$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa File: ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa (raw, json) Hash identifier: /KvDzFNxgGFjd0QFwPIvQuWnloTp1TJUC1b6jsqsCLk= Subject key identifier: 26:CF:10:5D:39:C2:3B:82:63:30:3D:5F:9B:AD:6A:F6:FF:94:37:DE Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C0352E49D8418E2468B100 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa Signing time: Wed 18 Mar 2026 22:42:30 +0000 ROA not before: Wed 18 Mar 2026 22:42:30 +0000 ROA not after: Tue 16 Jun 2026 22:42:30 +0000 asID: 16740 IP address blocks: 74.126.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c0:35:2e:49:d8:41:8e:24:68:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:42:30 2026 GMT Not After : Jun 16 22:42:30 2026 GMT Subject: CN=11ce6bc4-d995-4203-b67f-aad86c0d9e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:33:bf:97:ab:fe:90:83:0e:8d:e0:4e:04:b7: 2a:0f:c6:71:05:54:1c:30:4e:d2:84:7d:e1:3c:4f: 18:d9:e3:41:4e:91:cb:71:96:57:52:98:b3:67:4e: fc:fc:63:8b:19:99:5a:2c:e9:c2:de:a9:85:f2:ef: e5:52:4c:2f:61:a4:d0:34:b2:e7:0d:3d:38:a9:23: 05:87:71:4d:9c:87:25:b5:85:dd:1b:34:c3:bc:7c: 1d:16:c7:64:fb:d8:ca:bd:ed:11:f4:0b:1f:27:a5: f9:79:d7:75:52:61:be:8f:d5:06:dd:6d:99:ba:35: db:53:2a:77:ed:8e:0e:09:51:c5:e2:fb:3e:d2:42: d2:97:21:13:d0:f0:76:48:5d:f8:29:6e:90:08:5b: 43:ce:39:89:60:4d:cf:bf:d9:d8:50:fa:ea:a0:5c: c6:c4:c7:3e:4f:c3:5a:9c:c4:0f:24:0b:b5:5f:a0: f9:e3:12:c5:50:12:2b:dd:7f:35:6b:9c:c3:8a:15: 67:ef:c4:29:41:4e:6b:85:ec:89:ff:9e:66:c9:e5: 3f:f3:0f:98:3d:0c:f9:ba:40:47:9c:7c:ba:fa:a8: bc:ce:22:9d:ea:70:de:dd:74:84:f4:df:3c:b0:b4: 84:9f:11:eb:22:ec:27:88:3f:32:6b:4c:26:bb:7a: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:10:5D:39:C2:3B:82:63:30:3D:5F:9B:AD:6A:F6:FF:94:37:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/ace304c3-f252-364d-a6e3-f0b578dd1c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.126.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9e:de:70:79:aa:8d:ed:60:1a:2f:b8:54:91:cf:ef:f9:4e: ea:6e:da:56:19:22:57:5c:31:cf:23:8f:c1:06:c9:3f:32:73: 1c:c5:a5:ef:23:91:77:4a:f2:5a:10:58:81:6f:47:62:9c:dd: cc:d6:d9:4b:58:77:37:17:31:c6:42:13:37:21:fb:0b:62:c2: 09:de:71:56:e6:bc:2a:19:b9:81:0d:a9:b4:a9:04:f3:3e:cc: e0:dc:c5:5b:ca:ea:ff:a0:b6:f2:4f:53:06:e7:03:57:57:8e: dd:4a:47:bd:ae:41:77:0b:f0:07:65:dc:ee:11:8f:20:e0:b6: 1d:49:f3:2d:ae:a5:87:98:71:d5:2b:43:ab:31:e8:cd:fe:dc: 13:00:d9:fd:c4:9b:e4:59:63:e7:4f:87:01:e0:b6:df:37:39: 07:6a:d7:6f:f8:08:80:ea:99:3a:6a:33:52:df:f9:9a:90:77: 97:b1:1f:47:a8:f1:2d:a4:55:45:b4:ca:0e:2e:94:e9:64:fc: 8c:7a:05:ef:bd:05:79:25:fc:35:c7:63:cb:78:a3:91:68:21: 98:dd:7d:6f:c9:b3:4f:3e:0b:8e:8e:db:92:bd:09:85:05:8b: 8f:42:23:6e:5f:00:90:2f:87:31:e4:28:40:32:c7:ed:6e:bc: 35:24:03:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wDUuSdhBjiRosQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDIzMFoXDTI2MDYxNjIyNDIzMFowLzEtMCsGA1UEAxMk MTFjZTZiYzQtZDk5NS00MjAzLWI2N2YtYWFkODZjMGQ5ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTO/l6v+kIMOjeBOBLcqD8ZxBVQcME7ShH3h PE8Y2eNBTpHLcZZXUpizZ078/GOLGZlaLOnC3qmF8u/lUkwvYaTQNLLnDT04qSMF h3FNnIcltYXdGzTDvHwdFsdk+9jKve0R9AsfJ6X5edd1UmG+j9UG3W2ZujXbUyp3 7Y4OCVHF4vs+0kLSlyET0PB2SF34KW6QCFtDzjmJYE3Pv9nYUPrqoFzGxMc+T8Na nMQPJAu1X6D54xLFUBIr3X81a5zDihVn78QpQU5rheyJ/55myeU/8w+YPQz5ukBH nHy6+qi8ziKd6nDe3XSE9N88sLSEnxHrIuwniD8ya0wmu3qoywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbPEF05wjuCYzA9X5utavb/lDfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYWNlMzA0YzMtZjI1Mi0z NjRkLWE2ZTMtZjBiNTc4ZGQxYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISe3nB5qo3tYBovuFSRz+/5Tupu2lYZIldcMc8jj8EGyT8ycxzFpe8j kXdK8loQWIFvR2Kc3czW2UtYdzcXMcZCEzch+wtiwgnecVbmvCoZuYENqbSpBPM+ zODcxVvK6v+gtvJPUwbnA1dXjt1KR72uQXcL8Adl3O4RjyDgth1J8y2upYeYcdUr Q6sx6M3+3BMA2f3Em+RZY+dPhwHgtt83OQdq12/4CIDqmTpqM1Lf+ZqQd5exH0eo 8S2kVUW0yg4ulOlk/Ix6Be+9BXkl/DXHY8t4o5FoIZjdfW/Js08+C46O25K9CYUF i49CI25fAJAvhzHkKEAyx+1uvDUkA8E= -----END CERTIFICATE-----Generated at Thu Mar 26 22:24:06 2026 by rpki-client