$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c97d55b-ad10-3483-b356-6c5f038026d0.roa File: 2c97d55b-ad10-3483-b356-6c5f038026d0.roa (raw, json) Hash identifier: w7eZbKGlQl9Vw0c39MeLRpNjBlxhxL0YVenw49v1TIw= Subject key identifier: F2:21:D4:67:D9:69:99:1A:D4:7F:09:D8:F8:39:FD:67:6F:81:CB:87 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB8A57D66790D818A07A80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c97d55b-ad10-3483-b356-6c5f038026d0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 96.38.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:8a:57:d6:67:90:d8:18:a0:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=1bd0c597-5928-49e9-b15a-8779397ea12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:fb:73:f9:08:53:29:25:e4:41:94:9f:41: 3f:cb:1f:5a:24:89:e6:25:38:ab:68:61:66:4d:36: b7:97:48:da:0e:50:d6:d7:02:c6:89:f1:0a:20:f1: 0a:7a:4a:06:1c:ff:a8:d2:5f:ff:8a:3b:46:34:67: b4:b0:89:c7:80:8e:37:48:6a:d2:23:00:8a:70:bc: 5b:03:1d:42:3e:dd:80:b3:44:f8:cd:67:43:9a:6d: 2d:6b:c0:98:9f:29:b6:a1:c4:c3:1c:d5:79:d5:60: b0:69:56:5e:f7:40:57:75:71:c7:d2:5b:36:df:28: 37:ea:d6:4a:f4:92:7a:7a:ea:2e:5d:88:04:79:8e: d6:29:d2:34:ea:d9:2b:81:13:bd:2e:f7:a7:40:f1: f3:84:70:8a:cc:b3:70:ab:ac:48:01:1f:d3:5d:36: 04:7f:c6:9a:14:fd:f3:f3:3f:08:b4:08:31:da:69: f4:d5:9b:b1:f4:fa:3b:9c:e3:cb:b6:d0:e4:3a:df: da:52:c6:26:28:6c:d6:ad:f4:06:16:cb:42:f4:e5: 72:16:e2:6b:fb:28:07:d6:0c:cf:35:9d:96:d0:df: e5:4b:c7:9d:90:1d:2e:46:27:72:d5:18:fa:c4:61: c2:77:41:c4:37:14:27:a3:9b:3e:de:73:88:37:1e: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:21:D4:67:D9:69:99:1A:D4:7F:09:D8:F8:39:FD:67:6F:81:CB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c97d55b-ad10-3483-b356-6c5f038026d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 96.38.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d1:7c:f0:93:0a:3e:79:a6:a6:e6:e9:29:85:93:4b:ff:cb: 2d:73:93:75:7a:19:71:e8:7a:65:b4:ce:7f:37:89:00:5e:74: 78:83:9d:c4:c4:2a:11:5c:2e:63:d1:f4:35:09:a1:91:93:47: dc:81:ba:71:79:07:a0:07:e9:3e:41:12:4a:fb:de:82:d8:9d: 7b:29:54:dc:7b:b3:d6:b8:67:14:0b:82:93:3a:4e:aa:91:45: 93:17:09:73:4a:b2:75:b5:74:13:76:fe:56:86:cc:c0:bc:b1: d8:83:08:06:bf:c3:20:d1:be:a8:b9:99:41:81:46:b3:0f:8b: a0:f9:c3:f0:23:7d:33:33:61:7e:fc:dc:34:a9:9b:8f:73:98: 03:f3:64:e0:94:90:c2:97:a8:5a:a2:0e:5b:ec:a2:eb:27:d3: a7:c0:6d:a4:d0:c1:83:43:52:5e:d0:ac:f4:11:92:30:6a:ae: d5:da:2e:e3:f1:3e:bd:3d:2e:41:f9:ee:28:eb:fe:4c:6f:06: ee:78:c5:20:d7:84:3e:e7:a7:2b:49:25:94:47:d0:80:4f:7b: 2f:5b:43:ff:ea:6e:62:b7:b7:31:9d:94:e7:9d:0f:b4:b3:e7: 0e:14:bd:53:47:f6:4a:9e:a3:d9:86:7f:4b:48:2e:42:7d:b5: c8:8b:50:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4pX1meQ2BigeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MWJkMGM1OTctNTkyOC00OWU5LWIxNWEtODc3OTM5N2VhMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LH7c/kIUykl5EGUn0E/yx9aJInmJTiraGFm TTa3l0jaDlDW1wLGifEKIPEKekoGHP+o0l//ijtGNGe0sInHgI43SGrSIwCKcLxb Ax1CPt2As0T4zWdDmm0ta8CYnym2ocTDHNV51WCwaVZe90BXdXHH0ls23yg36tZK 9JJ6euouXYgEeY7WKdI06tkrgRO9LvenQPHzhHCKzLNwq6xIAR/TXTYEf8aaFP3z 8z8ItAgx2mn01Zux9Po7nOPLttDkOt/aUsYmKGzWrfQGFstC9OVyFuJr+ygH1gzP NZ2W0N/lS8edkB0uRidy1Rj6xGHCd0HENxQno5s+3nOINx6NRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIh1GfZaZka1H8J2Pg5/WdvgcuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmM5N2Q1NWItYWQxMC0z NDgzLWIzNTYtNmM1ZjAzODAyNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDRfPCTCj55pqbm6SmFk0v/yy1zk3V6GXHoemW0zn83iQBedHiDncTE KhFcLmPR9DUJoZGTR9yBunF5B6AH6T5BEkr73oLYnXspVNx7s9a4ZxQLgpM6TqqR RZMXCXNKsnW1dBN2/laGzMC8sdiDCAa/wyDRvqi5mUGBRrMPi6D5w/AjfTMzYX78 3DSpm49zmAPzZOCUkMKXqFqiDlvsousn06fAbaTQwYNDUl7QrPQRkjBqrtXaLuPx Pr09LkH57ijr/kxvBu54xSDXhD7npytJJZRH0IBPey9bQ//qbmK3tzGdlOedD7Sz 5w4UvVNH9kqeo9mGf0tILkJ9tciLUEg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:31:41 2026 by rpki-client