$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa File: 9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa (raw, json) Hash identifier: 0lG/euOIqtzqHAWEm2H7hi3U6H51VRq2EckG3b3Dr28= Subject key identifier: 67:BB:6A:1E:37:E5:0F:70:E4:58:FD:D2:4E:53:3F:4F:C1:21:D1:69 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CABD1B61EF30CE894C85C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 71.89.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:bd:1b:61:ef:30:ce:89:4c:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=506e3eb5-737b-4d60-8bbb-ebcea2e34e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:55:50:db:62:f6:ec:c3:01:2e:1b:c0:76: e8:ea:64:b8:66:f0:1f:02:c6:e5:d4:7c:2c:8f:bc: dc:1e:f9:cc:56:63:93:84:5f:24:f9:12:ce:06:f5: 4e:3f:26:04:ce:59:f9:e3:8a:59:e8:15:67:ed:04: a5:d6:73:31:6d:6a:a7:27:a9:a2:77:d0:f6:97:e1: 74:3f:3c:68:02:ae:96:b9:5c:7c:70:3b:04:08:ed: 76:c2:05:fa:15:ce:07:fb:bd:4f:e7:93:37:ba:90: f8:55:c5:c5:91:ce:8f:43:0d:87:92:b4:1c:18:64: 03:c9:35:a2:30:47:21:11:5b:b7:46:c6:6e:8f:34: 7d:67:1c:87:58:f5:eb:46:9b:a9:57:10:3f:28:83: 6d:9c:5d:d3:03:e4:ed:10:4c:37:e2:7e:48:eb:a0: 13:ce:58:9d:27:5a:21:7f:d3:e8:23:6a:f4:59:82: 43:46:06:85:cf:47:eb:cf:b5:1a:97:e6:ee:81:89: 56:65:ec:37:6a:cf:5c:96:a8:f1:d5:90:71:6f:4c: 49:21:d0:fd:e8:2c:15:49:9e:ab:99:b7:f0:94:71: cb:37:e7:43:c2:82:92:60:5b:d2:30:52:9e:f2:89: f5:2c:99:4c:80:5f:75:7b:13:f0:4e:ef:29:b8:3e: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:6A:1E:37:E5:0F:70:E4:58:FD:D2:4E:53:3F:4F:C1:21:D1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.89.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:17:c6:98:dd:4c:31:ae:a3:41:cb:e6:50:bb:57:01:58:6d: 05:08:72:6c:2d:76:ee:f2:7b:c4:ff:83:c3:dc:77:a5:e2:77: 45:fc:65:d8:49:ca:e4:a9:b3:87:ed:d9:81:8f:21:60:ce:7c: 3c:f6:bd:95:66:d3:dd:f3:e1:0f:22:4f:c5:31:43:29:86:e1: 08:ae:71:9a:72:9f:f2:3c:c3:88:d3:63:fc:87:cc:2d:90:91: 27:df:bb:89:e7:79:85:32:a6:ea:a6:21:53:99:78:52:5a:2e: be:b3:48:5e:65:6a:80:ff:3b:3b:99:56:c2:d8:a3:72:49:fa: 46:04:9d:10:97:f6:7d:a5:01:a6:88:3a:52:70:3f:a0:8b:79: ce:05:a9:e2:e9:af:ed:db:b0:16:9c:62:d5:eb:55:a0:f7:e3: e2:48:ea:e6:13:7c:18:09:8c:d1:a2:73:54:ce:84:9f:d1:9f: ce:da:91:6f:37:e5:71:6d:9c:6b:77:b0:b3:eb:81:ab:f1:a3: 28:0a:21:92:4e:63:62:5a:82:49:a4:9b:5c:54:f9:09:cc:bb: 03:35:9d:a5:95:b8:25:48:95:9a:f5:8a:4c:d5:e4:3c:0d:bf: fa:fd:7f:b6:a0:32:08:c4:dc:ce:57:f9:2c:89:1e:08:fd:c5: ff:4e:9c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayr0bYe8wzolMhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NTA2ZTNlYjUtNzM3Yi00ZDYwLThiYmItZWJjZWEyZTM0ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7xVUNti9uzDAS4bwHbo6mS4ZvAfAsbl1Hws j7zcHvnMVmOThF8k+RLOBvVOPyYEzln544pZ6BVn7QSl1nMxbWqnJ6mid9D2l+F0 PzxoAq6WuVx8cDsECO12wgX6Fc4H+71P55M3upD4VcXFkc6PQw2HkrQcGGQDyTWi MEchEVu3RsZujzR9ZxyHWPXrRpupVxA/KINtnF3TA+TtEEw34n5I66ATzlidJ1oh f9PoI2r0WYJDRgaFz0frz7Ual+bugYlWZew3as9clqjx1ZBxb0xJIdD96CwVSZ6r mbfwlHHLN+dDwoKSYFvSMFKe8on1LJlMgF91exPwTu8puD6mBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe7ah435Q9w5Fj90k5TP0/BIdFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWIyM2VmNzAtYzZhNC0z ZGQxLTg2NjAtNGFmMTJjZTAxMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoXxpjdTDGuo0HL5lC7VwFYbQUIcmwtdu7ye8T/g8Pcd6Xid0X8ZdhJ yuSps4ft2YGPIWDOfDz2vZVm093z4Q8iT8UxQymG4QiucZpyn/I8w4jTY/yHzC2Q kSffu4nneYUypuqmIVOZeFJaLr6zSF5laoD/OzuZVsLYo3JJ+kYEnRCX9n2lAaaI OlJwP6CLec4FqeLpr+3bsBacYtXrVaD34+JI6uYTfBgJjNGic1TOhJ/Rn87akW83 5XFtnGt3sLPrgavxoygKIZJOY2Jagkmkm1xU+QnMuwM1naWVuCVIlZr1ikzV5DwN v/r9f7agMgjE3M5X+SyJHgj9xf9OnAk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:57 2026 by rpki-client