$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa File: a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa (raw, json) Hash identifier: dpdzihcFhOMOqoUAoJ2F26Jql1PAbKJtCV5YOOCtdeA= Subject key identifier: 0A:FA:5E:95:ED:89:09:CE:10:D0:BA:C5:50:79:97:AD:37:2D:C0:9D Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CADE4BC3A3C01E6DAA6A00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 71.9.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:de:4b:c3:a3:c0:1e:6d:aa:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=f08a2038-7a45-4cb8-92b9-28443c581774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:60:bb:4e:a5:1c:bd:b5:e1:c2:21:ad:c3: d5:77:d5:1e:1c:77:e8:6c:cd:da:d4:c9:7c:e3:26: 04:bc:85:f5:78:88:bc:de:79:29:c0:15:cd:b2:b9: b1:1b:04:70:8e:c2:26:bb:74:c6:6b:80:34:79:51: 85:97:de:b5:7f:5b:a7:e8:b7:02:db:68:99:3c:c7: 2f:02:20:cd:a5:5e:b4:98:4e:08:61:39:f4:30:01: 20:2d:f8:63:48:25:57:59:94:f8:11:87:16:da:0a: 83:ff:a2:9a:51:60:16:40:38:80:8a:39:66:e7:a0: 3c:de:1d:b9:54:9b:a9:64:51:5c:3c:a9:a9:90:b8: 20:d0:85:14:83:6d:c9:8d:fc:99:8a:f7:38:35:ae: 68:80:3e:23:32:80:dd:17:40:53:f5:07:9d:8e:e4: 00:8d:90:e5:e0:25:ed:a1:ee:c3:37:a4:bd:c8:af: ee:99:a3:48:13:34:6f:ec:4d:ff:c6:62:67:bf:0c: 06:ac:5f:c1:42:1f:73:b2:2e:3d:c2:c1:5e:8c:03: ca:47:f2:da:52:73:20:0d:65:15:86:c4:fc:40:2a: df:c9:04:9c:95:84:1f:99:8a:51:9a:22:29:a7:96: 2b:9e:58:9c:30:18:e1:b4:89:6e:bc:fa:b9:a5:f6: 5c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FA:5E:95:ED:89:09:CE:10:D0:BA:C5:50:79:97:AD:37:2D:C0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.9.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e7:93:15:78:9b:de:df:f6:0f:14:79:83:c5:5b:2c:19:77: 52:25:d7:8e:53:20:8b:42:a4:3a:68:a1:be:3e:41:c2:71:28: 66:b4:a3:d0:3d:16:d8:5b:b0:c3:b9:71:bc:73:00:b9:37:e8: d2:82:8f:91:ae:e0:cc:45:ca:79:f7:3d:4f:7e:46:b4:80:72: a0:ac:0b:4e:0b:4e:90:fc:1a:d4:37:15:eb:70:4b:e1:8e:79: ef:92:20:da:f0:aa:df:cc:98:f3:8b:b2:9c:cb:05:ca:c2:5b: 8d:30:b1:0f:bc:55:6d:4a:ce:db:db:a8:2b:c4:f8:c8:bf:b1: 6a:94:6c:70:a4:19:97:6d:cd:07:cd:69:f5:41:0b:43:84:be: 14:6e:d3:02:5d:9d:72:d4:e9:ac:e3:4b:f6:7b:92:df:50:28: c3:1f:85:6b:6e:09:e7:59:d3:6b:18:5e:0a:c1:61:55:64:c7: 26:1b:c3:05:c3:92:7a:05:91:1e:52:91:c3:57:98:a8:b5:2e: 77:e6:42:54:8d:cf:84:75:a8:50:48:80:79:9e:a5:b6:c5:f5: 4e:ba:cc:0b:40:d0:bc:ee:85:ea:c5:18:3d:b0:5b:9a:67:16: 55:c1:90:35:a1:b9:95:c6:48:c3:56:15:7a:6a:39:0c:38:f3: 79:c9:e0:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayt5Lw6PAHm2qagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjA4YTIwMzgtN2E0NS00Y2I4LTkyYjktMjg0NDNjNTgxNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Jgu06lHL214cIhrcPVd9UeHHfobM3a1Ml8 4yYEvIX1eIi83nkpwBXNsrmxGwRwjsImu3TGa4A0eVGFl961f1un6LcC22iZPMcv AiDNpV60mE4IYTn0MAEgLfhjSCVXWZT4EYcW2gqD/6KaUWAWQDiAijlm56A83h25 VJupZFFcPKmpkLgg0IUUg23JjfyZivc4Na5ogD4jMoDdF0BT9QedjuQAjZDl4CXt oe7DN6S9yK/umaNIEzRv7E3/xmJnvwwGrF/BQh9zsi49wsFejAPKR/LaUnMgDWUV hsT8QCrfyQSclYQfmYpRmiIpp5YrnlicMBjhtIluvPq5pfZcBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr6XpXtiQnOENC6xVB5l603LcCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTAyZGM3YTItOTA4Ni0z Y2ZiLWE1Y2QtYjdlNDc1MmIxZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjnkxV4m97f9g8UeYPFWywZd1Il145TIItCpDpoob4+QcJxKGa0o9A9 FthbsMO5cbxzALk36NKCj5Gu4MxFynn3PU9+RrSAcqCsC04LTpD8GtQ3FetwS+GO ee+SINrwqt/MmPOLspzLBcrCW40wsQ+8VW1KztvbqCvE+Mi/sWqUbHCkGZdtzQfN afVBC0OEvhRu0wJdnXLU6azjS/Z7kt9QKMMfhWtuCedZ02sYXgrBYVVkxyYbwwXD knoFkR5SkcNXmKi1LnfmQlSNz4R1qFBIgHmepbbF9U66zAtA0LzuherFGD2wW5pn FlXBkDWhuZXGSMNWFXpqOQw483nJ4IE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:19 2026 by rpki-client