$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f254fad-b906-3c0b-97d2-a0a6c8a9d2c5.roa File: 3f254fad-b906-3c0b-97d2-a0a6c8a9d2c5.roa (raw, json) Hash identifier: i+ZDgC9W9WGsZ9nnk89N9UMlGevd7/XhvU1nH39zS9s= Subject key identifier: CC:10:CA:A9:89:0D:39:12:C2:B6:12:29:CE:DE:BB:DF:99:0E:EF:B2 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAEADC0C5697BF258FE180 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f254fad-b906-3c0b-97d2-a0a6c8a9d2c5.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 97.86.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:ea:dc:0c:56:97:bf:25:8f:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=da9d1227-8947-449f-95f4-e7eb18fb8863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:8b:b2:b8:dc:de:75:62:bb:1e:b7:a5:5c: 79:2e:73:2e:c0:4b:48:8e:4b:35:46:07:95:69:8f: 54:bc:87:f3:6f:8c:17:f9:88:de:c6:d1:1f:d3:a1: 93:c4:c2:a8:ed:92:96:2e:a8:e8:76:e8:c7:13:1d: e2:cf:0d:96:31:0a:f1:a2:1b:da:9f:ce:fa:73:64: 8d:a2:92:32:52:b3:17:f1:ae:f8:6e:58:ab:87:9f: 93:a4:8e:62:fb:f3:b3:f1:bc:2a:fe:3e:d6:ec:05: 3b:55:66:37:45:a7:db:dc:df:d2:78:60:37:ab:31: 0d:39:64:69:3b:f4:29:19:69:15:69:6a:4e:17:3f: 0f:1e:72:a9:a0:98:ec:14:08:38:61:34:36:31:b5: 6a:34:4b:7a:e8:20:72:fd:75:c4:4f:fb:76:ac:b0: 51:cd:e8:df:21:f8:4f:89:15:d8:e1:96:ba:08:96: dd:b9:95:09:10:e8:eb:fc:a5:02:14:42:c1:b2:58: 6a:8c:ca:bf:13:66:a2:12:4f:fb:47:22:e6:4d:9f: 5b:86:5f:55:22:52:8f:b0:f0:25:8c:41:12:2b:20: ac:7b:f7:4f:fd:7f:da:8f:ae:a8:19:bf:7a:e9:18: 8d:7e:5e:9a:4f:ef:93:93:be:8b:2a:88:2e:ae:68: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:CA:A9:89:0D:39:12:C2:B6:12:29:CE:DE:BB:DF:99:0E:EF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f254fad-b906-3c0b-97d2-a0a6c8a9d2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.86.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b9:1d:d4:6a:f8:5b:93:dc:c2:69:d6:fd:ab:db:1b:e1:21: 1c:54:53:f2:18:c7:cc:7b:df:59:b3:92:9e:48:ed:58:8a:57: 21:51:37:3b:69:81:d8:98:43:01:db:eb:44:bb:f8:ef:82:a0: 8d:03:07:1f:49:03:dd:d3:62:a2:35:78:3e:d4:88:ed:f6:44: a0:61:40:26:cb:e3:69:32:6e:69:a6:fb:c4:c0:5e:ab:43:e0: 91:e1:2f:26:82:6f:70:35:2f:1c:da:d3:11:3e:d2:76:90:af: 91:21:45:d6:41:9b:a4:56:4c:6d:17:3b:4d:5e:5c:11:f4:be: e2:43:52:1f:76:f1:f2:51:e8:89:9f:da:fb:8e:38:04:25:e2: b4:99:b9:57:d7:89:9b:f5:39:3c:df:41:85:79:64:87:fc:89: ed:b0:1e:84:9d:ae:b6:b0:e3:05:77:8a:75:c8:20:c1:c6:9f: f9:18:52:de:49:2a:e9:a1:6d:41:4d:1f:24:f1:a6:31:57:4c: a6:9f:74:c6:00:ef:77:93:76:db:ee:62:42:c2:37:92:14:26: 88:d0:42:7f:c0:0b:1c:88:6f:d7:02:69:27:37:ea:da:85:96: 41:e2:7a:5b:63:00:cf:38:cb:bd:65:ed:cd:42:f1:e0:1d:1c: 2c:de:3a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyurcDFaXvyWP4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGE5ZDEyMjctODk0Ny00NDlmLTk1ZjQtZTdlYjE4ZmI4ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXCLsrjc3nViux63pVx5LnMuwEtIjks1RgeV aY9UvIfzb4wX+YjextEf06GTxMKo7ZKWLqjodujHEx3izw2WMQrxohvan876c2SN opIyUrMX8a74blirh5+TpI5i+/Oz8bwq/j7W7AU7VWY3Rafb3N/SeGA3qzENOWRp O/QpGWkVaWpOFz8PHnKpoJjsFAg4YTQ2MbVqNEt66CBy/XXET/t2rLBRzejfIfhP iRXY4Za6CJbduZUJEOjr/KUCFELBslhqjMq/E2aiEk/7RyLmTZ9bhl9VIlKPsPAl jEESKyCse/dP/X/aj66oGb966RiNfl6aT++Tk76LKogurmiQ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwQyqmJDTkSwrYSKc7eu9+ZDu+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2YyNTRmYWQtYjkwNi0z YzBiLTk3ZDItYTBhNmM4YTlkMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm5HdRq+FuT3MJp1v2r2xvhIRxUU/IYx8x731mzkp5I7ViKVyFRNztp gdiYQwHb60S7+O+CoI0DBx9JA93TYqI1eD7UiO32RKBhQCbL42kybmmm+8TAXqtD 4JHhLyaCb3A1Lxza0xE+0naQr5EhRdZBm6RWTG0XO01eXBH0vuJDUh928fJR6Imf 2vuOOAQl4rSZuVfXiZv1OTzfQYV5ZIf8ie2wHoSdrraw4wV3inXIIMHGn/kYUt5J KumhbUFNHyTxpjFXTKafdMYA73eTdtvuYkLCN5IUJojQQn/ACxyIb9cCaSc36tqF lkHieltjAM84y71l7c1C8eAdHCzeOvg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:54 2026 by rpki-client