$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89f3453d-e87a-3eb3-8c33-733ad879ed8a.roa File: 89f3453d-e87a-3eb3-8c33-733ad879ed8a.roa (raw, json) Hash identifier: 7YrJgE/9E1lMZhNjaJU+hG9vtAXOzBNSsIvIfw0Nv/0= Subject key identifier: 19:81:2A:C3:ED:C1:53:B5:B6:61:ED:88:C2:6C:33:D1:BA:81:1A:46 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAF7ADEFB771722FD33700 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89f3453d-e87a-3eb3-8c33-733ad879ed8a.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 47.2.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:f7:ad:ef:b7:71:72:2f:d3:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=c1d1f278-e04f-4f50-9514-4bb06e5ff731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:f6:c9:68:5e:21:42:98:d0:e3:df:e5:92: 0e:cf:08:8d:92:78:ee:4e:3c:ab:09:68:c1:27:1a: fc:ed:c0:f0:d0:b7:47:a1:ca:f7:46:6b:85:9b:f9: a1:a7:21:e3:35:e4:af:05:50:d9:e1:96:25:3e:77: 1b:e4:aa:ed:c2:87:5d:a8:30:fd:17:4e:1c:16:97: 50:67:ab:eb:d1:bd:7f:8e:86:2c:57:7c:fc:06:57: 93:b0:f2:e0:08:3f:4c:58:5c:36:b4:91:2d:05:06: 1a:93:bf:d8:cc:9f:d8:c8:83:31:5e:59:a3:9b:76: b7:21:4f:70:85:54:00:d2:26:38:7c:9c:e8:53:5d: 66:70:88:61:6a:73:58:b1:d4:8f:1f:5c:30:fb:19: 98:dc:33:3a:25:26:e4:57:4c:ed:c2:95:37:e1:43: 3a:15:46:48:a0:1b:3a:b1:fd:86:d6:bb:c5:0d:d7: ce:86:7a:2e:4b:67:7c:b8:f1:b8:fa:0f:dc:45:74: 17:32:1d:aa:cc:1a:f8:9c:f5:ee:f5:8e:9c:fd:d5: 62:7a:35:7b:60:30:2d:6e:7b:48:56:e6:6f:d3:0c: ae:ae:ad:72:cc:11:7a:26:71:87:b3:88:aa:e6:6c: 7a:f7:26:b8:05:c6:e9:62:dd:32:ac:75:42:37:61: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:2A:C3:ED:C1:53:B5:B6:61:ED:88:C2:6C:33:D1:BA:81:1A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89f3453d-e87a-3eb3-8c33-733ad879ed8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.2.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e6:fb:7f:84:86:4f:b4:c9:b3:cc:3f:76:db:db:08:4b:53: 5d:5b:33:69:5c:07:bf:97:40:dc:5e:c1:b8:14:0f:bd:6a:21: 3e:ec:03:2d:e5:5d:0e:b9:76:a6:62:63:9c:96:73:ec:9f:18: c9:0a:62:48:85:27:48:fa:2a:b2:18:30:42:2d:78:82:b0:4c: 0c:e5:ea:1d:9a:4a:f3:8b:ae:b2:6a:29:e0:e5:10:39:8e:d4: 03:cc:ee:53:b1:1d:f2:6c:62:c8:93:77:14:9f:ea:ab:6e:29: 78:c6:4c:c1:9f:3a:80:f2:71:9c:f4:02:ef:75:0b:34:ec:a1: 7e:4a:ce:34:c7:aa:7e:89:4d:d1:03:de:46:26:8c:d5:f4:e0: 0b:99:19:0d:66:75:64:78:35:db:90:f1:f5:1a:b2:2e:08:25: 40:8a:cf:ec:47:66:f2:9a:b1:a7:f1:f7:3a:d0:fb:13:b6:ca: 83:a1:00:56:df:5a:12:1c:54:7b:98:d3:b9:eb:da:58:4c:df: ba:56:98:db:62:8f:bf:9e:7b:e6:3e:df:43:45:a5:f1:f8:a7: 87:a3:ad:87:ee:95:84:11:c1:4d:14:fd:9b:2c:4b:53:b6:e1: d9:f0:36:a3:9e:66:88:64:55:57:b6:8a:6b:af:29:9d:00:d8: af:6c:0e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayvet77dxci/TNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YzFkMWYyNzgtZTA0Zi00ZjUwLTk1MTQtNGJiMDZlNWZmNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWT2yWheIUKY0OPf5ZIOzwiNknjuTjyrCWjB Jxr87cDw0LdHocr3RmuFm/mhpyHjNeSvBVDZ4ZYlPncb5KrtwoddqDD9F04cFpdQ Z6vr0b1/joYsV3z8BleTsPLgCD9MWFw2tJEtBQYak7/YzJ/YyIMxXlmjm3a3IU9w hVQA0iY4fJzoU11mcIhhanNYsdSPH1ww+xmY3DM6JSbkV0ztwpU34UM6FUZIoBs6 sf2G1rvFDdfOhnouS2d8uPG4+g/cRXQXMh2qzBr4nPXu9Y6c/dViejV7YDAtbntI VuZv0wyurq1yzBF6JnGHs4iq5mx69ya4BcbpYt0yrHVCN2F32wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmBKsPtwVO1tmHtiMJsM9G6gRpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODlmMzQ1M2QtZTg3YS0z ZWIzLThjMzMtNzMzYWQ4NzllZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALwIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3m+3+Ehk+0ybPMP3bb2whLU11bM2lcB7+XQNxewbgUD71qIT7sAy3l XQ65dqZiY5yWc+yfGMkKYkiFJ0j6KrIYMEIteIKwTAzl6h2aSvOLrrJqKeDlEDmO 1APM7lOxHfJsYsiTdxSf6qtuKXjGTMGfOoDycZz0Au91CzTsoX5KzjTHqn6JTdED 3kYmjNX04AuZGQ1mdWR4NduQ8fUasi4IJUCKz+xHZvKasafx9zrQ+xO2yoOhAFbf WhIcVHuY07nr2lhM37pWmNtij7+ee+Y+30NFpfH4p4ejrYfulYQRwU0U/ZssS1O2 4dnwNqOeZohkVVe2imuvKZ0A2K9sDgs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:25 2026 by rpki-client