$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa File: 553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa (raw, json) Hash identifier: YSjSteXKT/lkGzQ5d/1BEjiQjyTk9aQJH8aldyRZJaM= Subject key identifier: DE:4F:9F:51:4A:63:21:D4:71:9A:AA:D0:24:63:F3:D7:88:87:34:37 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAB0A0D0C177235395F600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 96.41.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:b0:a0:d0:c1:77:23:53:95:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=a5825ca1-ecac-4d2c-8fa8-53f950de3b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:09:e3:6f:ad:8f:51:a4:da:21:b8:d3:84: 6e:69:1c:81:a9:3d:85:d5:7c:65:ce:fa:30:e7:ff: 18:55:e7:04:cb:b7:dc:5f:f5:b1:e3:5e:b8:d4:a8: fe:99:60:fc:50:59:a3:f6:c8:dd:ec:1a:76:ab:98: 39:63:aa:20:4b:c9:ad:77:f4:82:a8:b9:40:d6:0b: 46:f0:6a:5b:8d:45:ac:2a:0a:dc:38:c5:23:36:24: f8:ef:e7:7c:55:b2:d8:31:e4:6e:e6:38:11:cf:b1: 9a:e4:c3:b7:80:81:4e:01:0e:ad:70:01:83:92:c6: 7d:7f:75:f7:84:c9:d4:11:04:12:e8:6b:99:7e:52: d0:ab:7b:f9:e4:77:52:8a:86:89:2b:be:f5:f2:d6: bb:6a:a8:23:ba:cb:d4:8a:16:74:3b:03:d0:8d:6e: 84:e2:b1:c2:1f:7b:f1:76:66:ab:da:d3:8a:95:db: 0f:e1:5c:a8:4d:e6:bf:1a:b5:68:8b:95:f4:0f:03: 48:e7:42:3b:0d:4d:ce:a8:81:88:6f:d1:91:86:70: c0:4b:69:f5:10:e1:08:b4:8a:70:5e:50:1f:b1:44: cb:7f:b1:33:d8:ef:62:bf:6a:72:ae:e9:91:84:1b: c4:26:5c:68:2b:00:5b:a9:59:5d:47:63:1b:c4:a3: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4F:9F:51:4A:63:21:D4:71:9A:AA:D0:24:63:F3:D7:88:87:34:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 96.41.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c8:8a:33:f0:1a:9b:86:ec:4d:25:cb:33:ff:b8:5b:db:44: da:a6:da:ee:80:89:36:f8:ff:6e:90:86:e2:bf:4e:cd:1f:7e: 3a:4e:d2:e0:26:aa:fa:7b:c2:d4:29:24:9d:c9:fe:72:67:b9: 0e:f4:63:a6:7e:ca:5c:98:7e:7e:30:c7:56:ee:2b:8b:b5:67: 5d:50:8a:7f:fa:ef:fe:cb:29:31:cc:22:23:92:e2:40:d5:29: 67:16:31:e5:ec:63:f8:66:2b:65:9a:1d:7b:14:50:82:a4:4c: 04:da:c6:df:f5:ba:61:89:40:7d:5a:db:0a:d8:16:96:c5:4e: fa:57:2f:5e:91:f3:e0:fe:19:96:d8:00:f3:78:0c:18:74:cd: 78:02:73:52:15:ba:8c:89:bb:7b:2b:0c:05:6e:d9:4a:0d:6b: ce:8e:33:fe:d3:e9:a8:51:fa:96:5d:13:64:2e:73:8d:10:ee: 68:bd:3b:84:e7:5d:d4:fb:6b:d4:77:de:14:2e:c2:c5:ce:6a: f3:62:13:aa:e6:c4:51:5a:b7:8d:b1:56:a2:5b:0d:51:86:b5: cc:e4:8e:ed:84:dd:f9:fa:d8:68:61:24:05:fa:6b:b4:07:ed: 91:ed:c6:31:84:e7:33:ce:32:82:ff:42:3e:04:18:29:2a:b2: 0d:9b:58:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyrCg0MF3I1OV9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YTU4MjVjYTEtZWNhYy00ZDJjLThmYTgtNTNmOTUwZGUzYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2oJ42+tj1Gk2iG404RuaRyBqT2F1Xxlzvow 5/8YVecEy7fcX/Wx41641Kj+mWD8UFmj9sjd7Bp2q5g5Y6ogS8mtd/SCqLlA1gtG 8GpbjUWsKgrcOMUjNiT47+d8VbLYMeRu5jgRz7Ga5MO3gIFOAQ6tcAGDksZ9f3X3 hMnUEQQS6GuZflLQq3v55HdSioaJK7718ta7aqgjusvUihZ0OwPQjW6E4rHCH3vx dmar2tOKldsP4VyoTea/GrVoi5X0DwNI50I7DU3OqIGIb9GRhnDAS2n1EOEItIpw XlAfsUTLf7Ez2O9iv2pyrumRhBvEJlxoKwBbqVldR2MbxKN6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5Pn1FKYyHUcZqq0CRj89eIhzQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTUzYmQ1YTEtOTRiMi0z ZDI0LThkMTItNWEyNWVjNzZlMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYCmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTIijPwGpuG7E0lyzP/uFvbRNqm2u6AiTb4/26QhuK/Ts0ffjpO0uAm qvp7wtQpJJ3J/nJnuQ70Y6Z+ylyYfn4wx1buK4u1Z11Qin/67/7LKTHMIiOS4kDV KWcWMeXsY/hmK2WaHXsUUIKkTATaxt/1umGJQH1a2wrYFpbFTvpXL16R8+D+GZbY APN4DBh0zXgCc1IVuoyJu3srDAVu2UoNa86OM/7T6ahR+pZdE2Quc40Q7mi9O4Tn XdT7a9R33hQuwsXOavNiE6rmxFFat42xVqJbDVGGtczkju2E3fn62GhhJAX6a7QH 7ZHtxjGE5zPOMoL/Qj4EGCkqsg2bWN8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:41 2026 by rpki-client