$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbc09658-6ffa-36c7-bd98-192f74112450.roa File: bbc09658-6ffa-36c7-bd98-192f74112450.roa (raw, json) Hash identifier: yQSyWYvYigyDVVdinNizE6+sXsdrRxqcoD8E0rBJlHc= Subject key identifier: 3E:BD:46:4C:53:0E:A6:5F:AA:4D:43:7C:C9:44:28:3C:D5:D1:D6:64 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB8277C73C98224DBD5300 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbc09658-6ffa-36c7-bd98-192f74112450.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 97.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:82:77:c7:3c:98:22:4d:bd:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=4d3c540a-339d-46e5-8dd0-3578107f967a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:6c:18:eb:c7:e1:20:ce:e8:3d:1a:f2:4d: 21:14:08:25:34:3f:c4:e9:52:0e:8b:1c:05:ac:f3: e5:57:7b:27:d1:90:c8:ed:d5:66:dd:8a:89:a1:4a: f3:54:88:49:14:a6:d5:a6:3a:40:09:8d:38:12:4f: b8:1a:60:1d:2f:30:18:e1:81:5d:c5:7c:62:ae:a3: a9:c9:58:cb:96:ad:77:70:0c:0b:ac:1c:0e:a8:5b: 96:90:0c:19:85:18:12:22:85:93:b0:5d:c8:cb:3a: e5:47:33:22:e7:69:5b:30:17:df:e6:3c:a9:ad:58: 15:a9:50:ce:21:e3:71:2e:89:ee:2f:98:4c:02:b4: 5d:d2:4a:ca:46:6a:31:db:61:e2:52:08:9b:b1:41: 8b:98:6f:fa:9e:cd:2e:8a:32:68:60:93:aa:9f:ed: 85:09:9f:f0:37:4b:5e:31:55:9d:ca:cb:14:08:a8: 80:ec:ea:2f:d5:db:50:6b:26:fc:d2:50:9d:4c:81: fe:71:65:16:49:23:17:21:35:23:d4:34:89:a6:d5: 77:91:df:84:61:06:6b:60:0e:61:78:fd:68:82:e2: dd:de:1b:4d:c1:3b:bc:5c:88:28:68:c3:96:7d:8e: 3d:da:c6:11:33:e3:5e:2f:4e:d1:7f:52:66:eb:6c: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:46:4C:53:0E:A6:5F:AA:4D:43:7C:C9:44:28:3C:D5:D1:D6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbc09658-6ffa-36c7-bd98-192f74112450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:93:d7:f1:c8:b3:6e:74:14:07:03:73:b1:39:fe:69:2c:22: db:ef:a2:10:87:81:55:8e:99:a0:13:7d:e4:be:12:a6:57:1e: 71:64:f5:91:bf:f5:6b:92:1c:3c:63:a6:7c:a9:a1:20:80:ce: 4d:4d:cd:46:12:8c:52:63:37:76:b9:b4:4f:8c:88:e8:93:2c: 54:61:37:bb:77:42:36:48:93:69:ff:7e:e2:bd:be:95:66:af: 69:8a:8b:3c:c9:08:1a:e8:5b:1c:8e:0b:bb:3f:0b:6a:bc:d5: 9b:78:31:06:2c:0d:34:2e:7e:68:d8:df:23:e7:5e:87:c8:dd: e5:c6:ff:87:4f:77:82:d4:20:9c:90:f9:38:2f:56:3c:22:28: 84:2f:93:a4:80:d3:f1:f6:4f:89:3f:cb:2e:1a:8f:04:e9:72: 00:96:a7:d3:1b:df:b7:91:16:1f:5e:3b:c9:79:de:70:bc:5a: c8:77:53:a1:42:b8:d5:6d:f6:51:02:94:0c:98:3f:da:3d:c6: e3:e7:49:31:0b:d9:62:65:a6:65:ab:97:26:36:64:b1:57:60: 07:49:b3:f9:81:66:fd:4a:46:e4:69:33:07:02:60:af:20:92: e2:b2:c4:70:6a:e1:0c:e8:88:ee:50:b9:68:cf:07:30:b8:4e: 7e:a1:f8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4J3xzyYIk29UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NGQzYzU0MGEtMzM5ZC00NmU1LThkZDAtMzU3ODEwN2Y5NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDdsGOvH4SDO6D0a8k0hFAglND/E6VIOixwF rPPlV3sn0ZDI7dVm3YqJoUrzVIhJFKbVpjpACY04Ek+4GmAdLzAY4YFdxXxirqOp yVjLlq13cAwLrBwOqFuWkAwZhRgSIoWTsF3IyzrlRzMi52lbMBff5jyprVgVqVDO IeNxLonuL5hMArRd0krKRmox22HiUgibsUGLmG/6ns0uijJoYJOqn+2FCZ/wN0te MVWdyssUCKiA7Oov1dtQayb80lCdTIH+cWUWSSMXITUj1DSJptV3kd+EYQZrYA5h eP1oguLd3htNwTu8XIgoaMOWfY492sYRM+NeL07Rf1Jm62yqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD69RkxTDqZfqk1DfMlEKDzV0dZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmJjMDk2NTgtNmZmYS0z NmM3LWJkOTgtMTkyZjc0MTEyNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuT1/HIs250FAcDc7E5/mksItvvohCHgVWOmaATfeS+EqZXHnFk9ZG/ 9WuSHDxjpnypoSCAzk1NzUYSjFJjN3a5tE+MiOiTLFRhN7t3QjZIk2n/fuK9vpVm r2mKizzJCBroWxyOC7s/C2q81Zt4MQYsDTQufmjY3yPnXofI3eXG/4dPd4LUIJyQ +TgvVjwiKIQvk6SA0/H2T4k/yy4ajwTpcgCWp9Mb37eRFh9eO8l53nC8Wsh3U6FC uNVt9lEClAyYP9o9xuPnSTEL2WJlpmWrlyY2ZLFXYAdJs/mBZv1KRuRpMwcCYK8g kuKyxHBq4QzoiO5QuWjPBzC4Tn6h+CM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:47 2026 by rpki-client