$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a90b1d7-2ebd-3e1e-a243-a27adf46085f.roa File: 3a90b1d7-2ebd-3e1e-a243-a27adf46085f.roa (raw, json) Hash identifier: Pu8CIVVUqwqLQdkTh27vdk9R4+ebooGqi5Ss8QoxuOs= Subject key identifier: E8:5A:9B:55:6B:C0:A3:66:FD:6E:B7:6A:03:1A:B4:03:E5:B1:B9:AF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB8EF1CEA85C5E822B4300 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a90b1d7-2ebd-3e1e-a243-a27adf46085f.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 161.198.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:8e:f1:ce:a8:5c:5e:82:2b:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=4c52b555-886f-410c-82fa-94d0d3edc2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:86:9e:f0:f7:98:d9:97:3c:96:da:8e:72: 73:36:27:1e:fe:d5:9b:15:e4:6c:70:67:bf:5f:8d: a9:27:b7:e7:29:4a:03:bc:e0:03:6b:3a:22:0b:30: 35:db:07:98:a0:a0:80:d0:4b:b2:04:02:8c:6e:98: 29:cd:da:4b:f2:b5:ce:e7:cc:3f:9b:f9:fa:4e:31: 0b:46:5b:11:ef:80:90:cf:a4:b6:dd:de:72:f8:9e: f3:26:c7:69:ec:9b:88:0f:ba:da:84:c2:5e:eb:e9: 13:f8:26:ef:b6:98:e9:2f:90:e1:e5:13:57:e8:42: a7:ac:b5:08:76:68:fa:7c:12:de:11:29:ae:62:1b: 32:0a:a9:9c:d4:0f:cc:64:37:62:d2:92:9d:09:8e: 15:ce:04:1a:69:4d:36:32:c4:75:c1:34:d3:e0:45: 3d:29:43:2b:6a:5a:fa:9e:6b:66:e4:c7:63:3b:c7: a7:d4:70:21:a4:80:60:05:13:8e:3b:a5:01:36:9d: 5a:41:fe:0e:5e:92:a8:5c:0c:af:81:7b:d2:a7:4d: e6:7e:50:66:3f:5e:85:da:15:03:4c:db:28:be:b0: a6:bf:d7:0d:30:5d:45:b2:8f:bf:ea:07:62:19:ad: 3b:a4:d2:42:d9:ff:9b:02:73:bc:ea:67:1b:1b:93: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5A:9B:55:6B:C0:A3:66:FD:6E:B7:6A:03:1A:B4:03:E5:B1:B9:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a90b1d7-2ebd-3e1e-a243-a27adf46085f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 161.198.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:15:8e:17:3f:21:ad:7d:6c:66:c1:fb:1f:96:5b:f2:f0:74: ae:37:e4:1f:9f:7c:70:35:f9:0e:c9:be:4c:c6:2a:b8:b0:06: b0:ea:94:84:15:69:d6:4c:f2:20:94:ad:2c:43:04:e4:d7:23: 9a:99:a0:8f:98:68:bd:64:0f:f1:ab:10:30:b5:25:32:5e:8d: 36:0f:65:38:1e:40:d7:25:83:3a:4d:94:bb:2a:3d:ff:d1:72: 93:f0:6e:ca:80:d3:f9:ac:4b:a4:80:cd:68:a3:b0:b4:c8:96: fc:08:41:15:09:05:76:06:bf:a3:1b:dd:99:7f:d7:0f:ca:25: 6e:cc:3e:80:fe:b8:59:66:af:fc:21:c6:73:f1:2a:1f:be:16: 38:c3:db:ce:e4:7d:bd:a6:59:94:99:9d:67:28:15:65:a6:98: 2b:04:25:47:00:c0:9a:f6:28:b8:9a:4d:57:82:bf:d3:88:3c: 29:d5:b6:9f:6a:83:12:c8:b2:1e:b1:c7:c2:e3:ea:05:49:b1: a7:cd:a8:89:e8:b6:2d:40:bc:e3:0c:03:e7:ec:07:a1:9c:8b: 43:b4:ca:4e:0d:f6:7e:cb:b8:a5:55:8e:c2:af:58:47:f4:ab: 7c:68:3b:f4:97:56:78:0c:b6:b3:bc:c6:39:2e:98:50:29:26: f6:3a:b8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay47xzqhcXoIrQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NGM1MmI1NTUtODg2Zi00MTBjLTgyZmEtOTRkMGQzZWRjMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTWGnvD3mNmXPJbajnJzNice/tWbFeRscGe/ X42pJ7fnKUoDvOADazoiCzA12weYoKCA0EuyBAKMbpgpzdpL8rXO58w/m/n6TjEL RlsR74CQz6S23d5y+J7zJsdp7JuID7rahMJe6+kT+CbvtpjpL5Dh5RNX6EKnrLUI dmj6fBLeESmuYhsyCqmc1A/MZDdi0pKdCY4VzgQaaU02MsR1wTTT4EU9KUMralr6 nmtm5MdjO8en1HAhpIBgBROOO6UBNp1aQf4OXpKoXAyvgXvSp03mflBmP16F2hUD TNsovrCmv9cNMF1Fso+/6gdiGa07pNJC2f+bAnO86mcbG5PYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOham1VrwKNm/W63agMatAPlsbmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2E5MGIxZDctMmViZC0z ZTFlLWEyNDMtYTI3YWRmNDYwODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDocYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsVjhc/Ia19bGbB+x+WW/LwdK435B+ffHA1+Q7JvkzGKriwBrDqlIQV adZM8iCUrSxDBOTXI5qZoI+YaL1kD/GrEDC1JTJejTYPZTgeQNclgzpNlLsqPf/R cpPwbsqA0/msS6SAzWijsLTIlvwIQRUJBXYGv6Mb3Zl/1w/KJW7MPoD+uFlmr/wh xnPxKh++FjjD287kfb2mWZSZnWcoFWWmmCsEJUcAwJr2KLiaTVeCv9OIPCnVtp9q gxLIsh6xx8Lj6gVJsafNqInoti1AvOMMA+fsB6Gci0O0yk4N9n7LuKVVjsKvWEf0 q3xoO/SXVngMtrO8xjkumFApJvY6uEE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:55:30 2026 by rpki-client