$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20b96e80-afda-380c-9258-77ee97f2582c.roa File: 20b96e80-afda-380c-9258-77ee97f2582c.roa (raw, json) Hash identifier: y4mrguUeFdY5/HF+6OV+jH63/OGPlWeNGtPWPdm2sa8= Subject key identifier: 5C:A7:3E:D9:91:DE:14:3D:57:CD:08:B9:A7:8A:C5:08:BE:FB:82:6C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB8674858CCD23DB574AE0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20b96e80-afda-380c-9258-77ee97f2582c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 97.87.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:86:74:85:8c:cd:23:db:57:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=f99843af-4004-4854-85a9-4643a158a340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:82:5e:02:0a:58:28:1e:c9:b6:2a:32:ae: 3e:1d:d8:0c:ff:bc:f1:e4:90:c3:11:ea:c8:9d:25: dc:ad:6d:a6:fe:e7:bc:b1:a5:3d:1b:29:df:83:62: ee:a9:24:bd:ac:2d:7e:c4:d8:c8:37:0a:95:50:2b: c5:cc:70:a3:a1:a9:3c:c9:06:9e:db:a3:79:d2:2d: 01:38:74:62:60:be:76:3b:2c:38:85:0d:49:65:36: 88:3e:39:03:8a:2b:90:53:32:60:15:88:7c:49:8e: 4a:ad:6e:df:f4:b1:94:ec:91:ce:7c:cd:27:15:55: 95:92:a2:6e:b0:ea:aa:24:87:e5:a2:06:9c:c7:ee: f9:9c:5b:97:d8:62:b0:90:14:2b:be:12:d8:f7:29: 72:78:bf:79:0f:8b:a5:a5:d0:96:6b:b2:0d:e2:ea: 2a:cb:31:fd:d5:d4:dd:1e:64:ae:97:ed:95:0e:06: 7c:d4:7a:bf:f0:19:68:58:19:3a:cb:77:c5:f0:d0: 75:5d:6b:ac:6a:dd:22:02:a2:05:44:bf:dc:53:f8: 1a:34:4a:12:b0:a4:5e:72:9a:54:56:5d:18:de:d8: 3f:4a:13:b8:ac:fd:a2:d7:77:5c:5c:03:ef:61:25: d6:eb:11:4d:54:04:69:ec:1c:1b:89:30:aa:23:a5: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:3E:D9:91:DE:14:3D:57:CD:08:B9:A7:8A:C5:08:BE:FB:82:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20b96e80-afda-380c-9258-77ee97f2582c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.87.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4d:69:d6:46:ec:f2:4e:d2:31:27:9e:04:6e:d2:31:10:e9: 05:b1:59:1b:dc:a5:62:68:e7:80:eb:12:01:45:eb:91:cf:ff: 68:74:91:b6:db:a0:34:1d:82:d4:8b:e6:80:72:fe:b7:d4:3b: 48:c0:b9:38:f4:2b:47:53:69:84:76:cb:cb:a1:fd:52:38:a2: 5e:75:bc:fe:03:03:6a:a1:75:23:57:e3:61:01:a2:ad:cb:04: 30:e9:05:98:cb:bf:d3:62:ca:fd:db:b7:9a:23:64:a9:87:d3: 20:13:a8:f0:72:b3:d5:a9:58:c8:ff:51:00:23:72:6f:15:a4: 97:4d:52:c9:63:d2:fa:2e:33:c6:e9:d5:c9:52:70:88:5b:05: 63:10:01:b1:16:50:4c:82:cf:01:58:38:b9:96:dc:05:cf:b3: ee:d7:70:82:55:38:0d:b6:e0:4f:76:09:83:56:ed:a9:f2:90: 74:b7:4b:57:be:cf:4f:e1:4a:f3:29:c5:6e:28:de:3e:ab:ad: a5:2f:0a:89:d6:0f:9d:b1:70:a7:dc:2f:f7:fc:e7:2a:5c:40: 6e:cf:4a:04:28:0e:d4:eb:46:75:16:c2:b4:e4:7f:c0:65:d5: 83:04:c1:3e:1b:7b:b4:dc:0a:45:90:5b:ce:88:bd:c7:39:42: 5a:ec:44:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4Z0hYzNI9tXSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Zjk5ODQzYWYtNDAwNC00ODU0LTg1YTktNDY0M2ExNThhMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P6CXgIKWCgeybYqMq4+HdgM/7zx5JDDEerI nSXcrW2m/ue8saU9Gynfg2LuqSS9rC1+xNjINwqVUCvFzHCjoak8yQae26N50i0B OHRiYL52Oyw4hQ1JZTaIPjkDiiuQUzJgFYh8SY5KrW7f9LGU7JHOfM0nFVWVkqJu sOqqJIflogacx+75nFuX2GKwkBQrvhLY9ylyeL95D4ulpdCWa7IN4uoqyzH91dTd HmSul+2VDgZ81Hq/8BloWBk6y3fF8NB1XWusat0iAqIFRL/cU/gaNEoSsKRecppU Vl0Y3tg/ShO4rP2i13dcXAPvYSXW6xFNVARp7BwbiTCqI6Vx2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFynPtmR3hQ9V80IuaeKxQi++4JsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjBiOTZlODAtYWZkYS0z ODBjLTkyNTgtNzdlZTk3ZjI1ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtNadZG7PJO0jEnngRu0jEQ6QWxWRvcpWJo54DrEgFF65HP/2h0kbbb oDQdgtSL5oBy/rfUO0jAuTj0K0dTaYR2y8uh/VI4ol51vP4DA2qhdSNX42EBoq3L BDDpBZjLv9Niyv3bt5ojZKmH0yATqPBys9WpWMj/UQAjcm8VpJdNUslj0vouM8bp 1clScIhbBWMQAbEWUEyCzwFYOLmW3AXPs+7XcIJVOA224E92CYNW7anykHS3S1e+ z0/hSvMpxW4o3j6rraUvConWD52xcKfcL/f85ypcQG7PSgQoDtTrRnUWwrTkf8Bl 1YMEwT4be7TcCkWQW86Ivcc5QlrsRNE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:38 2026 by rpki-client