$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d946296a-22f6-3b62-9026-99ed6d9f6d51.roa File: d946296a-22f6-3b62-9026-99ed6d9f6d51.roa (raw, json) Hash identifier: MrUd+/QwngJxP8tOZuouGDcicvlO5Vy8wq95+U9q5hE= Subject key identifier: 26:36:2E:71:E8:0E:70:95:E7:0E:92:76:07:C5:3C:E2:53:EF:78:D8 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB80F4B22EBEA4D1812640 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d946296a-22f6-3b62-9026-99ed6d9f6d51.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 68.191.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:80:f4:b2:2e:be:a4:d1:81:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=a63964d2-98e6-4233-9a61-221ede6b3a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:c7:20:eb:f3:e8:1c:2c:6d:b1:a8:78:0e: 2a:59:6a:da:27:ee:44:11:26:6b:6c:15:49:3a:ba: 94:28:59:3d:71:c5:cf:be:ce:11:3b:0b:48:12:6a: 64:6b:68:43:e6:ef:ce:ef:1f:7b:d5:75:ab:91:0b: da:2d:35:b2:9a:34:7f:29:67:81:52:b4:a4:03:27: ba:b9:49:f1:47:3d:37:06:90:1c:65:d3:1b:51:72: 53:53:0a:2f:01:b5:f7:1f:a9:1c:e8:9f:9a:ca:29: 6b:67:c5:de:08:06:7a:af:45:43:ca:a0:b4:e3:01: fa:a8:d0:6d:c3:70:4d:40:08:85:f7:4a:a0:99:e7: 08:e1:4c:fe:d6:bc:40:d3:cc:79:0a:d7:a4:5c:81: b2:98:fa:07:18:6b:e4:7b:c6:e7:01:1d:80:31:a6: 94:96:2b:09:93:5f:0a:0d:df:85:2c:13:21:be:a8: 2a:cb:44:fb:25:96:d6:a0:a6:ae:f2:36:2c:63:77: 17:45:94:39:40:a9:69:ed:65:fe:e0:c4:91:2e:36: ad:8f:4e:8a:20:6b:f1:ea:c3:f8:20:3d:49:fb:ff: f3:56:67:72:85:38:86:2b:13:b1:95:b9:74:66:27: fe:72:b1:7c:1b:ec:4e:33:b2:5d:17:0c:cd:2e:4e: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:2E:71:E8:0E:70:95:E7:0E:92:76:07:C5:3C:E2:53:EF:78:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d946296a-22f6-3b62-9026-99ed6d9f6d51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7a:da:be:c8:fa:26:da:4f:2e:cf:67:1c:92:88:93:5b:77: a5:bd:f8:9e:e1:f0:21:5c:23:24:74:d5:eb:4a:a2:32:31:13: 1d:74:bf:0d:07:a4:35:12:62:84:ea:d5:ca:91:a8:4a:48:d0: 47:cb:64:e4:aa:e8:c2:f6:3c:f4:51:5e:4d:c0:05:d8:df:66: 75:c3:40:c4:c7:23:35:43:4f:9e:a8:5e:9d:ea:e2:33:4b:32: aa:94:b2:e4:4e:90:03:56:f3:19:65:71:fe:22:1a:bf:1c:41: 2b:03:7c:6d:f7:39:f4:62:8a:6c:12:c5:33:0a:d9:da:fd:37: fa:dc:81:30:e7:e0:dd:cd:72:b8:eb:37:8a:4e:69:0f:51:60: bb:60:e5:56:72:20:53:6e:bd:57:77:29:a2:bf:6c:eb:ed:d4: 03:20:40:4c:38:d5:b2:5a:9f:f6:58:e5:48:72:6c:e0:01:4c: 9c:52:14:b3:0f:c3:7a:2c:67:5f:c4:67:55:84:cf:d8:ef:80: 68:f6:4c:32:18:da:d7:fb:90:fd:87:7a:fc:66:ec:0f:83:9d: a8:4b:b5:55:27:50:6a:a9:07:24:8c:d6:4b:c9:b7:41:9a:4f: 22:d6:ad:44:9b:e2:9a:c4:61:93:4d:55:f6:9f:34:bc:75:7b: 70:68:a5:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4D0si6+pNGBJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YTYzOTY0ZDItOThlNi00MjMzLTlhNjEtMjIxZWRlNmIzYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhvHIOvz6BwsbbGoeA4qWWraJ+5EESZrbBVJ OrqUKFk9ccXPvs4ROwtIEmpka2hD5u/O7x971XWrkQvaLTWymjR/KWeBUrSkAye6 uUnxRz03BpAcZdMbUXJTUwovAbX3H6kc6J+ayilrZ8XeCAZ6r0VDyqC04wH6qNBt w3BNQAiF90qgmecI4Uz+1rxA08x5CtekXIGymPoHGGvke8bnAR2AMaaUlisJk18K Dd+FLBMhvqgqy0T7JZbWoKau8jYsY3cXRZQ5QKlp7WX+4MSRLjatj06KIGvx6sP4 ID1J+//zVmdyhTiGKxOxlbl0Zif+crF8G+xOM7JdFwzNLk5gdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCY2LnHoDnCV5w6SdgfFPOJT73jYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDk0NjI5NmEtMjJmNi0z YjYyLTkwMjYtOTllZDZkOWY2ZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRL+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER62r7I+ibaTy7PZxySiJNbd6W9+J7h8CFcIyR01etKojIxEx10vw0H pDUSYoTq1cqRqEpI0EfLZOSq6ML2PPRRXk3ABdjfZnXDQMTHIzVDT56oXp3q4jNL MqqUsuROkANW8xllcf4iGr8cQSsDfG33OfRiimwSxTMK2dr9N/rcgTDn4N3Ncrjr N4pOaQ9RYLtg5VZyIFNuvVd3KaK/bOvt1AMgQEw41bJan/ZY5UhybOABTJxSFLMP w3osZ1/EZ1WEz9jvgGj2TDIY2tf7kP2Hevxm7A+DnahLtVUnUGqpBySM1kvJt0Ga TyLWrUSb4prEYZNNVfafNLx1e3Bopak= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:57 2026 by rpki-client