$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df3c5052-13de-3885-b0ef-eb30de8475de.roa File: df3c5052-13de-3885-b0ef-eb30de8475de.roa (raw, json) Hash identifier: iNskeyb4rHLzBLzTVnq+80F0+W1VqpJ1/OINqaRShuM= Subject key identifier: 0B:2E:72:A2:FE:64:28:F3:0D:CD:63:FE:FE:00:3F:36:84:BA:ED:06 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAC6A61CB892E1887DAC00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df3c5052-13de-3885-b0ef-eb30de8475de.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 66.188.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:c6:a6:1c:b8:92:e1:88:7d:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=3f150579-1e33-410f-8a11-1e45573140fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:1a:3a:ac:45:1a:6a:25:3f:db:8a:21:09: 0c:06:e5:21:c2:b1:f7:6f:31:43:e3:33:e5:44:98: 0f:5c:fd:96:19:2c:52:28:e5:73:52:3c:cb:b5:8a: 5f:bb:dd:83:83:58:98:28:d0:f5:76:2f:1a:7f:16: 22:db:4f:01:53:9d:22:2a:aa:18:ff:82:4b:40:d4: 46:c7:f5:01:c9:36:06:2a:99:7b:e4:b6:0a:a5:76: c4:e0:c3:61:d6:61:ed:5a:05:79:73:fe:30:7d:87: 68:a0:20:3a:ee:8d:ad:e7:a5:be:9e:2c:40:0e:0e: 85:c7:40:42:13:76:c0:8c:90:5b:2c:8c:eb:4c:c8: e6:e0:04:dd:c7:83:f8:01:bb:55:58:be:e0:86:f2: 15:64:d7:4e:2c:98:b6:a7:02:9e:91:53:73:69:1c: 07:15:4f:4e:7a:85:f3:13:f1:c5:e5:ad:2e:db:d2: ec:de:75:57:41:98:27:8f:b9:6a:e8:07:de:5e:05: cf:93:20:d1:e1:52:31:bd:9a:bb:98:f5:56:f7:e9: c4:ef:54:5c:35:4e:51:c3:ae:33:ff:fd:63:70:be: da:6a:2d:ac:4f:e5:08:2f:54:09:2c:62:3b:09:ea: 11:0a:77:35:0c:31:bb:62:50:40:42:d2:0e:a2:57: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:72:A2:FE:64:28:F3:0D:CD:63:FE:FE:00:3F:36:84:BA:ED:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df3c5052-13de-3885-b0ef-eb30de8475de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.188.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4c:24:c3:71:8d:f0:11:86:d5:07:86:3c:13:f8:aa:4e:5e: fa:8f:57:fd:fe:93:ea:79:bd:4e:07:fc:ec:28:f0:ca:0e:4a: 7f:df:e5:0c:13:2b:d7:31:82:7f:11:c3:09:f0:65:6e:e5:16: 75:84:b4:f6:84:69:26:b9:dc:7b:29:08:a2:ea:4a:09:c6:50: 21:f2:77:41:6f:a2:2f:26:fd:3d:c5:d5:88:eb:88:cf:b2:6e: fa:71:e3:c1:e4:73:71:16:42:e7:4b:cf:02:b1:59:e6:15:87: 1f:e2:fa:02:71:79:0c:da:8a:b0:f2:96:cb:fe:66:07:db:51: 43:3c:c8:f6:47:8f:7b:59:3e:b1:43:f2:2f:fe:3e:e7:8b:53: 13:5e:b5:0b:d1:34:05:ee:80:52:d0:c4:13:eb:02:50:b4:4a: 96:ef:b9:03:53:72:1e:c7:a3:5b:fb:2f:3f:35:ce:fc:ac:8e: ee:b6:f0:20:3a:66:50:4a:53:f1:2d:53:74:e9:9f:03:4f:85: a5:57:c4:c8:18:a5:55:da:b5:db:b7:dc:60:b4:24:24:b2:b0: bf:34:7e:24:f1:5c:13:19:62:ec:3e:4a:9a:ae:90:2b:9c:e9: 17:b3:c1:62:ff:28:0b:4f:09:82:cd:77:19:40:ec:1c:59:2e: 25:ca:33:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AysamHLiS4Yh9rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk M2YxNTA1NzktMWUzMy00MTBmLThhMTEtMWU0NTU3MzE0MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmYaOqxFGmolP9uKIQkMBuUhwrH3bzFD4zPl RJgPXP2WGSxSKOVzUjzLtYpfu92Dg1iYKND1di8afxYi208BU50iKqoY/4JLQNRG x/UByTYGKpl75LYKpXbE4MNh1mHtWgV5c/4wfYdooCA67o2t56W+nixADg6Fx0BC E3bAjJBbLIzrTMjm4ATdx4P4AbtVWL7ghvIVZNdOLJi2pwKekVNzaRwHFU9OeoXz E/HF5a0u29Ls3nVXQZgnj7lq6AfeXgXPkyDR4VIxvZq7mPVW9+nE71RcNU5Rw64z //1jcL7aai2sT+UIL1QJLGI7CeoRCnc1DDG7YlBAQtIOoldNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsucqL+ZCjzDc1j/v4APzaEuu0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGYzYzUwNTItMTNkZS0z ODg1LWIwZWYtZWIzMGRlODQ3NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhMJMNxjfARhtUHhjwT+KpOXvqPV/3+k+p5vU4H/Owo8MoOSn/f5QwT K9cxgn8RwwnwZW7lFnWEtPaEaSa53HspCKLqSgnGUCHyd0Fvoi8m/T3F1YjriM+y bvpx48Hkc3EWQudLzwKxWeYVhx/i+gJxeQzairDylsv+ZgfbUUM8yPZHj3tZPrFD 8i/+PueLUxNetQvRNAXugFLQxBPrAlC0SpbvuQNTch7Ho1v7Lz81zvysju628CA6 ZlBKU/EtU3TpnwNPhaVXxMgYpVXatdu33GC0JCSysL80fiTxXBMZYuw+SpqukCuc 6RezwWL/KAtPCYLNdxlA7BxZLiXKMyk= -----END CERTIFICATE-----Generated at Thu Mar 26 05:21:55 2026 by rpki-client