$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa File: 86dd6601-3722-3e53-99be-3f9149517813.roa (raw, json) Hash identifier: BhTc0oyGvXjxE7hsQrGC7xrq/nhJqWbxU5Y3L+98zbM= Subject key identifier: D1:99:58:5D:33:2C:82:1C:0B:26:B0:F3:C9:FE:02:20:8E:DC:E3:EE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAD6933E1BBAC0D6B515C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 68.191.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:d6:93:3e:1b:ba:c0:d6:b5:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=a628e4f2-961a-47ad-9627-bd86b63c7f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:06:b7:80:75:e2:56:c4:95:55:dd:b4:12: b6:35:20:b7:a6:f6:9b:2d:73:a9:50:ab:1e:d5:8a: 9a:7c:fa:94:b0:48:be:07:05:f4:48:92:a9:e3:f1: 97:6a:84:05:73:22:81:f9:3c:99:3e:3d:34:45:29: 09:71:ff:a3:92:da:f9:fa:e0:d0:41:9e:b9:d7:37: 75:ad:98:eb:f2:7c:8a:1b:91:26:17:61:b9:c5:de: 52:76:28:d4:fd:09:44:74:b4:48:5e:e4:36:42:a0: 73:ea:1d:71:22:6c:94:a7:cf:b1:cf:65:f4:e3:de: 35:45:73:d6:02:ac:93:91:53:ba:47:09:fa:4d:22: a2:98:88:5d:22:84:7d:49:88:01:d1:9f:66:40:14: a7:f2:c0:b0:3a:43:e5:a8:f1:43:5c:17:4b:9b:11: ab:ac:58:81:19:0f:f9:cd:4b:d0:b6:a6:0e:be:55: 01:dd:06:8e:d7:96:52:46:72:03:95:cb:d1:19:ec: 55:96:1c:16:78:69:ba:c4:fc:4b:17:b5:dd:c7:41: ce:ca:17:d8:35:22:74:63:a2:c4:81:7e:58:e7:8b: 74:2d:5b:bf:4b:1f:e6:86:4e:ac:20:ea:b4:0e:67: e5:3e:c1:0b:42:e1:01:cf:6a:9c:e9:d4:32:3f:83: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:58:5D:33:2C:82:1C:0B:26:B0:F3:C9:FE:02:20:8E:DC:E3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b5:a4:ca:25:84:4f:5b:ce:8a:e8:b4:9e:08:a0:0a:cd:11: 1f:18:2a:a8:ef:a7:bb:d6:f1:dc:8d:d7:1f:a9:cb:83:1e:55: 57:2f:db:a0:cd:c3:c6:28:b8:d1:90:2d:99:29:03:db:cc:f7: 08:2b:33:28:f2:45:66:42:20:98:2e:71:8d:c6:d8:f6:1a:04: 12:b9:08:93:73:09:e9:8a:d3:1c:78:e8:8d:7f:a0:28:51:4f: 5b:9d:d8:f3:64:66:8d:07:cf:97:0a:87:90:de:7f:fd:04:ba: 06:98:80:b3:80:43:27:cb:ad:d5:33:14:c5:24:a3:11:8b:8d: 4d:e3:50:6c:1b:be:1a:b3:6d:8d:01:ad:2d:92:60:67:2c:3d: a6:1e:76:a5:b8:99:c8:3e:83:2e:e3:ce:07:56:c9:5c:94:2b: 9c:50:73:85:8d:56:d6:08:59:2c:cd:63:74:d0:91:3d:76:93: 36:3d:17:f2:43:d1:bf:06:8e:be:80:e2:32:4d:67:40:1c:ae: 8d:9c:53:d9:a4:17:17:cb:a8:95:31:a2:a4:4b:21:2a:d1:b8: bb:94:d3:fb:b3:e1:5a:f9:fb:8d:99:57:c4:93:8c:58:2b:14: 4e:4d:78:28:a6:4b:83:cc:97:69:aa:76:0d:60:0c:f3:a4:e7: 97:0f:c3:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AytaTPhu6wNa1FcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YTYyOGU0ZjItOTYxYS00N2FkLTk2MjctYmQ4NmI2M2M3ZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGkGt4B14lbElVXdtBK2NSC3pvabLXOpUKse 1YqafPqUsEi+BwX0SJKp4/GXaoQFcyKB+TyZPj00RSkJcf+jktr5+uDQQZ651zd1 rZjr8nyKG5EmF2G5xd5SdijU/QlEdLRIXuQ2QqBz6h1xImyUp8+xz2X04941RXPW AqyTkVO6Rwn6TSKimIhdIoR9SYgB0Z9mQBSn8sCwOkPlqPFDXBdLmxGrrFiBGQ/5 zUvQtqYOvlUB3QaO15ZSRnIDlcvRGexVlhwWeGm6xPxLF7Xdx0HOyhfYNSJ0Y6LE gX5Y54t0LVu/Sx/mhk6sIOq0DmflPsELQuEBz2qc6dQyP4NupQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGZWF0zLIIcCyaw88n+AiCO3OPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODZkZDY2MDEtMzcyMi0z ZTUzLTk5YmUtM2Y5MTQ5NTE3ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK21pMolhE9bzorotJ4IoArNER8YKqjvp7vW8dyN1x+py4MeVVcv26DN w8YouNGQLZkpA9vM9wgrMyjyRWZCIJgucY3G2PYaBBK5CJNzCemK0xx46I1/oChR T1ud2PNkZo0Hz5cKh5Def/0EugaYgLOAQyfLrdUzFMUkoxGLjU3jUGwbvhqzbY0B rS2SYGcsPaYedqW4mcg+gy7jzgdWyVyUK5xQc4WNVtYIWSzNY3TQkT12kzY9F/JD 0b8Gjr6A4jJNZ0Acro2cU9mkFxfLqJUxoqRLISrRuLuU0/uz4Vr5+42ZV8STjFgr FE5NeCimS4PMl2mqdg1gDPOk55cPw+o= -----END CERTIFICATE-----Generated at Thu Mar 26 23:53:36 2026 by rpki-client