$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a028a7e-26df-3555-ab2b-95f10fc2fc44.roa File: 2a028a7e-26df-3555-ab2b-95f10fc2fc44.roa (raw, json) Hash identifier: RWHYyoHtxyVvb1/OLQzAKc4xk7SYpybxfFrrQ5+ttV0= Subject key identifier: 5D:D4:88:94:72:32:E6:AD:CF:B4:13:38:09:AB:BE:51:E6:D0:BD:97 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB579C2FD401CCEDAE7C80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a028a7e-26df-3555-ab2b-95f10fc2fc44.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.216.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:57:9c:2f:d4:01:cc:ed:ae:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=998c497f-7a88-425b-9b7b-7d682bdc5511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:e5:4d:55:4b:91:2f:59:60:28:9a:54:1d: 01:98:e4:1e:39:a9:0f:d0:c3:35:fc:11:d4:f2:fd: cb:fe:98:12:b8:67:58:02:db:87:ad:88:5f:cc:3c: ce:cc:93:91:81:f1:66:52:a8:99:2b:d8:5f:45:ce: 27:32:0e:fa:5d:2b:ac:74:21:d8:be:21:4e:c3:18: 9c:30:49:5a:73:a7:0e:dd:69:43:c2:19:c9:9b:2f: 9b:90:1e:cd:f2:27:e7:ad:79:71:fd:75:3c:e4:a6: 33:4d:1e:99:78:85:b4:7f:23:ea:14:7b:7c:de:12: f0:99:2e:58:61:01:bf:ca:17:c3:7a:24:5c:10:07: c6:1e:72:9e:12:3c:ab:f3:b7:d6:fa:eb:24:e3:5f: 73:53:00:08:c6:24:f2:44:e9:aa:95:1b:75:82:88: 7f:25:4a:12:89:35:79:95:1b:f6:1f:f8:50:23:11: 04:be:a8:f8:58:09:c1:b0:87:e9:3b:b4:58:c2:34: e7:fc:81:e8:a8:4e:f4:f4:fa:d7:e5:10:83:22:2a: 0f:dc:70:b9:01:c5:4b:8d:8f:41:e6:26:46:58:09: ee:df:25:b9:dd:2a:87:b4:48:40:a8:82:2f:30:ed: 9f:ce:41:a8:1d:b8:aa:39:b3:22:8f:0c:31:3b:4d: cc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D4:88:94:72:32:E6:AD:CF:B4:13:38:09:AB:BE:51:E6:D0:BD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a028a7e-26df-3555-ab2b-95f10fc2fc44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.216.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:aa:b3:95:b3:2d:28:a8:a9:75:a5:93:2a:9a:2c:3f:d4:f5: 6d:15:6f:72:57:4e:35:55:ab:54:59:ff:ba:8a:fb:45:b6:5c: 00:2c:78:89:22:6c:6c:22:b4:3d:02:25:31:d5:6d:42:a3:bf: 4d:98:85:21:56:78:cb:15:8b:ca:c2:18:e5:73:08:4a:10:85: 1c:e9:77:64:6e:9d:e1:5f:47:4b:68:31:6e:53:89:b1:be:0b: 9d:6c:f0:19:56:38:b6:b9:6c:ca:18:5d:2b:c4:f0:a4:aa:a6: 8a:ad:96:99:17:45:69:f2:9d:78:04:41:1e:b7:1d:ef:ca:52: 9e:b6:6c:17:fe:96:ff:78:b9:e7:73:d6:33:ad:f2:0b:3c:21: 55:db:f3:09:37:4c:4d:94:fd:b5:85:35:a1:77:20:9b:0b:92: f2:25:48:c4:69:c7:e9:20:fa:9a:fe:12:6f:04:2c:1c:24:f6: 08:5a:95:16:93:70:9a:91:37:b1:0a:aa:06:65:cb:b7:e5:70: c4:26:90:83:7b:50:ce:d2:63:94:11:b1:30:59:26:71:95:63: fb:b5:10:78:07:e3:fc:17:5b:e9:0f:b0:45:07:40:37:7a:95: 22:f3:68:ab:ef:74:22:8a:2f:0a:1a:f1:14:66:ca:2b:86:4f: 59:2a:2f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay1ecL9QBzO2ufIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OTk4YzQ5N2YtN2E4OC00MjViLTliN2ItN2Q2ODJiZGM1NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1jlTVVLkS9ZYCiaVB0BmOQeOakP0MM1/BHU 8v3L/pgSuGdYAtuHrYhfzDzOzJORgfFmUqiZK9hfRc4nMg76XSusdCHYviFOwxic MElac6cO3WlDwhnJmy+bkB7N8ifnrXlx/XU85KYzTR6ZeIW0fyPqFHt83hLwmS5Y YQG/yhfDeiRcEAfGHnKeEjyr87fW+usk419zUwAIxiTyROmqlRt1goh/JUoSiTV5 lRv2H/hQIxEEvqj4WAnBsIfpO7RYwjTn/IHoqE709PrX5RCDIioP3HC5AcVLjY9B 5iZGWAnu3yW53SqHtEhAqIIvMO2fzkGoHbiqObMijwwxO03M5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3UiJRyMuatz7QTOAmrvlHm0L2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmEwMjhhN2UtMjZkZi0z NTU1LWFiMmItOTVmMTBmYzJmYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGNjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyqs5WzLSioqXWlkyqaLD/U9W0Vb3JXTjVVq1RZ/7qK+0W2XAAseIki bGwitD0CJTHVbUKjv02YhSFWeMsVi8rCGOVzCEoQhRzpd2RuneFfR0toMW5TibG+ C51s8BlWOLa5bMoYXSvE8KSqpoqtlpkXRWnynXgEQR63He/KUp62bBf+lv94uedz 1jOt8gs8IVXb8wk3TE2U/bWFNaF3IJsLkvIlSMRpx+kg+pr+Em8ELBwk9ghalRaT cJqRN7EKqgZly7flcMQmkIN7UM7SY5QRsTBZJnGVY/u1EHgH4/wXW+kPsEUHQDd6 lSLzaKvvdCKKLwoa8RRmyiuGT1kqL+M= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:00 2026 by rpki-client