$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/712659fc-061f-382d-821e-83c813f7b882.roa File: 712659fc-061f-382d-821e-83c813f7b882.roa (raw, json) Hash identifier: VQFKeSCrtQztAh2DOKZU/puzUKY56GltUNdHbWq7iJw= Subject key identifier: 89:6D:0A:E8:96:1C:6D:7E:19:8C:17:97:27:BB:B6:68:C5:A9:80:B0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB714C69C6BC6213C37980 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/712659fc-061f-382d-821e-83c813f7b882.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 170.151.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:71:4c:69:c6:bc:62:13:c3:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=8f61c038-b0b9-46bf-bee3-8c6635d087df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:14:8d:5f:63:15:04:9d:76:02:68:0d:c1: 86:47:04:13:ca:c9:3d:dd:92:77:f8:c7:2f:73:b2: 63:f5:13:af:1e:5c:34:0f:72:b2:b6:f2:47:4c:78: 16:9f:8c:ae:0d:67:35:84:d2:7d:af:4b:c2:fe:39: ad:f7:a7:c4:5d:da:2c:b9:7d:15:e7:aa:f0:ca:69: 37:d4:1c:b6:d9:9a:00:86:1e:cb:7a:d6:cb:29:28: 39:89:f7:6e:be:10:43:0b:d4:29:49:53:77:00:97: 7b:e9:e6:02:ed:7d:49:50:58:84:4b:c3:b4:7c:35: 61:31:30:bd:5a:63:aa:19:b1:68:3c:13:89:4d:8e: ff:58:67:95:41:f8:ce:98:28:b5:bb:b8:f2:09:e4: 8d:16:6f:a7:23:1e:10:63:f7:5a:fa:1e:48:2c:80: 8d:15:fb:af:a7:2c:3f:6c:4c:92:34:7a:85:c9:42: 0d:11:bb:8d:c9:27:a0:86:8f:39:31:71:0e:b1:1b: 43:ed:f2:25:9a:36:36:5a:1d:f6:29:e2:d0:f3:5b: d7:3f:a0:b0:f0:36:02:1d:8b:89:6d:89:21:88:96: 38:05:08:91:4c:fb:a3:ab:02:1d:73:25:5f:95:d0: 93:91:d8:06:69:59:20:3b:7c:25:b3:a4:c5:42:aa: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:0A:E8:96:1C:6D:7E:19:8C:17:97:27:BB:B6:68:C5:A9:80:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/712659fc-061f-382d-821e-83c813f7b882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 170.151.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ab:9b:e0:a4:bf:a5:59:18:d9:d3:68:71:aa:3f:25:23:eb: 66:eb:ff:86:5e:c7:ab:53:c0:74:15:ca:2f:f4:2b:83:11:a2: bb:6e:48:76:82:86:73:c1:d5:f1:43:0b:6f:eb:6a:73:dc:59: ea:34:87:68:8a:d3:00:8c:40:21:32:ea:1a:19:d4:43:5b:6c: 40:b2:a8:2e:ec:c0:c0:6e:6f:b1:7f:3a:97:ab:43:ca:3a:98: 21:d9:a4:8f:48:b7:1d:7c:38:2a:78:89:4b:11:2e:69:52:a3: ec:05:95:c3:53:87:de:20:5f:ae:b4:21:4d:8f:b4:e0:bd:29: ae:44:09:fd:43:4f:49:44:13:c2:8f:ce:c4:24:de:0f:d9:4f: 4c:79:a4:4b:76:bb:43:45:0a:87:d0:03:ba:e4:7f:6d:9b:cb: 3e:db:cc:b4:bb:05:9d:cd:4e:80:e1:db:47:4a:ac:5a:51:a9: 08:ff:a3:b6:9c:a2:92:d9:31:f7:d9:12:24:81:eb:82:95:32: fc:48:be:b9:3d:55:69:70:00:0c:6e:58:a0:f7:63:29:82:81: 9e:70:cd:01:20:a5:73:d4:9a:bb:56:d8:e0:b5:5b:7e:be:c0: 80:db:4a:a3:a5:66:2a:c7:3c:4d:a5:d2:65:5a:3a:f6:c9:99: 97:45:23:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay3FMaca8YhPDeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OGY2MWMwMzgtYjBiOS00NmJmLWJlZTMtOGM2NjM1ZDA4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR8UjV9jFQSddgJoDcGGRwQTysk93ZJ3+Mcv c7Jj9ROvHlw0D3KytvJHTHgWn4yuDWc1hNJ9r0vC/jmt96fEXdosuX0V56rwymk3 1By22ZoAhh7LetbLKSg5ifduvhBDC9QpSVN3AJd76eYC7X1JUFiES8O0fDVhMTC9 WmOqGbFoPBOJTY7/WGeVQfjOmCi1u7jyCeSNFm+nIx4QY/da+h5ILICNFfuvpyw/ bEySNHqFyUINEbuNySegho85MXEOsRtD7fIlmjY2Wh32KeLQ81vXP6Cw8DYCHYuJ bYkhiJY4BQiRTPujqwIdcyVfldCTkdgGaVkgO3wls6TFQqqukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIltCuiWHG1+GYwXlye7tmjFqYCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzEyNjU5ZmMtMDYxZi0z ODJkLTgyMWUtODNjODEzZjdiODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqpcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABerm+Ckv6VZGNnTaHGqPyUj62br/4Zex6tTwHQVyi/0K4MRortuSHaC hnPB1fFDC2/ranPcWeo0h2iK0wCMQCEy6hoZ1ENbbECyqC7swMBub7F/OperQ8o6 mCHZpI9Itx18OCp4iUsRLmlSo+wFlcNTh94gX660IU2PtOC9Ka5ECf1DT0lEE8KP zsQk3g/ZT0x5pEt2u0NFCofQA7rkf22byz7bzLS7BZ3NToDh20dKrFpRqQj/o7ac opLZMffZEiSB64KVMvxIvrk9VWlwAAxuWKD3YymCgZ5wzQEgpXPUmrtW2OC1W36+ wIDbSqOlZirHPE2l0mVaOvbJmZdFI2A= -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:17 2026 by rpki-client