$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dffb577a-2951-318a-9ec1-425607325923.roa File: dffb577a-2951-318a-9ec1-425607325923.roa (raw, json) Hash identifier: XKdOCucCKfd7TxaStVy9NNiN63NNXtcmY2Zq309AJno= Subject key identifier: 82:71:E5:DB:14:6D:0D:94:77:45:45:E3:41:35:AE:D4:68:B1:C7:5A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB6364F4F96F7CFAF463C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dffb577a-2951-318a-9ec1-425607325923.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 47.38.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:63:64:f4:f9:6f:7c:fa:f4:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=c1248778-e04e-4a90-b2cb-acc3d516ce4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:d0:bb:a0:5a:3e:8f:19:62:4f:26:f2:43: 95:90:e5:16:fc:fd:cb:b5:bb:e7:59:c0:40:57:7f: a3:b2:f5:16:63:56:4c:12:be:f0:ab:a3:d3:68:a3: 4e:7d:36:0b:5d:f1:e3:aa:6f:41:67:d7:65:3f:ed: 1e:58:e0:92:d6:09:dd:b9:6f:91:dc:7d:ae:f1:36: 74:66:5f:08:89:b1:05:ce:e2:3a:d0:e6:10:ba:56: 85:72:d5:6f:94:8d:27:12:3e:8b:e0:f6:ac:d1:6c: 0f:a9:7c:ec:91:e3:6c:18:e2:fe:a1:6a:52:ee:73: 1f:81:ec:d3:84:b9:77:5f:6e:27:e7:03:16:6d:ee: e2:9f:28:b0:9e:52:d7:85:b0:d0:13:92:ff:a8:2e: a5:12:d5:18:7d:fb:c5:89:7f:c8:25:e1:70:aa:0a: 68:39:42:dc:bf:f9:5a:0b:8e:8e:ab:a4:7b:50:0c: 92:77:54:8b:28:ce:a7:65:25:cb:b8:9a:6c:a0:dc: e4:2e:09:66:3d:32:89:c4:54:f9:86:61:60:e0:e1: f4:f5:a7:ab:be:67:08:3f:30:1d:1c:7a:fa:d3:f8: 2a:c5:5c:6f:04:25:6b:97:8b:7b:62:1f:37:58:9f: 6c:ff:c1:a5:3d:f3:4d:3a:7d:73:f1:37:55:64:80: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:71:E5:DB:14:6D:0D:94:77:45:45:E3:41:35:AE:D4:68:B1:C7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dffb577a-2951-318a-9ec1-425607325923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.38.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ec:84:fd:95:26:7a:fd:97:e8:01:ef:0f:c2:62:64:e8:47: 92:d0:b0:2e:59:b1:e6:37:13:0c:f4:8a:cd:ed:d3:5d:96:06: ad:26:a8:44:44:a6:4c:17:05:e3:2e:7a:d0:07:25:e4:87:b3: 7c:4d:60:19:d9:5a:2a:a9:be:a6:04:8e:6e:da:2e:ee:24:5e: a4:4a:c8:34:69:96:ce:51:53:56:34:7c:25:05:4c:c5:14:b3: bb:8c:93:5c:4a:cc:70:34:74:d6:89:8b:f7:27:6b:81:47:65: c1:0b:cc:39:24:70:0b:e8:f7:30:49:07:ca:fb:de:d8:37:16: 24:81:96:81:c4:05:32:26:6c:94:0c:4a:82:6d:3a:ae:60:d8: 5f:fb:ea:ad:fb:07:2a:9e:64:79:7a:b0:75:62:fe:4d:fb:b0: 86:b1:8b:e3:57:26:7c:5e:07:1f:14:fe:2e:31:c2:6a:8e:92: cc:a6:de:bd:38:98:5e:6a:a8:e9:c9:43:a8:20:0c:70:5d:fd: 04:a3:dc:b9:16:1c:78:0b:4c:75:1e:e4:b1:44:8f:7a:3f:2c: 2f:72:20:81:4a:0b:cd:8f:6d:e9:77:6f:96:d2:b0:b7:ab:94: b9:68:4f:40:15:ce:82:3b:07:d0:25:99:54:dd:94:f3:92:9c: 59:90:ad:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay2Nk9PlvfPr0Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YzEyNDg3NzgtZTA0ZS00YTkwLWIyY2ItYWNjM2Q1MTZjZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIfQu6BaPo8ZYk8m8kOVkOUW/P3LtbvnWcBA V3+jsvUWY1ZMEr7wq6PTaKNOfTYLXfHjqm9BZ9dlP+0eWOCS1gnduW+R3H2u8TZ0 Zl8IibEFzuI60OYQulaFctVvlI0nEj6L4Pas0WwPqXzskeNsGOL+oWpS7nMfgezT hLl3X24n5wMWbe7inyiwnlLXhbDQE5L/qC6lEtUYffvFiX/IJeFwqgpoOULcv/la C46Oq6R7UAySd1SLKM6nZSXLuJpsoNzkLglmPTKJxFT5hmFg4OH09aervmcIPzAd HHr60/gqxVxvBCVrl4t7Yh83WJ9s/8GlPfNNOn1z8TdVZIAFcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJx5dsUbQ2Ud0VF40E1rtRoscdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGZmYjU3N2EtMjk1MS0z MThhLTllYzEtNDI1NjA3MzI1OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLyaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbshP2VJnr9l+gB7w/CYmToR5LQsC5ZseY3Ewz0is3t012WBq0mqERE pkwXBeMuetAHJeSHs3xNYBnZWiqpvqYEjm7aLu4kXqRKyDRpls5RU1Y0fCUFTMUU s7uMk1xKzHA0dNaJi/cna4FHZcELzDkkcAvo9zBJB8r73tg3FiSBloHEBTImbJQM SoJtOq5g2F/76q37ByqeZHl6sHVi/k37sIaxi+NXJnxeBx8U/i4xwmqOksym3r04 mF5qqOnJQ6ggDHBd/QSj3LkWHHgLTHUe5LFEj3o/LC9yIIFKC82Pbel3b5bSsLer lLloT0AVzoI7B9AlmVTdlPOSnFmQrUk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:58 2026 by rpki-client