20:0b:0c:14:2f:9e:ab:48:00:6d:02:71:7e:86:50: 0b:38:f4:3b:b7:e2:3d:d3:50:df:0b:df:d1:0b:39:cc:aa:85: 1e:a8:ca:33:69:98:e6:44:30:13:d0:15:e0:f1:f4:b5:6d:d8: 40:3b:07:84:d3:f8:5e:12:0e:19:c3:f1:f7:c6:9c:63:c5:92: 05:d8:e0:89:81:0e:3a:02:30:5c:78:e2:e3:54:c2:f9:e4:be: f7:93:07:47:6a:6d:7f:18:d5:58:df:b9:13:30:15:b3:90:7c: 2a:ca:8b:0a:b0:48:a0:82:a1:68:65:77:de:61:3c:0e:e6:eb: 5c:7b:f3:fe:f6:a2:28:1f:69:7b:d8:f7:f6:18:2f:73:3a:36: 23:99:bc:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyrqoMaarI+8AzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OGVjYTQwOGUtNzY1Zi00Y2VlLWFiZjYtNjRlMjUwNDJjZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof4Epc+9PoYZswwEa5KBbvsJyhNAPHnY/aDr U0upfnvMY2SVVxEpvanMP0W776SHmporyDrjJSx22mh9610iVuLyk7QQYuoCm9ve 8op4AJutTnXgub0IAt1pXNcPQbidV9QodYSuFGPY2FqywJpfFTj4UrSeJN+O8s0m 20mkCw/TWZIQHdyfjgXWNB7zLY2q0zYiiFraQkrKWrLOdvyjc926J+TRNClAp4zX pErYCJra+GznmAW7VzdLJ4H4i93xsMuKyhx5dBjAOq/idO0wz3UHNT20jgxncHrq LwZvslJDiLJ+g29FnmyOBtivKJ95s9tm4m2n57grs0SzpR9sqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBboB4CjJ8mPLyLmD9ch4eVrKLnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDYwOWJkNWEtOTY4Yi0z Mzc2LTlkNzMtY2QxNDA3YjA2YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGUcPLDBNzxDJQ50ZAnAg9YvAtVNaqTBWEDECN7RoF+jSU8GnADGttK ZqhNNEpLO3w1cNMIY0gHc/dwSAIpYk+ZemPqSskdK6bI+5fYHPfUVPvMHpXvli3Q GvqYBFj69h7yi9/rgiK4Y3GxBhOxLCALDBQvnqtIAG0CcX6GUAs49Du34j3TUN8L 39ELOcyqhR6oyjNpmOZEMBPQFeDx9LVt2EA7B4TT+F4SDhnD8ffGnGPFkgXY4ImB DjoCMFx44uNUwvnkvveTB0dqbX8Y1VjfuRMwFbOQfCrKiwqwSKCCoWhld95hPA7m 61x78/72oigfaXvY9/YYL3M6NiOZvFI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:22:26 2026 by rpki-client