$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1aa93ee2-b133-385b-982c-a1ea3baa0af6.roa File: 1aa93ee2-b133-385b-982c-a1ea3baa0af6.roa (raw, json) Hash identifier: 4s3LVZibOtK0SIblNNjmeUqaztjRf3HD0967Q3HnmJg= Subject key identifier: FF:BD:6A:6B:3A:1F:EB:70:6F:63:41:25:83:C4:DC:13:27:B3:82:8F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D359FE8083EB833E5C07AB080 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1aa93ee2-b133-385b-982c-a1ea3baa0af6.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 0 IP address blocks: 131.150.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:e8:08:3e:b8:33:e5:c0:7a:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=0e401ce4-a6b8-4881-9dc9-ab494758fb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:43:b2:44:84:4f:61:35:1d:a5:16:81:4f: f0:7e:e2:60:4d:7a:a0:37:55:18:15:a2:63:19:e7: 70:48:25:3f:08:cd:b0:0d:03:1e:77:c0:92:34:53: 25:83:38:9e:b3:2e:60:45:53:ba:ea:e9:ac:35:a1: 03:e4:48:a7:d7:ee:b4:1e:70:d4:97:e3:48:e8:cb: 72:72:27:45:0b:69:21:d2:6b:c8:d6:37:75:f5:4e: 92:fc:71:37:ed:ff:b6:3f:6f:d3:4b:60:36:dd:56: cb:ff:11:54:a5:6d:54:9c:c3:e5:01:db:59:f1:a0: fb:82:ed:40:68:d6:78:8f:d8:8d:cc:97:18:83:4f: 4b:c1:0e:ac:7d:2d:71:a1:ae:04:8f:8e:ee:88:30: c4:87:78:98:b6:3c:cc:73:83:70:79:b4:8a:f8:54: bd:dc:3b:fc:3b:b5:5a:8b:0a:82:14:fe:af:64:19: cf:e9:94:10:7f:38:65:e5:1b:34:f2:6a:00:71:eb: 62:0c:19:cb:8f:86:1a:4d:64:ad:01:3f:33:ad:00: 60:72:ce:ea:e7:4d:34:83:2f:36:db:fe:c3:c1:c7: 86:21:12:64:02:f7:09:8d:bf:79:97:13:8c:fc:ac: 6e:10:d1:99:67:c7:77:a1:ea:85:f2:d7:ba:5a:b2: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:6A:6B:3A:1F:EB:70:6F:63:41:25:83:C4:DC:13:27:B3:82:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1aa93ee2-b133-385b-982c-a1ea3baa0af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.150.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f6:42:c7:91:27:64:3c:d1:45:8d:06:07:65:d2:cd:05:6e: af:53:62:3c:44:61:44:a5:39:b6:27:de:57:c7:45:59:10:fc: f5:fd:95:ce:d7:0d:ae:40:9b:48:be:65:b6:6f:ea:f4:12:2e: dd:7a:3a:07:1c:58:13:4c:98:66:fc:d9:78:ce:68:5a:c1:7f: 18:4f:8b:f6:8e:e0:55:f7:df:a1:8e:ae:e0:23:62:47:04:53: 7e:86:f3:8c:b3:aa:7d:68:0e:94:7a:c6:9b:dd:d1:2b:cc:92: 81:2e:3d:34:ff:52:95:ba:59:30:53:29:67:29:e3:27:c3:3a: 14:ae:ed:c6:a2:88:52:1c:6c:16:f2:da:4a:97:0c:7c:3c:d6: 5c:8f:80:cc:2f:18:8a:b0:98:1e:2a:f1:24:08:1f:5e:b1:12: db:81:69:6d:a6:20:3f:bb:8e:e2:0b:4e:75:66:b4:57:03:05: 21:ac:f6:42:e9:a8:fa:fe:7a:a6:af:80:c9:33:6c:af:4c:2c: 17:41:13:78:06:5e:f2:ba:91:0e:b5:82:f0:95:81:82:fe:9f: 34:d6:99:84:d6:6b:b8:9b:ec:cb:9a:6e:36:9f:85:10:8d:4f: b6:48:40:aa:0b:10:d3:99:8b:57:62:a6:8c:7c:4f:64:23:36: f9:48:77:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+gIPrgz5cB6sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MGU0MDFjZTQtYTZiOC00ODgxLTlkYzktYWI0OTQ3NThmYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwFDskSET2E1HaUWgU/wfuJgTXqgN1UYFaJj GedwSCU/CM2wDQMed8CSNFMlgziesy5gRVO66umsNaED5Ein1+60HnDUl+NI6Mty cidFC2kh0mvI1jd19U6S/HE37f+2P2/TS2A23VbL/xFUpW1UnMPlAdtZ8aD7gu1A aNZ4j9iNzJcYg09LwQ6sfS1xoa4Ej47uiDDEh3iYtjzMc4NwebSK+FS93Dv8O7Va iwqCFP6vZBnP6ZQQfzhl5Rs08moAcetiDBnLj4YaTWStAT8zrQBgcs7q5000gy82 2/7DwceGIRJkAvcJjb95lxOM/KxuENGZZ8d3oeqF8te6WrKXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+9ams6H+twb2NBJYPE3BMns4KPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWFhOTNlZTItYjEzMy0z ODViLTk4MmMtYTFlYTNiYWEwYWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5ZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK32QseRJ2Q80UWNBgdl0s0Fbq9TYjxEYUSlObYn3lfHRVkQ/PX9lc7X Da5Am0i+ZbZv6vQSLt16OgccWBNMmGb82XjOaFrBfxhPi/aO4FX336GOruAjYkcE U36G84yzqn1oDpR6xpvd0SvMkoEuPTT/UpW6WTBTKWcp4yfDOhSu7caiiFIcbBby 2kqXDHw81lyPgMwvGIqwmB4q8SQIH16xEtuBaW2mID+7juILTnVmtFcDBSGs9kLp qPr+eqavgMkzbK9MLBdBE3gGXvK6kQ61gvCVgYL+nzTWmYTWa7ib7MuabjafhRCN T7ZIQKoLENOZi1dipox8T2QjNvlIdyM= -----END CERTIFICATE-----Generated at Thu Mar 26 03:43:01 2026 by rpki-client