$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3569c6f1-cfa5-3272-a2c8-3a90f01c2392.roa File: 3569c6f1-cfa5-3272-a2c8-3a90f01c2392.roa (raw, json) Hash identifier: OzuQqNiH4u+ExXpf7InlwD2yDypt+1NUBUeGvMG3AEc= Subject key identifier: 61:48:34:E3:B2:0D:FE:0C:6F:56:F1:FC:52:1B:54:93:C6:5A:7C:67 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D1B1A03D27BAC4C8694A90978 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3569c6f1-cfa5-3272-a2c8-3a90f01c2392.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 47.248.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:03:d2:7b:ac:4c:86:94:a9:09:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=bf95c807-bacd-4449-bf54-e01d4e068002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:1c:4c:2d:86:d0:61:89:6c:4b:05:72:a3: 54:6e:19:df:41:01:32:08:ba:d4:d3:8e:9a:7f:5b: d4:21:a8:b6:b1:d3:17:51:6d:c3:24:d4:7b:f8:00: c9:47:1e:a1:d1:4e:74:17:c9:18:3f:d6:f5:cf:c8: 49:7e:d6:8f:41:95:cd:80:a5:fa:a3:13:f9:82:21: 5d:18:e8:85:5a:1a:65:83:40:66:f6:31:01:38:65: 5a:7f:50:99:f2:78:00:84:5e:12:3e:5d:0e:41:fa: 78:6f:79:97:2f:a5:f2:47:f7:35:1a:27:cd:17:2a: 6e:65:c8:31:39:ee:ff:a1:78:19:3b:1e:a9:b2:84: c8:3a:56:29:b3:a1:2d:b9:a8:e2:d3:d0:75:1a:8d: da:81:4e:7b:2f:bf:7d:f6:4f:f1:9d:cc:9b:23:84: 68:11:85:4a:db:6a:71:db:6d:74:a8:03:d6:56:52: de:eb:ee:b1:7f:32:f5:f3:3c:ee:7d:6c:e4:9f:2d: 44:98:6e:13:55:bc:f8:1c:d9:f2:1a:8b:c7:a0:13: 26:db:95:18:a2:17:8d:31:58:ab:55:a0:47:04:7a: 50:ca:c6:7e:d1:85:4f:d3:33:95:30:81:80:24:ee: 67:91:db:0b:bb:5d:23:41:81:5e:6a:04:ee:4d:64: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:48:34:E3:B2:0D:FE:0C:6F:56:F1:FC:52:1B:54:93:C6:5A:7C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3569c6f1-cfa5-3272-a2c8-3a90f01c2392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.248.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:cd:c1:a6:95:8d:d7:79:92:a4:1f:1d:a7:a2:8b:a5:d5:9e: 28:cf:7c:ef:bb:15:f9:8f:d4:32:97:f7:e1:ab:d7:94:e3:7e: a4:5f:68:45:e5:e5:06:d4:fd:7e:65:80:f9:9c:7f:2b:d7:49: 27:ce:3b:f4:ca:71:cf:43:21:b8:66:75:e2:18:0a:0e:7e:e9: 61:33:71:d9:b7:33:95:2d:18:d4:cd:7a:eb:d9:ec:b4:5a:a3: 61:d7:9e:d7:f6:70:fd:e2:6c:61:15:34:fc:5a:30:06:01:10: fa:8d:30:a0:be:1d:5d:61:e8:03:96:60:93:de:5c:13:63:f5: 7d:8f:c6:de:f6:24:a6:ea:48:14:33:82:88:63:40:1d:1e:93: ec:c2:fd:71:26:cc:9e:64:75:03:f1:2f:e2:ba:c4:41:23:70: cd:b6:44:18:45:1e:20:4f:6c:65:61:48:8e:e0:b4:9d:37:a7: 2a:8b:ea:e8:e7:34:cb:ed:f6:04:2b:90:14:54:51:75:9b:1c: cb:ce:0e:67:45:7c:d3:58:cf:c7:1f:0d:3c:60:59:df:2b:38: 0e:fa:1d:c0:e4:19:a7:a8:2f:23:48:0a:68:bd:4a:b7:40:ea: 04:c5:5d:45:3a:28:8f:f3:d1:29:1a:b0:37:63:f1:7e:c5:4e: 5f:04:52:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0bGgPSe6xMhpSpCXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YmY5NWM4MDctYmFjZC00NDQ5LWJmNTQtZTAxZDRlMDY4MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhocTC2G0GGJbEsFcqNUbhnfQQEyCLrU046a f1vUIai2sdMXUW3DJNR7+ADJRx6h0U50F8kYP9b1z8hJftaPQZXNgKX6oxP5giFd GOiFWhplg0Bm9jEBOGVaf1CZ8ngAhF4SPl0OQfp4b3mXL6XyR/c1GifNFypuZcgx Oe7/oXgZOx6psoTIOlYps6Etuaji09B1Go3agU57L7999k/xncybI4RoEYVK22px 2210qAPWVlLe6+6xfzL18zzufWzkny1EmG4TVbz4HNnyGovHoBMm25UYoheNMVir VaBHBHpQysZ+0YVP0zOVMIGAJO5nkdsLu10jQYFeagTuTWR1pQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGFINOOyDf4Mb1bx/FIbVJPGWnxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzU2OWM2ZjEtY2ZhNS0z MjcyLWEyYzgtM2E5MGYwMWMyMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBL/gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAzM3BppWN13mSpB8dp6KLpdWeKM9877sV+Y/UMpf34avXlON+pF9oReXl BtT9fmWA+Zx/K9dJJ8479Mpxz0MhuGZ14hgKDn7pYTNx2bczlS0Y1M1669nstFqj Ydee1/Zw/eJsYRU0/FowBgEQ+o0woL4dXWHoA5Zgk95cE2P1fY/G3vYkpupIFDOC iGNAHR6T7ML9cSbMnmR1A/Ev4rrEQSNwzbZEGEUeIE9sZWFIjuC0nTenKovq6Oc0 y+32BCuQFFRRdZscy84OZ0V801jPxx8NPGBZ3ys4DvodwOQZp6gvI0gKaL1Kt0Dq BMVdRTooj/PRKRqwN2PxfsVOXwRSQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:32 2026 by rpki-client