$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a91ad8b-c714-3072-9fcf-e3b0a8dcb18e.roa File: 4a91ad8b-c714-3072-9fcf-e3b0a8dcb18e.roa (raw, json) Hash identifier: kKaYOKbAG7Pj9QAbmFyfOovcYR42mBL4GnvgQ83wt0E= Subject key identifier: E4:21:2C:63:51:4C:55:5D:F9:85:68:E1:A2:10:B9:80:9F:BF:5F:71 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB4D9E89F8356ACEF57580 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a91ad8b-c714-3072-9fcf-e3b0a8dcb18e.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 47.24.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:4d:9e:89:f8:35:6a:ce:f5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7fb20557-2682-4596-8f28-bc706a24b3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:f6:85:91:e6:04:9d:1b:2a:e4:c6:9c:ff: 15:98:a2:b2:cd:03:b0:59:2c:cd:f5:8e:e3:80:a4: 8e:21:1c:07:08:27:7b:13:09:65:05:94:90:0d:2f: 4e:17:7f:ae:29:71:fb:23:7b:d3:e2:ab:e1:b4:7d: 00:f9:7c:6a:38:08:9f:e0:2f:16:e5:07:6d:1f:00: 09:f2:d4:47:ec:27:fb:80:e8:1f:eb:54:e3:09:ce: 43:13:fc:1f:1f:5e:95:73:63:13:5f:3f:46:ee:c4: 55:06:9d:31:2c:bb:dd:b5:64:7c:a6:eb:38:f4:fd: f2:3d:37:18:50:e6:d1:bd:25:0a:78:24:f4:55:fb: 2e:72:54:37:4b:00:08:9a:a1:ef:7b:1a:97:8d:7a: 4f:45:db:94:63:52:2d:a1:97:46:d5:f0:96:95:4f: fa:7e:53:4b:0f:14:12:fa:ed:8f:fb:fd:a6:86:93: 90:a3:82:b3:94:e1:0e:8b:6c:6e:aa:20:5b:7c:c2: 52:06:05:54:fe:cc:02:52:2b:01:bc:d9:06:a8:92: 2c:f4:8d:92:b1:bb:cc:df:ed:f9:44:0d:02:23:8c: 33:0d:42:51:c7:22:93:78:02:dd:47:a4:4e:d5:e9: 00:3b:c6:18:36:bb:c4:5a:bc:df:6e:87:6c:a1:8b: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:2C:63:51:4C:55:5D:F9:85:68:E1:A2:10:B9:80:9F:BF:5F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a91ad8b-c714-3072-9fcf-e3b0a8dcb18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.24.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:2a:6a:92:c3:c2:b1:04:26:52:3c:5e:9b:62:34:34:52:82: b6:55:4b:a0:85:7b:2e:e4:b6:e2:d4:3f:3a:1d:71:f1:cf:16: a5:09:40:cc:4d:47:bf:92:86:bd:80:5c:7b:93:92:fb:c4:b3: 59:0a:dd:54:3d:a3:b4:28:62:d5:8c:83:d2:38:08:aa:7f:aa: 66:65:a2:47:74:75:ec:e5:05:1f:fc:5e:d7:cc:7b:cd:19:92: 03:07:4b:fd:4d:9c:8c:c6:54:d5:18:26:c8:42:80:e3:36:70: 9b:69:0b:0f:47:ff:39:59:15:21:44:40:91:65:14:8d:14:c3: a9:cc:17:11:28:6c:81:b0:e9:b7:f5:11:f2:6c:7f:3b:84:dd: 02:65:46:2b:96:99:86:9a:1e:92:69:f3:8a:aa:44:9b:cf:83: 3c:c8:19:44:81:d5:66:ce:17:87:85:aa:03:ff:c6:6c:d3:04: 49:43:6a:03:01:b2:66:6d:2f:77:2a:25:db:3c:8e:74:88:31: 95:29:df:43:fa:07:9f:7c:23:b3:60:e5:48:47:a6:62:eb:51: df:ba:9b:44:12:0d:f1:5c:7f:44:c0:b1:ca:e6:ce:06:7a:55: 5a:a6:3e:28:a4:1f:83:27:a6:a6:9f:35:ab:1e:a6:74:7e:54: b4:e4:19:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay02eifg1as71dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2ZiMjA1NTctMjY4Mi00NTk2LThmMjgtYmM3MDZhMjRiM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkr2hZHmBJ0bKuTGnP8VmKKyzQOwWSzN9Y7j gKSOIRwHCCd7EwllBZSQDS9OF3+uKXH7I3vT4qvhtH0A+XxqOAif4C8W5QdtHwAJ 8tRH7Cf7gOgf61TjCc5DE/wfH16Vc2MTXz9G7sRVBp0xLLvdtWR8pus49P3yPTcY UObRvSUKeCT0VfsuclQ3SwAImqHvexqXjXpPRduUY1ItoZdG1fCWlU/6flNLDxQS +u2P+/2mhpOQo4KzlOEOi2xuqiBbfMJSBgVU/swCUisBvNkGqJIs9I2SsbvM3+35 RA0CI4wzDUJRxyKTeALdR6RO1ekAO8YYNrvEWrzfbodsoYu9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQhLGNRTFVd+YVo4aIQuYCfv19xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGE5MWFkOGItYzcxNC0z MDcyLTlmY2YtZTNiMGE4ZGNiMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLxgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMqapLDwrEEJlI8XptiNDRSgrZVS6CFey7ktuLUPzodcfHPFqUJQMxN R7+Shr2AXHuTkvvEs1kK3VQ9o7QoYtWMg9I4CKp/qmZlokd0dezlBR/8XtfMe80Z kgMHS/1NnIzGVNUYJshCgOM2cJtpCw9H/zlZFSFEQJFlFI0Uw6nMFxEobIGw6bf1 EfJsfzuE3QJlRiuWmYaaHpJp84qqRJvPgzzIGUSB1WbOF4eFqgP/xmzTBElDagMB smZtL3cqJds8jnSIMZUp30P6B598I7Ng5UhHpmLrUd+6m0QSDfFcf0TAscrmzgZ6 VVqmPiikH4MnpqafNasepnR+VLTkGc0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:07 2026 by rpki-client