$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4dfde5ff-5c8b-3f3a-8020-22936da522e6.roa File: 4dfde5ff-5c8b-3f3a-8020-22936da522e6.roa (raw, json) Hash identifier: oDwhEUYbt1QUt6qIqg8Qoy6uQxrn1SKFX+VGvPTDu6E= Subject key identifier: 30:30:DC:C4:99:7F:4E:AF:7C:47:EA:87:98:1D:7F:0F:A3:4A:30:07 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB598DCDF025C41C4052A0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4dfde5ff-5c8b-3f3a-8020-22936da522e6.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.159.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:59:8d:cd:f0:25:c4:1c:40:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=d35db51c-a393-4c0d-a556-0c9b56b19faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:26:b3:fa:4a:3d:8e:99:cb:52:6c:67:a6: c0:e2:70:dc:91:77:8a:c7:e5:a5:91:9c:40:e5:ed: e4:28:91:01:d9:32:11:ab:40:7e:f3:54:ed:ba:6f: ed:16:d2:b9:be:52:b5:bb:72:79:62:d2:38:14:f3: 5a:d7:4e:5f:11:9a:45:76:b1:68:cf:33:b5:2d:04: 2b:66:b5:1b:8f:2f:f5:c2:5d:97:a9:6b:b7:dd:43: d6:ce:60:c6:42:c8:59:96:7b:f0:fa:4d:08:5c:cb: a5:87:19:fc:ea:d1:1f:f3:af:cc:b9:8e:d0:1f:e2: 48:19:83:71:2b:48:f1:01:d6:2f:b0:89:8b:56:a5: 76:1d:fa:2c:50:4f:f3:e9:0e:9b:37:6a:ba:80:d8: f5:90:b4:c6:32:4e:b1:d3:d7:fe:fc:05:f6:25:dd: 0c:de:83:d3:75:ef:bd:71:27:44:e2:6b:f0:b2:43: 42:22:ee:cc:ee:8d:9b:65:a5:c4:97:ef:92:37:1e: a9:e0:35:7b:c3:18:58:b8:c8:39:54:b9:cd:4b:70: b4:e0:1e:06:19:1b:32:5d:aa:1c:8c:3a:b0:65:f0: 8b:3d:69:30:62:e5:6f:f7:0d:1c:64:9c:48:dd:3b: eb:5e:5f:49:71:42:f4:1a:68:68:02:3a:e6:b4:cc: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:DC:C4:99:7F:4E:AF:7C:47:EA:87:98:1D:7F:0F:A3:4A:30:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4dfde5ff-5c8b-3f3a-8020-22936da522e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.159.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:34:3a:07:16:63:24:a0:bc:76:69:99:9a:3d:10:6b:4c:8a: 6e:ec:f6:72:54:48:55:db:c5:6a:51:1b:31:c1:1f:15:0b:1d: bf:3e:6d:86:b8:e6:bb:e4:f9:d6:6b:99:c0:95:e4:b1:de:34: 57:49:d2:97:6e:8b:8e:48:e5:52:30:8b:e0:6d:b9:f8:b7:7e: 39:1a:c1:ef:36:10:b7:6f:2a:d6:1c:b6:ae:de:5c:af:26:38: 6c:06:42:c3:7a:71:1e:09:27:60:bb:6c:e1:6c:1b:4f:56:a8: c1:32:02:2b:f1:68:4a:0f:78:0a:01:49:9c:b1:d4:75:17:33: f8:a0:83:ef:9b:77:b1:2e:cd:9b:e8:ee:53:a6:d9:90:58:88: 82:ca:d0:ac:65:7f:45:50:ad:eb:75:d4:2f:ad:59:fd:08:f6: 37:79:2e:79:4c:fd:08:f9:5f:f7:22:df:65:b2:2c:6c:42:08: 64:68:bc:f6:ac:6b:f0:d7:95:f1:49:86:80:05:ae:54:7e:01: 51:02:2b:16:4e:64:b0:07:64:28:45:a9:1d:e6:84:0c:53:ce: 6b:c4:ce:af:78:32:7a:90:62:06:93:ad:96:cb:96:6c:65:4b: 01:ef:a7:32:8f:ab:17:af:f8:01:1c:ac:a4:cc:c7:f8:ff:0e: 93:c6:39:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay1mNzfAlxBxAUqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDM1ZGI1MWMtYTM5My00YzBkLWE1NTYtMGM5YjU2YjE5ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0doms/pKPY6Zy1JsZ6bA4nDckXeKx+WlkZxA 5e3kKJEB2TIRq0B+81Ttum/tFtK5vlK1u3J5YtI4FPNa105fEZpFdrFozzO1LQQr ZrUbjy/1wl2XqWu33UPWzmDGQshZlnvw+k0IXMulhxn86tEf86/MuY7QH+JIGYNx K0jxAdYvsImLVqV2HfosUE/z6Q6bN2q6gNj1kLTGMk6x09f+/AX2Jd0M3oPTde+9 cSdE4mvwskNCIu7M7o2bZaXEl++SNx6p4DV7wxhYuMg5VLnNS3C04B4GGRsyXaoc jDqwZfCLPWkwYuVv9w0cZJxI3TvrXl9JcUL0GmhoAjrmtMz7JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAw3MSZf06vfEfqh5gdfw+jSjAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGRmZGU1ZmYtNWM4Yi0z ZjNhLTgwMjAtMjI5MzZkYTUyMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJ9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALs0OgcWYySgvHZpmZo9EGtMim7s9nJUSFXbxWpRGzHBHxULHb8+bYa4 5rvk+dZrmcCV5LHeNFdJ0pdui45I5VIwi+Btufi3fjkawe82ELdvKtYctq7eXK8m OGwGQsN6cR4JJ2C7bOFsG09WqMEyAivxaEoPeAoBSZyx1HUXM/igg++bd7EuzZvo 7lOm2ZBYiILK0Kxlf0VQret11C+tWf0I9jd5LnlM/Qj5X/ci32WyLGxCCGRovPas a/DXlfFJhoAFrlR+AVECKxZOZLAHZChFqR3mhAxTzmvEzq94MnqQYgaTrZbLlmxl SwHvpzKPqxev+AEcrKTMx/j/DpPGOaA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:37 2026 by rpki-client