$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b62a0c7a-2564-34a8-8558-9e960a46085c.roa File: b62a0c7a-2564-34a8-8558-9e960a46085c.roa (raw, json) Hash identifier: i1S+JRk9402fWiehzInOoXwcPJHsT8y4sTMdXAJV4Jk= Subject key identifier: 96:B4:77:C8:30:AC:E6:69:C5:B8:AB:47:7A:05:1B:45:CD:01:3D:37 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAC5CB12B4D37213074110 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b62a0c7a-2564-34a8-8558-9e960a46085c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.241.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:c5:cb:12:b4:d3:72:13:07:41:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=d86395a9-f8fa-418b-95e8-b92b00ef55c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:5a:29:32:10:52:49:b3:20:a4:e2:58:b9: 95:ea:b3:8c:48:23:16:89:cb:71:52:48:5e:23:2e: 70:9e:c1:3f:20:dc:28:cc:1b:5b:4a:2d:2b:dc:12: 31:aa:ff:11:73:01:f6:86:64:17:a3:c4:28:07:61: e3:fb:c1:45:eb:ce:1c:ed:c2:c4:86:66:d5:18:df: 1e:ad:1f:e2:63:3b:62:08:95:fe:d1:f0:cd:68:7b: c1:39:40:ad:e7:9c:63:b7:72:cb:d3:ad:1a:12:95: 97:27:93:e2:be:bb:be:9e:56:d2:3c:26:d6:65:a7: 08:d8:20:e8:9c:ba:e4:37:54:98:cc:e5:d8:58:a4: 48:78:01:78:ac:8a:e5:cc:e5:fd:00:12:a1:40:52: 28:28:d2:8a:d8:4b:e0:c3:19:0e:d4:e2:c5:c9:8d: c5:8e:3f:f3:dc:2d:f0:ce:f3:c2:9e:fc:d7:1f:cb: 35:e5:aa:87:00:56:48:b6:14:b2:f3:aa:b8:18:07: 98:25:c9:7e:9e:1d:84:03:1e:e0:b3:59:dc:a3:de: 29:82:41:3f:bc:83:62:58:f5:7f:6e:f4:41:38:ab: 87:e9:23:dc:33:4d:2b:2b:2c:dc:30:bf:72:d9:4f: 89:2f:b9:13:c4:45:06:28:c2:8a:62:df:c8:91:bc: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:77:C8:30:AC:E6:69:C5:B8:AB:47:7A:05:1B:45:CD:01:3D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b62a0c7a-2564-34a8-8558-9e960a46085c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.241.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0d:b6:1b:00:c7:f7:35:aa:4d:eb:21:50:77:b0:8c:52:21: 49:04:c6:37:c4:1b:77:db:19:64:88:32:64:16:bc:5c:78:15: b8:56:d1:e1:1d:9a:16:b0:14:51:68:b1:15:27:f8:e5:35:a7: 17:26:62:ad:60:0e:92:7e:dd:c8:ae:3c:e1:20:5e:98:23:34: ae:58:74:35:9f:1b:01:5f:9d:c3:ab:06:a2:57:42:94:85:e0: 6a:65:d5:16:3d:bc:34:09:b0:dd:e4:58:29:03:b7:4b:62:f8: 6b:d1:82:b2:62:ed:df:1c:57:e6:27:02:89:80:63:b7:c2:94: 9d:d3:53:f0:f3:17:3b:f1:9c:fd:62:ec:6c:3e:40:a4:ff:0f: cf:7a:75:eb:d8:48:9b:76:7e:89:9b:1d:82:67:32:bd:c9:e7: dd:59:08:be:63:03:fb:04:fb:d5:e2:26:4b:b1:5b:fb:6d:19: ad:6b:57:5c:50:b7:fd:89:4e:5e:fc:f7:9b:1c:c1:91:bb:2f: 27:dc:ec:b4:ac:bd:15:cc:e7:77:3a:a3:95:8d:d8:a6:e1:15: bb:f8:70:85:7a:62:92:58:dc:97:5f:94:8c:1c:c4:14:25:79: 45:e1:7e:c8:8e:ab:20:af:ab:2b:17:13:d8:a8:13:02:f5:c3: 56:94:84:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AysXLErTTchMHQRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDg2Mzk1YTktZjhmYS00MThiLTk1ZTgtYjkyYjAwZWY1NWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkJaKTIQUkmzIKTiWLmV6rOMSCMWictxUkhe Iy5wnsE/INwozBtbSi0r3BIxqv8RcwH2hmQXo8QoB2Hj+8FF684c7cLEhmbVGN8e rR/iYztiCJX+0fDNaHvBOUCt55xjt3LL060aEpWXJ5Pivru+nlbSPCbWZacI2CDo nLrkN1SYzOXYWKRIeAF4rIrlzOX9ABKhQFIoKNKK2EvgwxkO1OLFyY3Fjj/z3C3w zvPCnvzXH8s15aqHAFZIthSy86q4GAeYJcl+nh2EAx7gs1nco94pgkE/vINiWPV/ bvRBOKuH6SPcM00rKyzcML9y2U+JL7kTxEUGKMKKYt/IkbwfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa0d8gwrOZpxbirR3oFG0XNAT03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjYyYTBjN2EtMjU2NC0z NGE4LTg1NTgtOWU5NjBhNDYwODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABINthsAx/c1qk3rIVB3sIxSIUkExjfEG3fbGWSIMmQWvFx4FbhW0eEd mhawFFFosRUn+OU1pxcmYq1gDpJ+3ciuPOEgXpgjNK5YdDWfGwFfncOrBqJXQpSF 4Gpl1RY9vDQJsN3kWCkDt0ti+GvRgrJi7d8cV+YnAomAY7fClJ3TU/DzFzvxnP1i 7Gw+QKT/D896devYSJt2fombHYJnMr3J591ZCL5jA/sE+9XiJkuxW/ttGa1rV1xQ t/2JTl7895scwZG7Lyfc7LSsvRXM53c6o5WN2KbhFbv4cIV6YpJY3JdflIwcxBQl eUXhfsiOqyCvqysXE9ioEwL1w1aUhL8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:53 2026 by rpki-client