$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/538a9fbd-55d1-36c9-8164-abea9359a937.roa File: 538a9fbd-55d1-36c9-8164-abea9359a937.roa (raw, json) Hash identifier: l2UYAIBObSytTIT3v86bymUar+kJmHuC1SMRoUqwKp4= Subject key identifier: C8:73:4C:D2:5F:C4:33:B6:D3:60:47:F0:8F:F2:1C:B3:7A:7C:45:18 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB580B4C485F70C11BEB40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/538a9fbd-55d1-36c9-8164-abea9359a937.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 96.42.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:58:0b:4c:48:5f:70:c1:1b:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=398fbf75-0a7a-47d3-9c83-e33da50e3e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:cc:65:71:04:bd:b8:25:85:35:4b:9b:68: 63:75:a9:17:1e:13:b6:dd:66:b9:22:46:37:b0:df: bf:3d:df:ae:93:e9:28:27:87:05:65:bb:54:aa:07: 28:73:a0:49:7a:8c:2e:4d:29:e4:7e:69:e7:03:a6: ea:f6:a8:dc:e0:21:54:6f:ff:6a:e3:ea:b1:bb:46: 4e:fd:62:f3:a9:3b:b0:1e:c1:33:4b:21:bc:81:2d: 9a:57:0b:c3:89:a6:75:79:e1:5a:26:f8:23:d5:4a: d3:53:64:16:88:9e:7b:f7:dd:68:aa:bf:50:86:74: 68:fc:84:3b:e3:59:4a:d3:69:f9:a3:ab:1b:4e:0e: e2:3e:f1:ff:2e:42:35:c3:01:66:ef:31:40:ff:a4: 19:9e:11:da:f6:30:92:3d:5b:ae:71:b3:25:17:b5: bc:29:66:d8:73:20:ca:62:1c:61:23:41:ac:74:6f: dd:71:73:a9:e4:7d:a6:20:0c:0c:a8:aa:ff:9a:7a: b8:9e:c7:e2:b2:4f:88:59:e7:a0:11:49:63:68:fc: 7b:94:13:d5:5e:71:62:dc:ce:66:63:39:8a:d8:1c: e4:da:6a:30:50:09:3f:af:b6:c8:39:d2:c1:a8:44: c2:04:aa:d8:ca:5d:46:bc:f2:8e:b7:ce:0e:4a:bb: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:73:4C:D2:5F:C4:33:B6:D3:60:47:F0:8F:F2:1C:B3:7A:7C:45:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/538a9fbd-55d1-36c9-8164-abea9359a937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 96.42.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:b7:75:10:ad:7e:2c:b9:92:9a:f9:33:db:a6:69:6c:fe:a5: 54:76:32:8e:b2:7e:76:2f:5b:da:4e:38:c8:ed:34:3f:cf:15: b9:01:ad:06:cd:85:64:6e:b5:a4:f9:b4:36:d0:75:ad:c5:59: 5c:f9:c0:a9:fd:20:3e:63:6b:84:78:20:6d:e2:6f:24:9d:7a: f8:6a:35:81:a4:98:79:c3:ec:fd:d7:eb:32:40:f9:c9:6a:31: db:12:f3:ae:d7:53:5a:11:38:83:da:35:22:6c:e2:7e:30:3e: d5:39:c9:1a:a6:fe:4d:7c:29:a2:83:f9:90:2b:24:10:ee:b6: 7f:96:54:10:dc:68:42:f4:ca:a9:4e:5e:c4:60:ff:a4:22:ca: 73:32:57:0f:5f:93:6d:91:08:c6:d7:98:d9:4d:28:eb:3e:ea: ed:22:df:0e:48:c2:f7:b3:b2:c7:99:10:bc:28:de:19:a8:6a: ad:e0:e7:9c:4b:78:96:b3:71:23:41:0f:14:ec:e7:71:ff:bb: 5e:6d:49:98:d3:53:e7:4f:9f:cd:89:f0:a0:d3:be:5d:a3:39: 5e:df:57:7f:30:0c:ac:92:9e:cf:a7:e8:cd:a7:87:8e:c1:c3: 44:ab:37:9b:00:2a:78:bb:10:4f:e7:1f:3f:89:f7:b1:e8:e1: 7d:22:85:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay1gLTEhfcMEb60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Mzk4ZmJmNzUtMGE3YS00N2QzLTljODMtZTMzZGE1MGUzZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fzMZXEEvbglhTVLm2hjdakXHhO23Wa5IkY3 sN+/Pd+uk+koJ4cFZbtUqgcoc6BJeowuTSnkfmnnA6bq9qjc4CFUb/9q4+qxu0ZO /WLzqTuwHsEzSyG8gS2aVwvDiaZ1eeFaJvgj1UrTU2QWiJ57991oqr9QhnRo/IQ7 41lK02n5o6sbTg7iPvH/LkI1wwFm7zFA/6QZnhHa9jCSPVuucbMlF7W8KWbYcyDK YhxhI0GsdG/dcXOp5H2mIAwMqKr/mnq4nsfisk+IWeegEUljaPx7lBPVXnFi3M5m YzmK2Bzk2mowUAk/r7bIOdLBqETCBKrYyl1GvPKOt84OSrsGowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhzTNJfxDO202BH8I/yHLN6fEUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTM4YTlmYmQtNTVkMS0z NmM5LTgxNjQtYWJlYTkzNTlhOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANm3dRCtfiy5kpr5M9umaWz+pVR2Mo6yfnYvW9pOOMjtND/PFbkBrQbN hWRutaT5tDbQda3FWVz5wKn9ID5ja4R4IG3ibySdevhqNYGkmHnD7P3X6zJA+clq MdsS867XU1oROIPaNSJs4n4wPtU5yRqm/k18KaKD+ZArJBDutn+WVBDcaEL0yqlO XsRg/6QiynMyVw9fk22RCMbXmNlNKOs+6u0i3w5IwvezsseZELwo3hmoaq3g55xL eJazcSNBDxTs53H/u15tSZjTU+dPn82J8KDTvl2jOV7fV38wDKySns+n6M2nh47B w0SrN5sAKni7EE/nHz+J97Ho4X0ihaQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:51 2026 by rpki-client