$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf555a05-ee29-3835-ad64-3af4a3ace11c.roa File: bf555a05-ee29-3835-ad64-3af4a3ace11c.roa (raw, json) Hash identifier: NHNJdAfcKn+jHb9R5e7Fy0IcpSvjPcp4Da5AsuZRdgk= Subject key identifier: E1:94:20:9C:10:F2:A5:AD:1F:AD:5A:D1:02:D8:D8:F7:61:C5:12:EE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB83042A86F902E96E1A80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf555a05-ee29-3835-ad64-3af4a3ace11c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 75.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:83:04:2a:86:f9:02:e9:6e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=57a77d1e-4360-46ea-9132-14f5c25f9c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:a2:d4:fa:3c:07:a3:52:d7:8a:84:cc:32: 40:ae:41:66:54:76:35:04:cc:a2:59:ad:eb:0f:81: eb:84:b2:96:43:fa:3a:cf:65:2b:a7:ab:50:d2:8b: 82:d8:4c:f7:8a:8e:79:4b:00:01:cc:6a:79:23:ce: 8e:65:75:54:24:03:0b:bf:76:98:fb:0a:57:8c:26: 51:8f:6d:78:f2:6c:4f:a8:c7:47:d4:97:43:fe:85: 3b:be:28:bf:52:f1:89:2b:51:0b:ee:d5:7d:d3:e4: 3d:7e:1b:14:fd:fd:da:98:76:c5:8c:05:c5:98:8b: 9b:75:0b:6b:35:e6:97:55:ad:3c:12:b7:73:bd:a1: 9e:4d:46:76:6a:59:97:a8:57:10:bb:ba:2e:8c:2e: f3:8e:aa:27:e1:a5:09:89:6a:38:b6:45:06:96:44: 61:5d:32:2c:95:b5:98:57:e6:c0:aa:bd:8e:82:5a: cb:6e:c7:f0:d0:a0:fd:54:39:bd:fc:e3:85:a9:1f: ce:ff:fc:d6:f9:a6:1f:44:3b:50:11:b9:c4:58:8e: f8:20:fe:14:5a:cc:14:36:21:a6:51:93:09:c7:4b: ec:bf:e7:33:26:e2:b1:8e:e6:39:c1:fc:b5:58:aa: 51:9a:d8:33:bd:31:43:f2:f9:6a:45:32:60:47:3a: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:94:20:9C:10:F2:A5:AD:1F:AD:5A:D1:02:D8:D8:F7:61:C5:12:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf555a05-ee29-3835-ad64-3af4a3ace11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 75.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ae:8c:35:19:49:84:ba:31:5f:01:24:69:8f:fb:6a:f8:c4: ea:0d:87:31:b2:8e:45:56:cf:49:d0:9d:b3:9a:0c:55:69:7e: 97:8e:ab:77:81:56:e9:4f:24:36:01:dc:05:78:2e:1d:bc:09: 83:be:f2:4b:ac:5e:ca:49:e8:3a:38:b5:d3:2e:50:0f:c1:12: 40:b4:44:ed:90:fa:ab:d0:c5:6c:0b:e6:3f:9c:56:84:16:49: 35:81:b0:62:9c:83:53:d9:b7:fa:21:34:49:6f:c8:71:1a:c4: c3:fe:a1:24:10:c9:0f:38:50:bd:65:c7:f4:e8:e8:ab:a7:b1: 40:7c:1d:df:fd:32:6b:74:7e:a0:e0:dc:a7:2c:1f:1e:69:f0: c7:d4:bb:26:8c:3b:b9:5b:5e:47:e0:45:ee:bf:8f:e8:bc:d7: 8f:32:83:4b:73:1f:d7:a4:66:bd:be:47:1e:80:1b:ae:94:92: 75:7c:19:0d:7b:5e:1d:9b:76:6b:35:55:19:c8:1d:48:f5:1c: 45:e5:38:bc:dc:b6:ec:8b:cb:a3:cc:64:c2:f7:4a:22:02:5c: c5:af:7f:8b:f2:33:18:ea:6d:cf:dd:aa:65:00:49:9c:96:c1: e3:c6:9d:27:ac:b1:54:50:be:2d:82:20:81:92:77:74:e1:2c: 18:40:49:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4MEKob5AuluGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NTdhNzdkMWUtNDM2MC00NmVhLTkxMzItMTRmNWMyNWY5YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroei1Po8B6NS14qEzDJArkFmVHY1BMyiWa3r D4HrhLKWQ/o6z2Urp6tQ0ouC2Ez3io55SwABzGp5I86OZXVUJAMLv3aY+wpXjCZR j2148mxPqMdH1JdD/oU7vii/UvGJK1EL7tV90+Q9fhsU/f3amHbFjAXFmIubdQtr NeaXVa08ErdzvaGeTUZ2almXqFcQu7oujC7zjqon4aUJiWo4tkUGlkRhXTIslbWY V+bAqr2OglrLbsfw0KD9VDm9/OOFqR/O//zW+aYfRDtQEbnEWI74IP4UWswUNiGm UZMJx0vsv+czJuKxjuY5wfy1WKpRmtgzvTFD8vlqRTJgRzr18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGUIJwQ8qWtH61a0QLY2PdhxRLuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmY1NTVhMDUtZWUyOS0z ODM1LWFkNjQtM2FmNGEzYWNlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES4qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuujDUZSYS6MV8BJGmP+2r4xOoNhzGyjkVWz0nQnbOaDFVpfpeOq3eB VulPJDYB3AV4Lh28CYO+8kusXspJ6Do4tdMuUA/BEkC0RO2Q+qvQxWwL5j+cVoQW STWBsGKcg1PZt/ohNElvyHEaxMP+oSQQyQ84UL1lx/To6KunsUB8Hd/9Mmt0fqDg 3KcsHx5p8MfUuyaMO7lbXkfgRe6/j+i8148yg0tzH9ekZr2+Rx6AG66UknV8GQ17 Xh2bdms1VRnIHUj1HEXlOLzctuyLy6PMZML3SiICXMWvf4vyMxjqbc/dqmUASZyW wePGnSessVRQvi2CIIGSd3ThLBhASck= -----END CERTIFICATE-----Generated at Thu Mar 26 18:02:30 2026 by rpki-client