$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ca27496-7240-319a-8d98-e47cc1f0fa22.roa File: 3ca27496-7240-319a-8d98-e47cc1f0fa22.roa (raw, json) Hash identifier: Cc3lrcrr+RqXRp/KSG81vGPZIalnT3iDg5pCc9lTeOw= Subject key identifier: 16:6B:89:94:D4:4A:BC:F1:2D:61:08:D9:4F:3E:B6:C9:F0:6C:A1:3E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CABB4BE0824BBE2F316F50 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ca27496-7240-319a-8d98-e47cc1f0fa22.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 71.95.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:bb:4b:e0:82:4b:be:2f:31:6f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=95c0b68a-f902-4789-bcd7-b5f11db2867d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:c0:b1:0f:b7:75:38:23:6f:92:d2:bc:aa: 8e:22:21:4d:67:34:c3:0b:8a:d1:57:a6:77:01:84: d6:2a:9a:05:54:5a:ac:83:4d:76:06:03:bd:3b:4b: c6:2e:a0:68:10:e0:1e:0c:c0:89:e4:2a:e7:74:85: 04:aa:df:75:a4:88:04:fd:38:a2:6d:9f:9f:89:1f: 1a:eb:db:2c:ab:3c:34:55:65:b5:ce:84:25:fc:6b: 7b:ed:f4:e1:0d:db:02:2d:78:11:96:82:f9:53:55: 73:2e:e9:5d:c3:91:2c:e4:2c:ad:df:04:22:17:07: 08:fa:04:44:e8:01:1c:80:80:ac:a5:88:94:66:44: c9:4b:a2:55:17:33:72:a9:96:4a:95:63:e3:e8:ff: 5c:b1:7c:0a:98:4a:c9:8a:31:ec:c3:09:3a:35:b7: a9:4d:44:91:66:35:76:e7:81:57:14:ec:67:15:bf: 39:fe:51:04:2d:ea:2a:24:e5:2a:d5:72:e9:24:64: c2:96:f3:6e:cb:00:d9:d6:8c:32:d7:69:08:7f:65: 3a:4d:33:c3:3f:b7:a1:8a:f2:bf:c1:38:94:23:32: 7a:80:a0:b9:3b:a7:e1:0e:20:aa:f6:6c:ad:79:91: dd:67:49:8d:d0:26:22:ec:dd:5f:ce:61:c1:69:76: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6B:89:94:D4:4A:BC:F1:2D:61:08:D9:4F:3E:B6:C9:F0:6C:A1:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ca27496-7240-319a-8d98-e47cc1f0fa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.95.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f4:2e:62:ea:64:9b:12:90:88:b7:b6:c9:4e:9e:28:39:f6: e3:3a:34:fc:a2:ae:34:9b:99:df:ab:cc:b5:b5:09:1a:59:7c: 2b:bc:ef:76:46:d0:1c:00:98:18:23:a4:36:fb:9c:f3:2a:c8: fe:16:75:a1:16:2f:87:36:ec:ba:dd:62:1c:46:a4:50:a6:89: 62:d0:33:75:18:1f:a8:f3:54:c0:de:bb:e8:19:e5:bb:ac:e1: 0b:0c:e0:51:45:a8:82:15:80:eb:1a:fa:96:a3:ad:36:52:63: a2:7d:d9:45:c8:36:30:89:6f:0c:2e:a6:25:b5:29:6e:fb:d3: 43:60:9b:98:4b:b1:e4:31:13:85:a3:be:fa:19:8d:5a:05:08: 9c:de:92:89:e2:14:0a:7b:98:0b:76:00:21:de:79:95:ac:59: 38:56:e5:a0:db:d0:44:e3:21:f2:c2:ec:5c:41:3f:c8:97:2d: f5:bc:cc:c6:48:d8:a8:b4:1b:68:84:03:69:34:33:18:0b:bd: a7:6c:07:0c:16:95:ab:c8:74:b7:98:d9:1d:4e:3e:21:6c:5f: 93:ce:ca:1e:b2:95:4e:eb:06:bf:92:66:fd:e7:58:2c:99:8d: 46:70:f2:79:4a:c1:39:9c:54:e6:ec:8b:eb:d3:30:95:4d:0a: 6a:9a:d6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyrtL4IJLvi8xb1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OTVjMGI2OGEtZjkwMi00Nzg5LWJjZDctYjVmMTFkYjI4NjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XvAsQ+3dTgjb5LSvKqOIiFNZzTDC4rRV6Z3 AYTWKpoFVFqsg012BgO9O0vGLqBoEOAeDMCJ5CrndIUEqt91pIgE/TiibZ+fiR8a 69ssqzw0VWW1zoQl/Gt77fThDdsCLXgRloL5U1VzLuldw5Es5Cyt3wQiFwcI+gRE 6AEcgICspYiUZkTJS6JVFzNyqZZKlWPj6P9csXwKmErJijHswwk6NbepTUSRZjV2 54FXFOxnFb85/lEELeoqJOUq1XLpJGTClvNuywDZ1owy12kIf2U6TTPDP7ehivK/ wTiUIzJ6gKC5O6fhDiCq9myteZHdZ0mN0CYi7N1fzmHBaXYdxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZriZTUSrzxLWEI2U8+tsnwbKE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2NhMjc0OTYtNzI0MC0z MTlhLThkOTgtZTQ3Y2MxZjBmYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER19wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz0LmLqZJsSkIi3tslOnig59uM6NPyirjSbmd+rzLW1CRpZfCu873ZG 0BwAmBgjpDb7nPMqyP4WdaEWL4c27LrdYhxGpFCmiWLQM3UYH6jzVMDeu+gZ5bus 4QsM4FFFqIIVgOsa+pajrTZSY6J92UXINjCJbwwupiW1KW7700Ngm5hLseQxE4Wj vvoZjVoFCJzekoniFAp7mAt2ACHeeZWsWThW5aDb0ETjIfLC7FxBP8iXLfW8zMZI 2Ki0G2iEA2k0MxgLvadsBwwWlavIdLeY2R1OPiFsX5POyh6ylU7rBr+SZv3nWCyZ jUZw8nlKwTmcVObsi+vTMJVNCmqa1lk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:47 2026 by rpki-client