$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3def6979-9353-3ae5-b268-52883b1c59d9.roa File: 3def6979-9353-3ae5-b268-52883b1c59d9.roa (raw, json) Hash identifier: OeiD5T8uA5/HGtw5fbvwXJWGpewB0tonWQW9MboYkFA= Subject key identifier: 0C:EA:6F:D9:E0:C8:A7:62:26:5D:BF:07:B5:99:B0:36:92:B5:26:AA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAB88B2F4133980F467A00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3def6979-9353-3ae5-b268-52883b1c59d9.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.158.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:b8:8b:2f:41:33:98:0f:46:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=712cd514-b887-4c84-bc61-b75bc23898cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:e4:65:7e:57:d1:9a:91:72:2b:75:eb:1c: 2f:ec:ee:ab:c1:49:7c:83:15:b4:22:c3:69:94:bf: 3a:f8:b3:5e:61:e9:c4:c9:b1:9d:12:c8:eb:f3:d4: da:76:47:5b:89:d1:ff:a5:73:eb:a2:83:5d:bc:8c: af:14:d9:93:33:77:0e:07:7b:bd:45:97:64:07:08: 52:ad:e8:98:bd:6e:8e:34:7d:c8:57:7f:1b:ce:33: 6f:38:85:37:a5:08:86:7a:ee:d9:f0:fe:fe:ed:69: d2:a4:47:6d:11:82:6d:02:8e:7d:45:c3:10:8e:d8: 72:80:5e:60:0a:9a:78:35:84:a2:3d:82:21:7b:91: fd:3e:0d:d8:9a:59:b8:24:40:40:8b:11:82:cc:49: 6e:b7:36:ce:ff:96:90:5a:6c:1c:96:67:fc:73:1d: 9b:b0:8f:9f:4b:e7:b8:4b:04:e7:d9:d7:9c:54:a9: 3a:c7:5b:5c:9d:b7:10:7c:e2:7d:4d:50:4e:d2:d9: 97:e8:9d:b6:9e:31:0d:ad:a5:c6:86:30:41:65:07: ad:ce:5f:43:d3:d8:ff:ad:6c:51:e4:ad:dd:c9:27: 09:67:6e:c4:10:a8:05:30:43:d6:b1:14:80:e1:8b: 74:f0:1f:06:ff:96:7d:a2:3a:61:18:b4:37:ef:36: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EA:6F:D9:E0:C8:A7:62:26:5D:BF:07:B5:99:B0:36:92:B5:26:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3def6979-9353-3ae5-b268-52883b1c59d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.158.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d7:ea:ec:03:cd:1a:25:3a:e4:0f:c7:bf:90:05:e3:b7:8d: bc:5a:7b:f3:fa:14:2b:22:c6:e0:6d:8d:02:80:f0:4d:b4:0b: 01:40:0c:aa:86:70:3b:f4:a6:80:f7:c1:e1:b4:21:bc:f4:e4: 47:bb:93:c8:cb:02:ed:48:cc:b1:29:37:d4:f6:af:16:de:2f: b3:dc:a4:43:87:92:8a:d0:6b:84:6a:63:f5:9d:bb:1f:52:c2: a6:dc:df:82:33:19:7c:4e:8b:a7:09:b7:7f:2d:1f:57:61:33: 7c:26:a8:ca:62:03:91:8f:b7:3b:2c:5b:7b:3f:1c:5d:3e:88: 49:d3:2c:0c:17:58:54:b5:8d:47:16:93:d6:82:1a:2b:29:9a: 55:25:66:39:70:20:57:5c:4f:f8:c9:d4:d8:f7:6c:76:d2:5f: b3:bd:7b:a3:d8:d0:c5:9f:e6:49:67:ea:8c:9d:00:d2:07:21: a4:c5:31:28:98:f3:58:17:47:9d:75:16:e4:7b:3b:5e:d6:b2: c2:74:94:51:8f:ff:7e:70:94:0e:6f:d4:ed:83:73:be:d8:67: f0:ed:8c:17:8a:87:75:a8:67:4f:e3:4e:e3:49:38:23:19:ea: 50:ee:2f:6c:47:25:20:f6:a5:7c:a7:7b:9d:2c:fe:3f:e8:6e: c6:a0:eb:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyriLL0EzmA9GegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NzEyY2Q1MTQtYjg4Ny00Yzg0LWJjNjEtYjc1YmMyMzg5OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD7kZX5X0ZqRcit16xwv7O6rwUl8gxW0IsNp lL86+LNeYenEybGdEsjr89TadkdbidH/pXProoNdvIyvFNmTM3cOB3u9RZdkBwhS reiYvW6ONH3IV38bzjNvOIU3pQiGeu7Z8P7+7WnSpEdtEYJtAo59RcMQjthygF5g Cpp4NYSiPYIhe5H9Pg3Ymlm4JEBAixGCzElutzbO/5aQWmwclmf8cx2bsI+fS+e4 SwTn2decVKk6x1tcnbcQfOJ9TVBO0tmX6J22njENraXGhjBBZQetzl9D09j/rWxR 5K3dyScJZ27EEKgFMEPWsRSA4Yt08B8G/5Z9ojphGLQ37zbCJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzqb9ngyKdiJl2/B7WZsDaStSaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2RlZjY5NzktOTM1My0z YWU1LWIyNjgtNTI4ODNiMWM1OWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJ6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrX6uwDzRolOuQPx7+QBeO3jbxae/P6FCsixuBtjQKA8E20CwFADKqG cDv0poD3weG0Ibz05Ee7k8jLAu1IzLEpN9T2rxbeL7PcpEOHkorQa4RqY/Wdux9S wqbc34IzGXxOi6cJt38tH1dhM3wmqMpiA5GPtzssW3s/HF0+iEnTLAwXWFS1jUcW k9aCGispmlUlZjlwIFdcT/jJ1Nj3bHbSX7O9e6PY0MWf5kln6oydANIHIaTFMSiY 81gXR511FuR7O17WssJ0lFGP/35wlA5v1O2Dc77YZ/DtjBeKh3WoZ0/jTuNJOCMZ 6lDuL2xHJSD2pXyne50s/j/obsag63E= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:31 2026 by rpki-client