$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0cf0e2a4-f253-34cb-8b00-bdb6d6975b01.roa File: 0cf0e2a4-f253-34cb-8b00-bdb6d6975b01.roa (raw, json) Hash identifier: 8B1/On8tpZSh88s7S5nmGf6LG/k1fOUHBjTWOACaBtU= Subject key identifier: 6E:B7:E5:9B:7A:1D:C1:DE:29:4D:2F:7C:30:B4:84:28:11:B3:0D:46 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAB8DF2C0499CC2ECA2F00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0cf0e2a4-f253-34cb-8b00-bdb6d6975b01.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.158.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:b8:df:2c:04:99:cc:2e:ca:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=668b3fa9-4dc6-4182-9c6b-5a9200e264e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:e9:1d:19:0d:53:2e:74:2d:56:4c:e4:33: 53:45:e6:a8:60:45:f1:62:ba:0d:01:70:69:a0:9a: 5a:fd:6f:f9:2c:42:a2:77:bb:8b:5d:2e:ac:3b:00: b0:d2:80:49:26:a5:aa:ba:10:3b:e9:ae:79:97:38: 5a:e7:25:48:87:94:16:a2:02:08:0f:b8:0a:b0:53: 17:e9:d1:fa:87:52:08:f5:ea:34:cc:88:2c:37:a3: 15:0a:66:cd:72:15:99:73:b2:b9:73:bc:36:18:ee: 49:1c:b0:d9:09:94:6f:55:37:85:0b:28:00:f3:41: f9:58:25:3f:9e:03:70:75:31:13:fd:a7:2a:3c:0c: 64:e3:1c:e7:75:49:ee:17:d5:1f:81:c0:a2:80:8d: ca:0b:68:13:7d:b3:41:c5:a8:cb:3a:18:79:9d:8b: f4:c3:a9:74:21:d2:2d:ad:56:7f:26:8f:43:98:ee: 2c:3c:43:bc:e6:d0:d1:3a:28:3d:18:07:ab:ca:04: 84:03:18:40:c0:ce:11:1d:2c:9b:96:55:bb:b9:d2: 78:23:74:98:0c:9a:e9:18:2a:16:4e:24:10:ef:81: 2c:4c:7a:6c:cc:fc:3a:87:ee:2f:85:fe:a8:13:1f: bf:a6:f1:8f:dc:6e:6a:e0:0f:5b:fa:22:d0:2c:a1: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:E5:9B:7A:1D:C1:DE:29:4D:2F:7C:30:B4:84:28:11:B3:0D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0cf0e2a4-f253-34cb-8b00-bdb6d6975b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:07:12:5d:15:34:a3:b8:2c:5a:1a:75:61:db:fa:b2:7e:e2: 5f:b0:bf:0c:bb:78:c6:e1:66:3a:15:10:5b:0a:2c:2f:85:dd: 29:77:b1:76:5d:0a:2b:56:90:8a:68:f7:69:f2:61:1b:54:5f: 1e:24:6f:07:ce:f4:70:ba:23:11:40:0c:82:c5:8b:79:88:50: 2c:eb:8a:41:ad:ae:4d:6f:5b:3c:fd:d8:ea:c9:e2:77:dc:71: 22:21:e7:d5:1c:13:13:10:49:6b:71:4e:25:2a:8d:32:fe:f8: 3f:0a:17:35:bc:a8:cb:8a:91:5c:65:b6:7b:2a:de:68:95:b7: 5a:2c:65:15:64:dc:1e:d4:4c:69:ee:82:8a:83:64:e4:20:0b: 2b:ca:30:4f:ae:1a:b8:69:1c:06:e3:97:b5:c0:ad:e1:a7:7a: 5b:95:7a:d9:7e:18:10:c3:bd:af:b6:c9:f0:aa:19:6f:00:ff: a2:9b:93:bf:96:13:81:00:2e:6b:ac:2d:03:64:b3:a0:b7:f7: ff:b0:c7:fc:3b:85:60:2c:3a:f9:ce:c9:54:88:03:08:3e:d4: 1d:fb:93:9e:47:6d:99:81:48:92:70:6a:33:4c:75:dd:be:fb: 54:b4:ac:bb:97:bf:96:64:10:ad:c3:a3:d8:1a:43:15:dd:da: e8:a9:9d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyrjfLASZzC7KLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjY4YjNmYTktNGRjNi00MTgyLTljNmItNWE5MjAwZTI2NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbzpHRkNUy50LVZM5DNTReaoYEXxYroNAXBp oJpa/W/5LEKid7uLXS6sOwCw0oBJJqWquhA76a55lzha5yVIh5QWogIID7gKsFMX 6dH6h1II9eo0zIgsN6MVCmbNchWZc7K5c7w2GO5JHLDZCZRvVTeFCygA80H5WCU/ ngNwdTET/acqPAxk4xzndUnuF9UfgcCigI3KC2gTfbNBxajLOhh5nYv0w6l0IdIt rVZ/Jo9DmO4sPEO85tDROig9GAerygSEAxhAwM4RHSybllW7udJ4I3SYDJrpGCoW TiQQ74EsTHpszPw6h+4vhf6oEx+/pvGP3G5q4A9b+iLQLKHH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG635Zt6HcHeKU0vfDC0hCgRsw1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGNmMGUyYTQtZjI1My0z NGNiLThiMDAtYmRiNmQ2OTc1YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJ7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcHEl0VNKO4LFoadWHb+rJ+4l+wvwy7eMbhZjoVEFsKLC+F3Sl3sXZd CitWkIpo92nyYRtUXx4kbwfO9HC6IxFADILFi3mIUCzrikGtrk1vWzz92OrJ4nfc cSIh59UcExMQSWtxTiUqjTL++D8KFzW8qMuKkVxltnsq3miVt1osZRVk3B7UTGnu goqDZOQgCyvKME+uGrhpHAbjl7XAreGneluVetl+GBDDva+2yfCqGW8A/6Kbk7+W E4EALmusLQNks6C39/+wx/w7hWAsOvnOyVSIAwg+1B37k55HbZmBSJJwajNMdd2+ +1S0rLuXv5ZkEK3Do9gaQxXd2uipnaY= -----END CERTIFICATE-----Generated at Thu Mar 26 06:03:52 2026 by rpki-client