$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1aa6dd1f-94f4-3e56-8d41-f4e44e785e5e.roa File: 1aa6dd1f-94f4-3e56-8d41-f4e44e785e5e.roa (raw, json) Hash identifier: tAH7SAs+Q5ObSEmDzMkbZW9VoVJSQanZym0MntNYfEU= Subject key identifier: A7:A2:20:E0:A4:8C:9F:56:64:41:25:8B:E1:AD:B0:0B:2F:03:5A:6F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB7F5BEEA372C1AA8BDAF0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1aa6dd1f-94f4-3e56-8d41-f4e44e785e5e.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 71.84.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:7f:5b:ee:a3:72:c1:aa:8b:da:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=0fd7b7fe-a435-4a94-892c-eaa62a4c0a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:b4:d2:3d:eb:f0:d2:e9:cf:84:ef:89:f6: bc:1f:13:12:82:05:63:30:a0:17:88:ed:26:d7:91: bb:bc:99:29:e8:77:8b:67:70:f1:9d:62:c0:40:54: 86:30:ad:c8:58:44:59:48:6a:ed:10:0c:a0:2d:b3: fc:7a:91:6a:79:12:8f:38:b5:92:68:0f:26:e7:a8: ef:6e:22:90:2e:86:ec:8c:cf:06:e0:52:1c:be:85: fa:61:6e:4a:f6:c6:1b:99:49:6c:3b:92:cc:d8:cb: cc:f4:7b:e8:b5:79:b7:ac:21:82:54:d2:18:49:46: 08:fe:bb:09:93:72:ce:c9:15:75:9a:80:41:0d:1b: d6:26:da:81:2b:53:71:4b:90:71:d5:cc:d4:8d:5a: 55:d2:2d:76:83:cc:70:91:27:f8:da:6d:fb:dd:98: 0b:5d:18:4b:46:85:a7:6c:65:30:66:23:f3:e2:9b: 12:bc:81:fe:c5:1f:5f:12:65:38:76:93:b0:ca:98: 59:c0:76:9b:2a:16:a8:c2:25:62:8d:2c:aa:9d:15: bc:36:3d:0b:ee:3e:a9:fe:6c:e3:e0:64:f0:4f:4f: f4:e6:07:61:1e:6c:58:c5:a9:66:81:f0:cf:aa:ca: de:1f:dd:e9:9a:8e:74:92:67:b1:23:7f:9e:aa:c2: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A2:20:E0:A4:8C:9F:56:64:41:25:8B:E1:AD:B0:0B:2F:03:5A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1aa6dd1f-94f4-3e56-8d41-f4e44e785e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.84.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cf:54:69:2b:09:2a:ba:25:10:71:35:ad:ee:a5:f4:9d:ae: ef:2f:30:e6:37:f8:b6:57:5c:e6:67:10:af:1a:12:8e:60:e8: 81:e8:15:b9:b4:24:24:8b:04:b0:96:69:51:f9:f1:a1:22:88: 5c:07:3a:4d:1e:e6:e0:fe:d3:af:71:e3:24:50:fb:ca:c7:c3: 03:22:2a:1f:c0:bb:98:5d:f5:23:33:25:da:67:b7:7e:02:a6: b1:c1:01:43:31:88:52:f8:f9:be:9c:69:96:dc:0b:8a:44:10: 68:17:29:35:17:2d:18:0f:46:46:74:c9:0b:14:ea:a4:59:1b: 13:ff:0e:a9:02:de:f4:9a:3d:85:54:5d:00:c8:db:07:c7:8a: b8:be:4d:02:e0:7d:72:65:af:5e:12:5d:b6:3f:3a:9d:dd:69: e3:3e:01:63:a8:71:94:5a:19:d0:51:7a:75:1b:78:65:84:c8: 8d:43:f7:ec:d8:d1:c8:f5:02:2a:48:65:d9:23:2d:30:2d:1e: a4:9a:c9:07:41:43:51:ac:08:0d:27:0f:0d:b9:ee:86:99:96: a8:28:04:b3:e1:8e:2b:8f:28:4a:f0:62:02:a2:be:11:c9:62: 7b:55:75:d7:2c:39:11:97:e5:9a:b4:fd:e9:9f:e9:5e:a5:63: c5:fa:68:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay39b7qNywaqL2vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MGZkN2I3ZmUtYTQzNS00YTk0LTg5MmMtZWFhNjJhNGMwYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyi00j3r8NLpz4Tvifa8HxMSggVjMKAXiO0m 15G7vJkp6HeLZ3DxnWLAQFSGMK3IWERZSGrtEAygLbP8epFqeRKPOLWSaA8m56jv biKQLobsjM8G4FIcvoX6YW5K9sYbmUlsO5LM2MvM9HvotXm3rCGCVNIYSUYI/rsJ k3LOyRV1moBBDRvWJtqBK1NxS5Bx1czUjVpV0i12g8xwkSf42m373ZgLXRhLRoWn bGUwZiPz4psSvIH+xR9fEmU4dpOwyphZwHabKhaowiVijSyqnRW8Nj0L7j6p/mzj 4GTwT0/05gdhHmxYxalmgfDPqsreH93pmo50kmexI3+eqsJw0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeiIOCkjJ9WZEEli+GtsAsvA1pvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWFhNmRkMWYtOTRmNC0z ZTU2LThkNDEtZjRlNDRlNzg1ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1TwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHPVGkrCSq6JRBxNa3upfSdru8vMOY3+LZXXOZnEK8aEo5g6IHoFbm0 JCSLBLCWaVH58aEiiFwHOk0e5uD+069x4yRQ+8rHwwMiKh/Au5hd9SMzJdpnt34C prHBAUMxiFL4+b6caZbcC4pEEGgXKTUXLRgPRkZ0yQsU6qRZGxP/DqkC3vSaPYVU XQDI2wfHiri+TQLgfXJlr14SXbY/Op3daeM+AWOocZRaGdBRenUbeGWEyI1D9+zY 0cj1AipIZdkjLTAtHqSayQdBQ1GsCA0nDw257oaZlqgoBLPhjiuPKErwYgKivhHJ YntVddcsORGX5Zq0/emf6V6lY8X6aH0= -----END CERTIFICATE-----Generated at Thu Mar 26 05:20:14 2026 by rpki-client