$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/653c8253-6985-353a-84f7-b61dc262c4d6.roa File: 653c8253-6985-353a-84f7-b61dc262c4d6.roa (raw, json) Hash identifier: NfhUTgjnLKb4NIdjpNG/KXEOSlyRaUYeFdkZ/tyUJRg= Subject key identifier: 38:6F:FB:35:26:59:B5:32:EA:B2:CE:43:A5:B3:C2:D0:F5:F4:35:81 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D290F59956AF40DAAA27F6D80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/653c8253-6985-353a-84f7-b61dc262c4d6.roa Signing time: Sat 14 Mar 2026 01:00:31 +0000 ROA not before: Sat 14 Mar 2026 01:00:31 +0000 ROA not after: Fri 12 Jun 2026 01:00:31 +0000 asID: 22677 IP address blocks: 68.114.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:0f:59:95:6a:f4:0d:aa:a2:7f:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 14 01:00:31 2026 GMT Not After : Jun 12 01:00:31 2026 GMT Subject: CN=7c16ddf6-eb68-48c3-aedd-5e478d7728e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:aa:95:8b:ac:b9:d3:6b:df:2d:5a:84:62: d4:1d:1f:97:31:e8:01:c0:e3:83:fa:62:fe:ad:f2: 94:76:b2:ac:ee:09:0b:7e:49:62:aa:25:56:9e:bd: 29:9d:25:59:c5:bc:55:08:89:e4:d2:68:f8:97:fe: d0:ec:14:4e:3d:39:28:76:22:a1:d4:3c:53:a1:65: 0b:5e:ff:d5:3b:55:af:ac:04:89:e2:36:4f:39:c6: 14:2f:59:78:b7:62:b2:9d:e3:d9:90:06:37:6e:95: 12:a2:02:1c:5b:8d:b7:f0:50:c9:18:cd:a7:9f:f6: fc:34:51:4d:30:04:1f:58:21:8e:5c:d6:ac:86:89: 49:1a:a3:b4:f3:13:a0:f6:d3:5f:de:5a:c0:17:ec: 1b:8b:70:e5:be:1c:0a:0e:69:3d:58:81:2d:ef:ca: af:da:66:60:b4:58:49:9d:6c:41:03:0e:ab:02:ca: 89:e2:44:18:53:85:11:76:cb:b0:e7:d0:22:99:f1: 4f:ca:20:01:7e:29:65:cd:55:bb:fd:d9:4c:a0:96: 27:e3:07:f7:1f:47:16:3e:8f:cb:b6:1c:c7:5a:aa: ef:f4:f7:de:73:dd:31:5e:db:ee:08:cb:bf:66:e5: f9:1f:e3:4b:62:6a:e0:26:53:97:ba:3c:97:64:31: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6F:FB:35:26:59:B5:32:EA:B2:CE:43:A5:B3:C2:D0:F5:F4:35:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/653c8253-6985-353a-84f7-b61dc262c4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e6:c0:3c:20:dc:17:27:87:bb:b7:e5:bc:41:f0:bf:37:55: 72:a3:3b:51:e2:17:45:60:d9:a5:bc:5e:b0:44:88:6a:58:83: 79:82:80:ec:81:aa:21:54:8a:52:8e:92:23:a1:42:b2:da:42: f5:7f:d5:9d:05:44:2e:81:d8:db:56:51:43:96:e1:84:13:a3: 09:9a:3c:a7:c0:bc:06:2e:67:6a:ce:d9:7f:5f:eb:ea:d3:11: d8:31:3d:68:e4:a5:7d:d1:ad:02:aa:e5:36:b6:3f:e6:01:04: 9e:90:c8:b4:46:34:71:58:f9:44:5d:ac:53:7e:c6:fb:fb:23: c8:22:32:d2:1b:94:36:e2:f9:0f:e0:32:fb:13:f7:1b:0d:98: 8b:a9:0a:19:57:90:45:8b:b9:51:13:4e:09:bc:0d:2b:36:8f: e5:f1:95:1e:ce:cb:25:8a:82:cf:34:aa:f9:ef:ff:6d:de:91: 22:79:d0:18:c4:6d:1d:62:4b:6c:c7:10:4f:f6:cf:36:ca:2a: 98:5b:8d:97:12:e3:a9:d3:d3:b2:fa:c8:5e:f1:3f:db:ba:1d: 5f:96:8a:e5:2a:75:80:bc:c2:1f:4f:5d:be:2f:25:4d:59:06: 92:46:cb:07:12:6a:94:25:d4:4b:06:52:74:46:b8:d7:08:87: a2:af:59:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD1mVavQNqqJ/bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk N2MxNmRkZjYtZWI2OC00OGMzLWFlZGQtNWU0NzhkNzcyOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR+qlYusudNr3y1ahGLUHR+XMegBwOOD+mL+ rfKUdrKs7gkLfkliqiVWnr0pnSVZxbxVCInk0mj4l/7Q7BROPTkodiKh1DxToWUL Xv/VO1WvrASJ4jZPOcYUL1l4t2KynePZkAY3bpUSogIcW4238FDJGM2nn/b8NFFN MAQfWCGOXNasholJGqO08xOg9tNf3lrAF+wbi3DlvhwKDmk9WIEt78qv2mZgtFhJ nWxBAw6rAsqJ4kQYU4URdsuw59AimfFPyiABfillzVW7/dlMoJYn4wf3H0cWPo/L thzHWqrv9Pfec90xXtvuCMu/ZuX5H+NLYmrgJlOXujyXZDGQbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhv+zUmWbUy6rLOQ6WzwtD19DWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjUzYzgyNTMtNjk4NS0z NTNhLTg0ZjctYjYxZGMyNjJjNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInmwDwg3Bcnh7u35bxB8L83VXKjO1HiF0Vg2aW8XrBEiGpYg3mCgOyB qiFUilKOkiOhQrLaQvV/1Z0FRC6B2NtWUUOW4YQTowmaPKfAvAYuZ2rO2X9f6+rT EdgxPWjkpX3RrQKq5Ta2P+YBBJ6QyLRGNHFY+URdrFN+xvv7I8giMtIblDbi+Q/g MvsT9xsNmIupChlXkEWLuVETTgm8DSs2j+XxlR7OyyWKgs80qvnv/23ekSJ50BjE bR1iS2zHEE/2zzbKKphbjZcS46nT07L6yF7xP9u6HV+WiuUqdYC8wh9PXb4vJU1Z BpJGywcSapQl1EsGUnRGuNcIh6KvWYk= -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:15 2026 by rpki-client