$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/238763af-5287-32a8-a256-de6cbfcd7132.roa File: 238763af-5287-32a8-a256-de6cbfcd7132.roa (raw, json) Hash identifier: 1Of+yKFMcb69lDX0/FHhESaGNqXnA188S2GnjPRhgaA= Subject key identifier: 19:31:AF:B0:2D:47:96:CF:81:70:71:47:A8:88:1D:DC:0F:C5:95:F5 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB4C81F53DE1192D633500 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/238763af-5287-32a8-a256-de6cbfcd7132.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.107.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:4c:81:f5:3d:e1:19:2d:63:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=fdd0e2a9-3430-47b1-8ac6-82cce0465f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:ca:f4:ec:38:87:c1:90:57:4b:06:04:3b: a7:c7:40:e3:65:25:e9:a4:54:6f:f8:54:21:e6:29: 22:ed:93:75:cf:a2:f7:22:71:d3:06:bf:ea:3a:49: b6:05:c6:30:9f:50:20:b4:6a:81:d9:08:88:5a:05: 93:d8:ac:9c:9a:4f:35:51:00:80:19:04:d0:36:a7: 53:a3:30:9b:99:de:e7:bb:79:08:b5:c6:6b:f2:e5: c9:fe:89:52:41:5f:36:b7:b0:1d:c4:df:26:07:9a: 63:7a:31:77:7e:b8:60:a9:48:49:ca:3b:16:52:1d: 2f:b8:85:97:b9:ac:d2:00:4c:58:ce:fc:0e:3a:e5: 13:9f:85:8e:70:1c:24:12:d8:9c:aa:d8:4f:eb:6b: 9a:39:6a:da:88:ac:7b:16:85:51:8c:4d:de:8b:bd: 01:16:a6:f4:7c:40:68:bd:fd:47:e2:67:bb:fe:ba: 23:a0:73:f8:6c:fa:9e:b7:5c:13:05:3b:52:ac:11: 60:9c:8b:fa:83:d4:de:a6:c4:0d:c2:32:16:15:14: 85:9b:51:5f:89:ba:42:35:20:e3:f3:f1:ab:cb:d4: 3a:0e:64:ec:4a:02:a4:ec:a2:b2:bd:64:6c:fc:a1: d4:ca:e1:9b:d1:61:d9:14:f1:67:cf:dc:fe:69:25: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:31:AF:B0:2D:47:96:CF:81:70:71:47:A8:88:1D:DC:0F:C5:95:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/238763af-5287-32a8-a256-de6cbfcd7132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.107.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9c:94:d4:bb:96:d6:71:27:14:f4:fa:0c:e1:d1:0a:90:91: f4:75:86:92:8b:a4:0d:b8:c4:d4:65:c9:d3:f2:85:66:c1:b3: 21:80:df:19:c8:b9:ea:c8:a5:93:f0:50:db:32:e0:17:4c:b0: 4e:3f:f9:18:fd:6c:55:24:91:20:3b:8b:0d:23:aa:e9:21:13: ab:2f:4a:0f:6c:30:ab:49:13:0f:11:a4:69:bf:5f:c1:ab:88: 00:d0:2a:cd:29:0a:70:d7:21:de:2d:eb:fc:1e:ea:a9:e9:f8: 6b:74:63:89:48:a5:1a:9b:ea:40:4d:29:0c:82:ca:e1:b0:63: d5:93:70:08:83:67:4e:c9:ef:4a:38:9e:3e:31:65:f7:c6:67: 7e:32:d6:25:d9:96:b0:d4:d7:2e:a5:21:7c:18:52:a0:dc:04: 27:58:a5:6c:79:30:44:9a:15:6a:32:da:61:c2:ab:54:85:b1: 3b:34:66:af:c2:f4:fa:15:a7:b2:11:2d:65:69:5a:70:8c:8c: 45:8e:f5:d5:25:a5:f3:6f:65:b8:50:db:ea:97:1b:1f:f6:f9: 00:05:e4:77:17:e1:d4:e9:a2:7e:9d:95:64:da:b6:b4:1e:46: 20:a3:ac:c1:e8:f5:07:10:a0:fc:8a:d3:96:b4:b5:f0:1f:1a: f5:bc:a2:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay0yB9T3hGS1jNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZmRkMGUyYTktMzQzMC00N2IxLThhYzYtODJjY2UwNDY1ZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBvK9Ow4h8GQV0sGBDunx0DjZSXppFRv+FQh 5iki7ZN1z6L3InHTBr/qOkm2BcYwn1AgtGqB2QiIWgWT2Kycmk81UQCAGQTQNqdT ozCbmd7nu3kItcZr8uXJ/olSQV82t7AdxN8mB5pjejF3frhgqUhJyjsWUh0vuIWX uazSAExYzvwOOuUTn4WOcBwkEticqthP62uaOWraiKx7FoVRjE3ei70BFqb0fEBo vf1H4me7/rojoHP4bPqet1wTBTtSrBFgnIv6g9TepsQNwjIWFRSFm1FfibpCNSDj 8/Gry9Q6DmTsSgKk7KKyvWRs/KHUyuGb0WHZFPFnz9z+aSXpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkxr7AtR5bPgXBxR6iIHdwPxZX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjM4NzYzYWYtNTI4Ny0z MmE4LWEyNTYtZGU2Y2JmY2Q3MTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGGuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGclNS7ltZxJxT0+gzh0QqQkfR1hpKLpA24xNRlydPyhWbBsyGA3xnI uerIpZPwUNsy4BdMsE4/+Rj9bFUkkSA7iw0jqukhE6svSg9sMKtJEw8RpGm/X8Gr iADQKs0pCnDXId4t6/we6qnp+Gt0Y4lIpRqb6kBNKQyCyuGwY9WTcAiDZ07J70o4 nj4xZffGZ34y1iXZlrDU1y6lIXwYUqDcBCdYpWx5MESaFWoy2mHCq1SFsTs0Zq/C 9PoVp7IRLWVpWnCMjEWO9dUlpfNvZbhQ2+qXGx/2+QAF5HcX4dTpon6dlWTatrQe RiCjrMHo9QcQoPyK05a0tfAfGvW8osI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:23 2026 by rpki-client