$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa File: f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa (raw, json) Hash identifier: zth3BFzNHy+PD9xByu68omCiERPhv0CSe5zNmRajrYA= Subject key identifier: D6:B0:84:B7:84:DD:1F:8A:39:B6:25:90:BE:18:80:65:BC:6E:27:58 Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F4328584D5E1A729BB66DAE29C4F6ACC0 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 398101 IP address blocks: 148.72.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:72:9b:b6:6d:ae:29:c4:f6:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=4e840726-79cb-4055-8239-0e21b0d3b735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:96:5b:e0:ce:c4:d9:a1:e6:d7:27:0a:46: 37:2c:ab:97:c0:f1:d2:b4:fd:99:fc:f5:33:50:62: f9:69:15:75:8c:37:8e:2b:66:33:a8:d5:5d:49:09: b5:a7:66:4a:11:f9:08:04:5d:d2:a5:51:b5:0f:17: c6:50:86:45:39:29:e0:15:2c:f8:6c:aa:ed:d9:ef: 64:cd:17:03:56:f0:f3:66:e6:fb:67:cb:3d:da:6b: 56:df:ec:00:d7:0a:1a:78:bd:af:0a:87:06:ba:f7: a5:37:7f:67:f3:81:09:3e:ae:f0:f1:bb:57:c2:ee: e8:9f:6b:3a:7e:f7:09:e8:e8:b3:2d:3e:8c:46:4d: d4:82:64:66:5c:34:82:4d:d4:fa:e5:d2:a0:16:7d: 78:9f:c4:e3:ee:cb:48:34:a5:cd:64:14:57:29:ec: 3f:1a:0f:4d:d5:8f:3a:b3:2f:7b:d8:c2:95:5b:93: 9b:34:2a:c7:3d:3b:fa:3d:80:25:7d:6b:e3:e1:5c: 9a:d3:bc:2e:47:4d:5a:51:50:bb:20:3c:03:bb:14: 4d:64:4c:eb:5d:51:86:75:79:18:4d:42:85:fb:e3: bb:99:94:62:4f:9d:26:dd:0b:7c:16:4e:e0:ba:18: d5:1b:eb:b2:3c:f4:99:5b:f6:a1:4c:fa:1e:01:a0: 54:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B0:84:B7:84:DD:1F:8A:39:B6:25:90:BE:18:80:65:BC:6E:27:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f74c9070-bc7f-3db8-a000-2f65d6bf4a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 148.72.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:66:00:a1:f3:ca:b4:2e:d0:65:4a:23:2a:b1:7a:20:40:7a: 90:d5:bf:05:53:1d:8c:8f:ab:90:7e:39:08:2a:d8:67:fe:f0: d6:27:82:2e:44:5a:2a:58:b0:5c:73:12:47:9f:79:f0:23:a3: 41:ef:a4:1e:e1:e2:e4:78:f6:bf:f2:f0:3b:57:ec:9c:06:9d: 30:ad:36:f5:12:13:1d:d7:ee:0e:e3:fa:14:5e:41:cf:95:28: b0:03:af:73:39:fa:c0:75:68:0c:21:c6:72:ce:af:cb:36:05: ac:fa:15:0f:ca:5d:c5:f9:73:59:75:48:b7:12:47:a6:11:51: ed:c9:9c:7e:4d:25:8d:64:8d:21:43:f7:64:4a:2d:2a:a0:89: 31:19:21:cb:13:f5:f6:4b:2e:2c:ee:b6:05:7a:be:15:a6:33: 2b:d3:1f:8c:c8:15:c7:1c:56:87:36:8c:b1:0d:12:f1:21:82: f6:a7:a2:36:1e:9f:4c:0d:25:22:f0:41:35:fb:d9:cd:67:a1: d1:06:03:22:16:b0:eb:de:2f:f3:e5:1c:b0:a9:ea:ee:f6:60: 59:1c:0e:5b:51:8a:25:b1:b4:27:b5:55:52:67:3e:b5:49:de: 68:7f:d6:b3:91:36:20:26:e8:f2:a2:e5:0f:af:aa:21:bd:79: 38:8c:4c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnKbtm2uKcT2rMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NGU4NDA3MjYtNzljYi00MDU1LTgyMzktMGUyMWIwZDNiNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBCWW+DOxNmh5tcnCkY3LKuXwPHStP2Z/PUz UGL5aRV1jDeOK2YzqNVdSQm1p2ZKEfkIBF3SpVG1DxfGUIZFOSngFSz4bKrt2e9k zRcDVvDzZub7Z8s92mtW3+wA1woaeL2vCocGuvelN39n84EJPq7w8btXwu7on2s6 fvcJ6OizLT6MRk3UgmRmXDSCTdT65dKgFn14n8Tj7stINKXNZBRXKew/Gg9N1Y86 sy972MKVW5ObNCrHPTv6PYAlfWvj4Vya07wuR01aUVC7IDwDuxRNZEzrXVGGdXkY TUKF++O7mZRiT50m3Qt8Fk7guhjVG+uyPPSZW/ahTPoeAaBUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNawhLeE3R+KObYlkL4YgGW8bidYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvZjc0YzkwNzAtYmM3Zi0z ZGI4LWEwMDAtMmY2NWQ2YmY0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlEhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1mAKHzyrQu0GVKIyqxeiBAepDVvwVTHYyPq5B+OQgq2Gf+8NYngi5E WipYsFxzEkefefAjo0HvpB7h4uR49r/y8DtX7JwGnTCtNvUSEx3X7g7j+hReQc+V KLADr3M5+sB1aAwhxnLOr8s2Baz6FQ/KXcX5c1l1SLcSR6YRUe3JnH5NJY1kjSFD 92RKLSqgiTEZIcsT9fZLLizutgV6vhWmMyvTH4zIFcccVoc2jLENEvEhgvanojYe n0wNJSLwQTX72c1nodEGAyIWsOveL/PlHLCp6u72YFkcDltRiiWxtCe1VVJnPrVJ 3mh/1rORNiAm6PKi5Q+vqiG9eTiMTAE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:19:46 2026 by rpki-client