$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa File: a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa (raw, json) Hash identifier: gnxoL3rw2g8uISZbQV+m69F/h9FIkNtDmf1mgRspyKQ= Subject key identifier: 70:5B:3B:8D:DB:5A:0F:DD:2D:CC:69:C5:BD:1A:14:B4:A4:F3:57:03 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAD47A91A3EA4CEAA1FF40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 68.118.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:d4:7a:91:a3:ea:4c:ea:a1:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=fe9f633e-62cb-4c60-a07e-74c03d19cab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:08:86:70:71:48:b6:f0:10:a0:e5:df:26: ee:00:6a:87:83:7b:d2:31:3d:ff:96:52:78:70:5a: 35:84:20:58:ee:e1:7f:c7:5f:b1:69:76:ac:6e:be: b2:28:e9:b9:02:aa:4e:84:72:f2:85:0c:57:9a:f0: fe:5b:3f:7d:88:25:7e:25:ff:f1:97:b5:f4:09:2e: 23:19:ca:8f:29:3c:5a:30:ff:1c:fa:74:72:50:9a: 51:09:9b:60:9f:00:02:7e:52:7f:65:95:d7:c4:52: 38:12:40:1a:40:3b:1d:a3:ca:e9:50:5c:b7:d6:5d: 00:98:d4:fa:ef:f0:4a:92:31:df:56:b1:14:5f:ad: 46:5b:f7:a6:27:34:cd:68:5d:cf:0b:3c:f4:25:11: 8d:5c:57:d1:ca:47:ff:1e:32:75:81:4a:6e:18:17: 74:e2:7d:fb:50:0a:ae:13:c9:1c:ad:9a:71:ef:50: 42:9b:7f:31:0b:5d:33:54:fb:35:03:9b:94:0c:17: c1:e0:a7:90:97:96:10:76:e0:26:b7:6e:2b:e7:52: 98:2f:fd:a0:bd:0b:c1:cf:b3:3b:3e:ec:c8:5e:f6: 30:a3:3b:da:32:89:44:74:73:f3:92:6a:63:52:f3: a2:3c:4a:96:d9:25:bd:4c:62:7e:73:82:ac:d5:b3: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5B:3B:8D:DB:5A:0F:DD:2D:CC:69:C5:BD:1A:14:B4:A4:F3:57:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.118.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:60:d0:82:c5:d5:ee:1a:39:1c:4c:33:54:26:22:80:39:55: e4:b2:f6:df:e2:d0:3c:8c:18:03:59:ae:2f:93:f2:a5:c5:3e: e0:3e:a0:ce:87:18:aa:53:9c:e0:5d:64:6b:3d:05:a9:cc:6a: 7a:09:ed:c8:80:cb:08:01:fc:37:33:10:f2:f7:ca:94:34:d4: 4d:98:f8:80:02:3f:01:9a:d9:ab:29:8c:7d:4a:54:0b:73:bb: e6:c1:b9:c2:50:47:da:1f:ee:2d:39:9b:74:7b:39:9b:dc:d0: b2:95:03:8f:0a:b6:dd:75:08:72:ea:83:91:c9:26:33:d4:6c: ab:15:0f:66:8d:9f:a3:ca:7b:dd:8d:8d:e8:9d:49:5b:bb:0c: 1e:7c:9f:3b:48:3e:ed:79:84:ce:7c:79:38:cc:81:c8:6b:f3: 8a:d7:1f:c4:36:2f:4b:e4:a2:68:44:19:e9:59:fa:b0:92:4b: b4:60:e9:6b:c9:7d:5b:9f:59:4a:52:62:05:95:0f:a6:81:01: e1:a1:a9:60:24:c0:e9:84:d9:3f:37:e8:d3:87:a0:94:11:16: 1a:64:fb:c2:c1:4a:ff:5d:bb:dd:48:1e:28:01:2a:16:69:26: 43:ef:da:5b:7a:12:ea:fc:51:7b:66:80:f0:50:93:95:19:be: 10:f4:22:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AytR6kaPqTOqh/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZmU5ZjYzM2UtNjJjYi00YzYwLWEwN2UtNzRjMDNkMTljYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCYIhnBxSLbwEKDl3ybuAGqHg3vSMT3/llJ4 cFo1hCBY7uF/x1+xaXasbr6yKOm5AqpOhHLyhQxXmvD+Wz99iCV+Jf/xl7X0CS4j GcqPKTxaMP8c+nRyUJpRCZtgnwACflJ/ZZXXxFI4EkAaQDsdo8rpUFy31l0AmNT6 7/BKkjHfVrEUX61GW/emJzTNaF3PCzz0JRGNXFfRykf/HjJ1gUpuGBd04n37UAqu E8kcrZpx71BCm38xC10zVPs1A5uUDBfB4KeQl5YQduAmt24r51KYL/2gvQvBz7M7 PuzIXvYwozvaMolEdHPzkmpjUvOiPEqW2SW9TGJ+c4Ks1bO4eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBbO43bWg/dLcxpxb0aFLSk81cDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTVhMGNmZDItMjQzNC0z NmZlLWFkM2YtMGQ5ZjliMDNhYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdg0ILF1e4aORxMM1QmIoA5VeSy9t/i0DyMGANZri+T8qXFPuA+oM6H GKpTnOBdZGs9BanManoJ7ciAywgB/DczEPL3ypQ01E2Y+IACPwGa2aspjH1KVAtz u+bBucJQR9of7i05m3R7OZvc0LKVA48Ktt11CHLqg5HJJjPUbKsVD2aNn6PKe92N jeidSVu7DB58nztIPu15hM58eTjMgchr84rXH8Q2L0vkomhEGelZ+rCSS7Rg6WvJ fVufWUpSYgWVD6aBAeGhqWAkwOmE2T836NOHoJQRFhpk+8LBSv9du91IHigBKhZp JkPv2lt6Eur8UXtmgPBQk5UZvhD0Imc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:13 2026 by rpki-client