$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0facca0-39aa-3272-86d0-85724da5001c.roa File: c0facca0-39aa-3272-86d0-85724da5001c.roa (raw, json) Hash identifier: NFcI5fhJydRDn9NN2qs6r3z8QpBvVY4NiLP6wzvN0W8= Subject key identifier: D6:37:C3:4B:76:D5:FB:6D:22:7C:A2:CA:65:9D:E8:C6:2C:6F:86:FF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CACE2520E1E26B921C6440 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0facca0-39aa-3272-86d0-85724da5001c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 66.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:ce:25:20:e1:e2:6b:92:1c:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=dca23ddb-d9c0-468a-b534-38af02811b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:30:3c:8c:bd:4b:9c:2a:a6:1e:61:9d:9b: 71:0f:28:95:57:45:d3:f4:cb:71:ff:a5:33:99:7e: 83:82:93:6d:3a:72:e1:4c:4b:3c:f0:00:b3:fd:c4: 0f:61:28:37:d6:0e:8b:e4:ec:14:b9:52:cd:77:08: 54:20:b6:48:a7:3f:70:ec:14:73:16:96:12:f6:4f: 79:59:95:7d:06:be:d9:07:81:b4:8b:53:54:d9:54: 33:5e:26:4d:3f:d6:92:06:4a:97:a3:b2:cf:9a:2a: 1f:ad:84:85:28:2b:13:36:b9:5f:38:91:b8:72:46: 14:da:02:d2:60:18:21:28:c0:0e:a7:ee:32:d5:34: e6:30:58:ac:43:67:16:67:1b:ed:98:e0:f6:89:9d: 03:a0:1a:22:e1:7a:23:18:ef:23:7f:3c:79:50:c7: 34:bc:78:93:bf:b0:a5:98:bf:50:6c:44:22:3c:d3: 8e:09:d2:ff:d6:fc:a8:eb:b8:4b:ae:a0:9d:24:49: bf:cd:62:ee:4f:b3:5f:17:3f:63:9d:c9:b1:13:3c: c0:f8:11:60:f4:c7:e1:4c:4f:02:d8:94:c9:f5:5e: 60:ce:e6:f3:e7:1f:bc:10:c4:3c:15:7d:31:7c:e2: b6:a2:78:4f:3a:c5:34:6f:55:9d:c8:1b:33:6f:d6: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:37:C3:4B:76:D5:FB:6D:22:7C:A2:CA:65:9D:E8:C6:2C:6F:86:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0facca0-39aa-3272-86d0-85724da5001c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.128.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:79:2c:ad:99:f3:71:55:75:2c:ce:49:83:b9:8e:fd:c0:01: f6:4c:2d:05:8a:6f:f4:0d:f8:d0:f9:fa:c5:d8:3d:99:de:5b: e6:ac:ea:9e:8d:05:d6:3e:c3:93:59:85:2d:72:a9:c4:f0:9c: 21:53:6b:24:ca:f4:82:f7:14:36:3b:9c:25:86:b6:2b:5c:5f: dd:41:4a:8b:e4:29:3b:d2:5d:41:7a:3b:21:d5:78:18:bb:8e: 72:b0:1a:24:31:d5:c2:94:7b:60:29:9f:17:19:22:11:5f:c1: 55:20:ee:08:7c:f7:97:a8:7e:ad:cd:44:ee:ed:45:65:d1:60: 63:29:23:7b:25:82:30:a2:98:43:af:5d:29:53:e0:85:45:4e: 97:2a:ac:cf:b7:39:3a:8f:fc:8d:43:c6:b8:ce:64:9f:91:bc: 66:40:31:92:3a:a9:20:f7:d6:58:95:0d:df:89:00:76:ce:ae: d0:2f:9d:2b:57:57:a1:4b:b4:fe:d8:5b:5c:ca:cb:1f:a9:a5: da:df:93:7f:68:ef:8c:df:6c:a0:a2:61:00:6f:b4:3c:c3:68: 69:73:68:d7:d5:fd:14:ae:a6:e8:8d:58:14:22:5a:5c:85:d9: 9e:c4:78:96:65:0d:db:e0:e7:53:26:e0:d2:a4:cf:98:74:1c: 45:e3:4e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ays4lIOHia5IcZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGNhMjNkZGItZDljMC00NjhhLWI1MzQtMzhhZjAyODExYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj90wPIy9S5wqph5hnZtxDyiVV0XT9Mtx/6Uz mX6DgpNtOnLhTEs88ACz/cQPYSg31g6L5OwUuVLNdwhUILZIpz9w7BRzFpYS9k95 WZV9Br7ZB4G0i1NU2VQzXiZNP9aSBkqXo7LPmiofrYSFKCsTNrlfOJG4ckYU2gLS YBghKMAOp+4y1TTmMFisQ2cWZxvtmOD2iZ0DoBoi4XojGO8jfzx5UMc0vHiTv7Cl mL9QbEQiPNOOCdL/1vyo67hLrqCdJEm/zWLuT7NfFz9jncmxEzzA+BFg9MfhTE8C 2JTJ9V5gzubz5x+8EMQ8FX0xfOK2onhPOsU0b1WdyBszb9b8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY3w0t21fttInyiymWd6MYsb4b/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzBmYWNjYTAtMzlhYS0z MjcyLTg2ZDAtODU3MjRkYTUwMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQoBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB95LK2Z83FVdSzOSYO5jv3AAfZMLQWKb/QN+ND5+sXYPZneW+as6p6N BdY+w5NZhS1yqcTwnCFTayTK9IL3FDY7nCWGtitcX91BSovkKTvSXUF6OyHVeBi7 jnKwGiQx1cKUe2ApnxcZIhFfwVUg7gh895eofq3NRO7tRWXRYGMpI3slgjCimEOv XSlT4IVFTpcqrM+3OTqP/I1DxrjOZJ+RvGZAMZI6qSD31liVDd+JAHbOrtAvnStX V6FLtP7YW1zKyx+ppdrfk39o74zfbKCiYQBvtDzDaGlzaNfV/RSupuiNWBQiWlyF 2Z7EeJZlDdvg51Mm4NKkz5h0HEXjTvw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:20:46 2026 by rpki-client