$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa File: 89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa (raw, json) Hash identifier: ufk/rjMVFmfEUoj9YvJ9G0A1vDil/OEsfxuk+nw/Hjo= Subject key identifier: 13:52:24:38:C7:BB:97:83:DD:E9:DA:6F:77:01:8D:AA:81:52:08:88 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CADBF7F9F5A2FD97C65B80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 68.191.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:db:f7:f9:f5:a2:fd:97:c6:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=8a3eafaa-1c67-4d6b-b296-bfcb2e11b256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:71:c5:fd:b8:d6:6b:e4:a5:7a:58:f6:93: 08:88:8f:b2:de:09:16:c5:e1:45:20:61:09:4d:25: d1:13:c8:7f:85:2a:b8:66:e3:f6:d6:5b:9e:bc:4c: 8c:d7:df:56:5b:50:43:47:2f:e0:24:85:75:16:4d: 69:94:5b:35:81:fb:57:39:5d:83:13:c1:ae:38:f5: ad:88:2b:81:14:fc:09:46:19:c3:da:2b:8f:cc:25: 9c:6a:87:f1:fd:f9:68:e7:4a:74:8d:41:98:08:1b: c1:bb:a7:d1:a9:d5:72:92:4a:6f:c1:26:27:21:9c: 1c:42:dc:d4:8f:e7:31:34:c8:09:bb:95:2e:16:87: 55:a3:62:a2:2d:73:6e:6b:9a:1d:0b:d1:77:61:e7: 40:a5:9b:c4:31:a3:49:36:bc:c0:52:37:5b:d8:4b: bd:62:51:18:f0:8f:81:61:5d:b6:54:72:39:1a:5e: 54:ee:55:97:84:8c:1c:3e:f0:49:05:e2:8e:da:bd: ea:ee:c5:cd:47:1c:00:e7:ec:d9:96:af:72:dd:5e: 70:58:7b:b7:9b:d5:90:c7:e9:18:03:f7:1b:f5:c3: b5:ad:9b:58:e7:5e:8f:af:41:b8:24:e8:d3:90:d1: b5:70:45:bf:af:60:fe:92:53:bc:02:74:77:ce:8d: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:52:24:38:C7:BB:97:83:DD:E9:DA:6F:77:01:8D:AA:81:52:08:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6f:69:70:db:63:b6:80:80:9d:8d:eb:fe:02:b8:71:d6:71: 52:44:1f:e9:73:21:fc:11:9f:e6:c3:d5:80:e9:ea:9a:fb:09: c4:84:d4:eb:71:75:a0:0d:c2:d7:f2:db:f7:b0:eb:67:6a:ef: 77:b3:48:2a:5d:32:af:0c:1f:74:7d:43:4f:df:2d:7c:39:89: 6d:ce:8f:be:93:b8:40:23:78:2b:78:3b:f2:2c:2d:47:a6:7a: dc:90:10:a5:c7:0a:78:33:2f:10:c5:b1:95:a4:07:44:20:d0: fb:a8:6d:cd:5d:fc:36:4c:3c:24:12:43:d3:19:4f:72:20:c0: 44:f3:88:fd:3f:3f:8b:86:a9:73:bd:55:1c:d0:e8:b1:21:ae: 56:40:c2:33:8c:8d:ef:17:10:81:4f:8e:73:ff:4f:3c:54:51: d5:d6:ad:07:b1:be:57:53:8f:66:a1:26:15:90:60:4f:64:7b: ca:d2:30:f8:34:cd:c4:16:cb:d3:0c:b8:45:ef:d0:f8:27:12: e4:29:f8:98:54:5c:41:94:64:e4:ad:fe:6f:44:bf:5b:74:3e: 95:b2:42:e9:14:8e:22:db:48:f5:f7:bf:b5:b7:1e:23:6b:78: be:92:60:f7:3e:77:cf:08:7c:e8:03:6c:e0:40:33:80:04:29: b8:5b:e0:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aytv3+fWi/ZfGW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OGEzZWFmYWEtMWM2Ny00ZDZiLWIyOTYtYmZjYjJlMTFiMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshdxxf241mvkpXpY9pMIiI+y3gkWxeFFIGEJ TSXRE8h/hSq4ZuP21luevEyM199WW1BDRy/gJIV1Fk1plFs1gftXOV2DE8GuOPWt iCuBFPwJRhnD2iuPzCWcaofx/flo50p0jUGYCBvBu6fRqdVykkpvwSYnIZwcQtzU j+cxNMgJu5UuFodVo2KiLXNua5odC9F3YedApZvEMaNJNrzAUjdb2Eu9YlEY8I+B YV22VHI5Gl5U7lWXhIwcPvBJBeKO2r3q7sXNRxwA5+zZlq9y3V5wWHu3m9WQx+kY A/cb9cO1rZtY516Pr0G4JOjTkNG1cEW/r2D+klO8AnR3zo1tYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNSJDjHu5eD3enab3cBjaqBUgiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODliNGI1ZmItZjBmNS0z OWExLWI3YTAtNTViNzA1N2RiNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhvaXDbY7aAgJ2N6/4CuHHWcVJEH+lzIfwRn+bD1YDp6pr7CcSE1Otx daANwtfy2/ew62dq73ezSCpdMq8MH3R9Q0/fLXw5iW3Oj76TuEAjeCt4O/IsLUem etyQEKXHCngzLxDFsZWkB0Qg0Puobc1d/DZMPCQSQ9MZT3IgwETziP0/P4uGqXO9 VRzQ6LEhrlZAwjOMje8XEIFPjnP/TzxUUdXWrQexvldTj2ahJhWQYE9ke8rSMPg0 zcQWy9MMuEXv0PgnEuQp+JhUXEGUZOSt/m9Ev1t0PpWyQukUjiLbSPX3v7W3HiNr eL6SYPc+d88IfOgDbOBAM4AEKbhb4Fo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:15 2026 by rpki-client