$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa815707-530d-3d3f-8605-cac29011363e.roa File: aa815707-530d-3d3f-8605-cac29011363e.roa (raw, json) Hash identifier: 6YZy0lMwPEWUWZgL+DB5REwB4D9v3PbOs7oe6w7Ylxw= Subject key identifier: 84:7F:72:58:FF:0A:5A:49:09:29:31:00:B1:DB:70:82:75:43:BE:06 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAF1C681D9D3D9ADF7093A Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa815707-530d-3d3f-8605-cac29011363e.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 47.231.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:f1:c6:81:d9:d3:d9:ad:f7:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=cb688cf7-43ff-4a73-96a3-fe80c29af2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e5:92:84:64:d5:df:d8:cd:43:56:da:8c:e6: 82:2d:ac:c1:ce:ac:3a:b9:47:f2:24:de:75:34:70: a3:64:4c:35:0a:71:cf:64:8e:20:e3:ee:b0:fc:c7: b0:ac:8c:c1:c7:24:c5:4a:28:6e:39:2f:66:bd:2c: 21:5c:5e:51:d2:84:49:bd:fe:79:61:7c:d8:23:a2: 38:43:d5:7f:2e:46:8f:ca:97:df:09:9a:18:27:5b: 80:be:9d:e6:2c:73:15:4d:be:79:b4:7c:a0:98:fe: c4:ca:41:d2:32:c6:49:dc:71:13:f2:2b:eb:ff:b9: 39:57:d8:ae:4a:5f:7f:6d:27:be:f7:36:ec:3c:6b: 97:b2:51:22:b0:ae:fc:9e:19:00:c2:82:1f:fe:66: 6f:20:3a:a7:38:1f:4c:a2:dd:da:b2:db:75:35:6b: 9a:7f:ae:49:b6:1c:2a:0b:e2:a2:1b:e8:fc:2c:63: f7:9e:aa:b9:b7:2c:8c:cb:16:a9:60:5f:5d:47:6f: 34:03:b6:c5:5d:15:51:74:55:62:04:b6:5e:3f:07: 0b:9f:bf:c2:dd:e7:b0:79:e5:b7:f6:ab:11:76:a0: 21:55:6f:a6:b6:ed:48:37:99:2e:3c:4f:d9:aa:f5: 12:20:91:38:32:f0:4f:0d:1c:a1:e2:30:28:39:87: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:72:58:FF:0A:5A:49:09:29:31:00:B1:DB:70:82:75:43:BE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa815707-530d-3d3f-8605-cac29011363e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.231.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:99:c5:99:75:33:71:dc:53:30:28:cf:71:95:3f:09:d4:38: 61:90:a3:54:c6:37:f6:bf:5e:88:23:0f:ee:6b:ba:bc:bc:ea: a4:0d:00:dd:9a:16:5d:c5:1e:50:69:5b:e3:f9:40:1c:9d:a9: be:67:20:23:cc:56:a1:f2:ab:03:aa:fe:0f:18:10:34:c5:a3: 31:44:b6:ea:f9:29:3f:53:3a:6a:28:84:5e:d6:1c:01:8b:3e: 13:14:68:73:4b:95:bb:6f:de:c0:21:75:3c:e9:16:f3:63:6f: 0d:23:d2:d7:1a:49:77:cc:62:f4:be:11:53:bc:00:dd:6c:96: a0:c8:df:4a:10:3e:4e:ff:3a:8f:4e:a3:f9:14:1c:66:b4:af: ea:0a:6d:2a:8c:32:a4:26:79:ed:d4:2b:09:29:1c:9d:aa:82: d4:91:dc:57:11:36:b5:ed:8a:08:e0:35:fb:ad:e4:7b:ad:31: 57:14:5d:76:12:20:ba:9a:a0:ad:17:2a:1f:7e:f6:d9:95:45: c6:d4:7e:7e:b5:5c:78:bb:5f:9d:47:47:d4:cb:d8:3c:eb:71: ce:9e:38:9e:69:1b:5b:73:fa:98:97:8c:22:30:d6:c7:65:1a: ed:2a:5c:db:66:78:b2:53:4d:46:5f:17:28:e6:d6:a6:05:88: c5:77:f6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyvHGgdnT2a33CTowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Y2I2ODhjZjctNDNmZi00YTczLTk2YTMtZmU4MGMyOWFmMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOWShGTV39jNQ1bajOaCLazBzqw6uUfyJN51 NHCjZEw1CnHPZI4g4+6w/MewrIzBxyTFSihuOS9mvSwhXF5R0oRJvf55YXzYI6I4 Q9V/LkaPypffCZoYJ1uAvp3mLHMVTb55tHygmP7EykHSMsZJ3HET8ivr/7k5V9iu Sl9/bSe+9zbsPGuXslEisK78nhkAwoIf/mZvIDqnOB9Mot3astt1NWuaf65Jthwq C+KiG+j8LGP3nqq5tyyMyxapYF9dR280A7bFXRVRdFViBLZePwcLn7/C3eeweeW3 9qsRdqAhVW+mtu1IN5kuPE/ZqvUSIJE4MvBPDRyh4jAoOYcUFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR/clj/ClpJCSkxALHbcIJ1Q74GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWE4MTU3MDctNTMwZC0z ZDNmLTg2MDUtY2FjMjkwMTEzNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBL+f6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaZxZl1M3HcUzAoz3GVPwnUOGGQo1TGN/a/XogjD+5rury86qQNAN2a Fl3FHlBpW+P5QBydqb5nICPMVqHyqwOq/g8YEDTFozFEtur5KT9TOmoohF7WHAGL PhMUaHNLlbtv3sAhdTzpFvNjbw0j0tcaSXfMYvS+EVO8AN1slqDI30oQPk7/Oo9O o/kUHGa0r+oKbSqMMqQmee3UKwkpHJ2qgtSR3FcRNrXtigjgNfut5HutMVcUXXYS ILqaoK0XKh9+9tmVRcbUfn61XHi7X51HR9TL2Dzrcc6eOJ5pG1tz+piXjCIw1sdl Gu0qXNtmeLJTTUZfFyjm1qYFiMV39kI= -----END CERTIFICATE-----Generated at Thu Mar 26 22:11:20 2026 by rpki-client