$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/081322bf-a78d-3991-85dd-fb8724769c3d.roa File: 081322bf-a78d-3991-85dd-fb8724769c3d.roa (raw, json) Hash identifier: 2PCGNoAd1mR/i4A9nVmYxQJU/BU6SMFRWVJb871Gkec= Subject key identifier: A5:A2:3A:49:F8:71:72:31:8F:BC:B5:9B:30:57:BF:9F:DE:0C:93:C1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAC60ED4DC3AEA036A2358 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/081322bf-a78d-3991-85dd-fb8724769c3d.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.241.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:c6:0e:d4:dc:3a:ea:03:6a:23:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=0120547e-a80e-40d0-86af-6bae2adf3784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:b4:62:1a:52:bb:37:5a:5d:71:f4:f1:60: a4:55:06:9e:c1:aa:c6:c4:6b:e1:23:5e:73:62:8d: 92:e8:c5:f5:be:1d:f7:4b:f5:93:a0:53:51:17:2f: b4:ec:c9:53:69:21:73:44:7a:cc:b8:a2:98:86:e0: eb:cb:c0:4c:3b:0b:2d:be:bc:2f:7d:f7:94:a7:df: c2:2c:de:dc:33:9c:a3:1b:2e:2f:42:fb:57:72:72: 6a:1e:61:76:86:55:6c:04:5f:15:36:1f:cf:25:3e: dc:89:c9:11:fd:25:00:b0:6b:55:1c:3f:03:c5:70: 7e:e2:d1:d8:a3:1e:4a:8e:bd:01:73:ee:5f:ef:fc: 14:36:26:81:d4:de:7f:ef:05:e0:53:f0:2c:58:26: ca:1d:2f:39:a1:d9:6d:f3:da:e3:56:7b:d8:c3:63: ae:96:9b:2a:e4:c8:69:75:7c:09:38:ee:24:85:81: 17:ae:a2:00:07:94:60:f8:07:7b:14:12:57:fe:f9: 01:e1:71:f2:67:6a:16:99:f5:b8:54:a5:6b:fc:74: 84:9d:67:f0:8b:6e:04:b3:c9:7a:c7:61:86:78:b0: 1a:ba:7d:c5:05:cf:36:35:69:09:ad:4a:07:9e:1a: 18:55:11:21:52:2e:09:38:e9:24:e9:fc:76:e6:0f: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A2:3A:49:F8:71:72:31:8F:BC:B5:9B:30:57:BF:9F:DE:0C:93:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/081322bf-a78d-3991-85dd-fb8724769c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.241.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b6:c7:c1:9b:da:52:8f:8c:2f:e9:f2:6d:6b:a9:31:a5:8b: 68:39:72:c6:cc:44:2b:4d:b1:86:5f:dc:ec:f1:d8:e2:28:5b: 43:a0:d0:83:ea:93:11:92:59:dd:48:f0:21:24:14:a0:eb:e9: 57:a3:b1:9c:65:64:9b:cc:92:20:02:08:4f:f5:5a:2e:ed:d1: 28:c7:32:1e:d4:b1:0c:7b:09:95:81:8c:96:28:7a:64:e8:15: 89:59:f5:21:63:d4:25:62:8c:66:a6:7a:b1:8b:00:46:62:3a: 73:2c:9c:ae:8b:34:0d:55:42:a5:d1:3b:bf:7b:c5:43:30:c0: d1:a3:40:17:14:d1:b3:0c:c7:68:68:91:e9:45:f7:30:04:e3: 1f:ec:f1:16:d2:6c:f9:02:58:01:fa:3a:b6:84:15:99:d3:4f: 01:32:39:cd:f0:af:04:71:db:90:51:e6:a5:48:a9:f0:be:a0: 0e:f0:e3:9e:58:b2:a1:e2:78:37:cd:13:1c:d3:d8:cf:11:a1: 3d:39:71:09:c5:17:76:7d:7b:88:15:2b:25:48:d2:66:91:a2: 55:c7:35:9e:5d:b7:09:d9:e6:a7:44:0d:7c:25:5f:66:ce:97: da:72:3a:52:89:1b:3a:c8:fe:04:23:e7:9f:da:b0:43:1f:64: c2:b7:b1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AysYO1Nw66gNqI1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MDEyMDU0N2UtYTgwZS00MGQwLTg2YWYtNmJhZTJhZGYzNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVK0YhpSuzdaXXH08WCkVQaewarGxGvhI15z Yo2S6MX1vh33S/WToFNRFy+07MlTaSFzRHrMuKKYhuDry8BMOwstvrwvffeUp9/C LN7cM5yjGy4vQvtXcnJqHmF2hlVsBF8VNh/PJT7cickR/SUAsGtVHD8DxXB+4tHY ox5Kjr0Bc+5f7/wUNiaB1N5/7wXgU/AsWCbKHS85odlt89rjVnvYw2Oulpsq5Mhp dXwJOO4khYEXrqIAB5Rg+Ad7FBJX/vkB4XHyZ2oWmfW4VKVr/HSEnWfwi24Es8l6 x2GGeLAaun3FBc82NWkJrUoHnhoYVREhUi4JOOkk6fx25g939wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWiOkn4cXIxj7y1mzBXv5/eDJPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDgxMzIyYmYtYTc4ZC0z OTkxLTg1ZGQtZmI4NzI0NzY5YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe2x8Gb2lKPjC/p8m1rqTGli2g5csbMRCtNsYZf3Ozx2OIoW0Og0IPq kxGSWd1I8CEkFKDr6VejsZxlZJvMkiACCE/1Wi7t0SjHMh7UsQx7CZWBjJYoemTo FYlZ9SFj1CVijGamerGLAEZiOnMsnK6LNA1VQqXRO797xUMwwNGjQBcU0bMMx2ho kelF9zAE4x/s8RbSbPkCWAH6OraEFZnTTwEyOc3wrwRx25BR5qVIqfC+oA7w455Y sqHieDfNExzT2M8RoT05cQnFF3Z9e4gVKyVI0maRolXHNZ5dtwnZ5qdEDXwlX2bO l9pyOlKJGzrI/gQj55/asEMfZMK3sZs= -----END CERTIFICATE-----Generated at Thu Mar 26 06:29:51 2026 by rpki-client