$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa File: f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa (raw, json) Hash identifier: 8gECXl4HdIQ8Iyq1eMKSMrc8sBfWb8pG8sRwPBiy89U= Subject key identifier: 1B:6D:36:9F:89:E3:A2:75:1F:FF:7F:B7:28:F3:52:E9:07:8A:3C:7A Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D36C039F6E128170D0EB6C180 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa Signing time: Wed 18 Mar 2026 22:42:32 +0000 ROA not before: Wed 18 Mar 2026 22:42:32 +0000 ROA not after: Tue 16 Jun 2026 22:42:32 +0000 asID: 16740 IP address blocks: 74.126.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:c0:39:f6:e1:28:17:0d:0e:b6:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 18 22:42:32 2026 GMT Not After : Jun 16 22:42:32 2026 GMT Subject: CN=d723d5cc-8db7-413f-b602-6206d84c0603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:b3:82:ac:53:4a:4d:e6:11:b3:c3:23:93: 1d:b3:cd:fb:93:4d:7b:69:19:13:d1:72:ab:10:1e: 70:8f:b7:11:77:4e:2c:aa:82:30:25:26:4f:94:29: 27:7f:59:52:a4:53:4b:47:40:d2:0a:cf:ce:e6:af: f5:bd:72:91:ca:01:13:90:23:14:c7:83:bb:9f:6c: 60:ad:4a:a1:61:e3:07:3a:79:82:ac:22:62:d9:8b: 5a:39:24:41:7d:07:f8:8c:b2:c6:b0:f9:dc:64:cf: a6:26:e5:80:e3:a5:3a:03:d8:67:57:f8:56:c5:9d: 7d:bd:cb:4a:76:40:81:88:4d:93:eb:39:d0:9a:60: 16:4b:bf:43:8d:09:b6:1b:15:d0:f2:f9:61:38:f9: c0:e8:78:a0:b9:88:3f:ae:0b:d9:c1:c7:a9:cf:6b: 0b:7f:df:40:88:d8:33:35:ec:f3:59:ca:f1:1e:4c: d1:58:98:26:e9:48:36:0f:87:75:2e:00:1d:0d:18: e6:35:38:44:6a:fc:1b:c1:d9:08:04:6b:80:1b:be: 65:a2:6c:f3:1e:db:ea:14:88:1a:21:43:57:2e:c8: c8:2c:f2:0f:9c:d7:ba:56:7e:c3:8a:6e:ee:86:64: 4f:77:10:19:52:af:2f:75:81:ca:bc:31:69:1a:1a: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:36:9F:89:E3:A2:75:1F:FF:7F:B7:28:F3:52:E9:07:8A:3C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/f33bedca-0b42-3876-a9d6-9e6a7ca8d61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 74.126.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cc:b0:0f:8c:df:d5:87:bf:fa:57:e3:39:bc:ad:59:b3:d1: b1:4f:bf:0f:b6:9e:af:dc:1b:4c:76:1d:6c:a3:d2:4c:df:b9: 26:0e:32:6c:e5:6a:df:56:cf:b9:bc:ad:55:ef:e4:a6:c1:41: 15:31:2b:90:84:65:dc:02:b6:da:7f:63:a7:45:bc:6f:f3:ae: 9b:15:02:88:ab:f0:c7:d3:a7:cb:6a:1e:06:3c:4e:91:b0:78: 6d:1f:71:90:9a:b9:55:0b:9a:5a:cb:08:ff:5e:ae:8f:f1:11: ad:3e:14:cb:ca:53:de:89:cc:36:ed:44:96:3d:49:30:b5:7f: 12:35:c4:56:49:97:d8:0d:c9:80:c1:12:b7:e2:da:3f:c6:4f: 63:fd:7f:c7:9f:05:63:f7:40:42:6e:48:9f:0f:c7:5b:85:ef: 0b:7b:2f:d9:a8:cb:2c:68:11:69:ed:c8:40:53:60:12:6a:60: b8:d5:ec:2c:38:58:25:fe:20:af:fd:09:fa:6c:9d:f6:2d:1d: 95:d4:14:8e:e5:91:03:6d:5a:52:05:a0:64:a4:5b:3e:f9:02: ae:cb:eb:a9:a0:5d:61:d4:0e:d0:ea:35:cb:26:05:11:5c:fb: 0d:71:54:27:95:aa:90:1f:58:2c:43:2c:33:42:42:c3:93:c9: 9c:2e:17:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wDn24SgXDQ62wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxODIyNDIzMloXDTI2MDYxNjIyNDIzMlowLzEtMCsGA1UEAxMk ZDcyM2Q1Y2MtOGRiNy00MTNmLWI2MDItNjIwNmQ4NGMwNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmGzgqxTSk3mEbPDI5Mds837k017aRkT0XKr EB5wj7cRd04sqoIwJSZPlCknf1lSpFNLR0DSCs/O5q/1vXKRygETkCMUx4O7n2xg rUqhYeMHOnmCrCJi2YtaOSRBfQf4jLLGsPncZM+mJuWA46U6A9hnV/hWxZ19vctK dkCBiE2T6znQmmAWS79DjQm2GxXQ8vlhOPnA6HiguYg/rgvZwcepz2sLf99AiNgz NezzWcrxHkzRWJgm6Ug2D4d1LgAdDRjmNThEavwbwdkIBGuAG75lomzzHtvqFIga IUNXLsjILPIPnNe6Vn7Dim7uhmRPdxAZUq8vdYHKvDFpGhqCtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBttNp+J46J1H/9/tyjzUukHijx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvZjMzYmVkY2EtMGI0Mi0z ODc2LWE5ZDYtOWU2YTdjYThkNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTMsA+M39WHv/pX4zm8rVmz0bFPvw+2nq/cG0x2HWyj0kzfuSYOMmzl at9Wz7m8rVXv5KbBQRUxK5CEZdwCttp/Y6dFvG/zrpsVAoir8MfTp8tqHgY8TpGw eG0fcZCauVULmlrLCP9ero/xEa0+FMvKU96JzDbtRJY9STC1fxI1xFZJl9gNyYDB Erfi2j/GT2P9f8efBWP3QEJuSJ8Px1uF7wt7L9moyyxoEWntyEBTYBJqYLjV7Cw4 WCX+IK/9CfpsnfYtHZXUFI7lkQNtWlIFoGSkWz75Aq7L66mgXWHUDtDqNcsmBRFc +w1xVCeVqpAfWCxDLDNCQsOTyZwuFwc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:39 2026 by rpki-client