$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa File: 2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa (raw, json) Hash identifier: tIyUwVQ4qIWKa21Nl0m3/bRt/4dbWoOBV0feZLBwCzY= Subject key identifier: 5E:0C:20:ED:1E:73:ED:6C:81:7D:E4:D7:B0:3B:10:E5:F6:E7:0A:CC Certificate issuer: /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Certificate serial: 010D0C9F4328584D7A0531520D2A92D2A5182F80 Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 36666 IP address blocks: 74.120.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:31:52:0d:2a:92:d2:a5:18:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=a09795d6-c4ed-43b2-b815-cbf09bb6421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:a5:d7:35:8a:a3:ee:35:2e:9e:1c:8c:79: e9:3c:f5:cb:5e:e8:7d:da:17:fc:9a:1b:45:c2:7c: e7:39:42:12:ef:55:69:99:29:7b:c5:14:49:ed:19: e9:12:13:d8:8f:0b:f3:42:53:9b:13:c0:36:ab:57: c2:be:98:19:94:1d:c8:76:04:35:2c:51:79:f7:6e: f2:ad:33:c2:7d:ee:7e:e4:32:4a:4c:30:8a:44:1d: 9c:c9:c4:04:db:c6:16:9d:d3:ab:a3:dd:6f:61:fd: 64:28:c8:e1:e5:83:cd:e4:05:00:2f:a8:81:9f:d3: 4d:22:4d:65:2c:9a:4a:c4:83:fc:30:3f:ef:75:f8: ec:88:8a:da:1b:20:4f:01:95:fa:79:ca:55:c2:3b: 36:f8:ed:7f:7c:ac:2f:fc:00:c5:69:cf:0a:ea:4e: 5d:e3:f3:71:f8:5e:50:e8:10:51:c1:39:6d:ae:be: 87:35:85:fc:a8:53:b6:2a:d0:f4:41:cc:6c:c8:87: 35:19:f4:9c:86:7e:0c:30:3b:b7:ea:16:87:3e:2b: a9:82:5c:b5:c7:aa:d8:73:12:e9:53:a1:03:3a:46: 7f:35:06:78:40:f3:c4:5c:a7:1a:fc:a4:0f:f2:bd: 79:92:ab:4b:00:d6:8a:37:d7:0c:e6:f5:07:15:2c: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0C:20:ED:1E:73:ED:6C:81:7D:E4:D7:B0:3B:10:E5:F6:E7:0A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl X509v3 Authority Key Identifier: keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer sbgp-ipAddrBlock: critical IPv4: 74.120.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5a:96:75:76:2a:fd:3a:3a:d4:3b:98:c0:d5:92:82:ad:be: 83:10:43:5c:c3:83:b0:07:51:87:97:20:cb:78:34:4c:6d:0a: bf:fb:31:22:cc:8c:25:e2:6d:b2:fa:59:73:97:c7:8b:d4:dc: 12:6b:73:1c:22:e4:4d:65:ee:d6:1c:6a:b1:96:1b:2e:75:65: 32:ae:dd:29:ef:b8:06:19:7d:a4:54:4a:60:27:b3:f2:7a:6e: 82:32:96:ce:63:5b:91:3c:e6:5c:23:60:c4:b3:61:28:14:3a: 8d:18:e5:3c:a7:f7:e5:45:ee:e0:26:41:5e:c7:dc:ca:f6:ce: 38:96:25:80:65:d5:3e:62:55:ff:30:49:54:4a:5b:f3:15:fb: 5c:c0:d7:69:cd:41:83:e4:60:a1:16:03:cf:2d:a1:d4:f0:e6: 42:df:0d:79:0f:76:d2:cd:c7:c9:f4:cd:b5:74:72:2f:6d:69: 90:78:a5:db:24:a5:cc:cb:22:7c:e3:52:49:d9:07:9b:cb:11: de:57:1b:e6:b7:39:79:d7:8c:03:07:3a:f5:f0:50:ce:be:5c: 68:3a:d2:bd:21:31:cc:a6:f6:5b:e6:bd:d2:95:19:d3:9d:c2: 3b:2e:0a:df:0f:8d:fe:3e:eb:ac:ca:b8:3f:51:af:78:b7:2a: 37:9e:a3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTFSDSqS0qUYL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw ZWViMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YTA5Nzk1ZDYtYzRlZC00M2IyLWI4MTUtY2JmMDliYjY0MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte+l1zWKo+41Lp4cjHnpPPXLXuh92hf8mhtF wnznOUIS71VpmSl7xRRJ7RnpEhPYjwvzQlObE8A2q1fCvpgZlB3IdgQ1LFF5927y rTPCfe5+5DJKTDCKRB2cycQE28YWndOro91vYf1kKMjh5YPN5AUAL6iBn9NNIk1l LJpKxIP8MD/vdfjsiIraGyBPAZX6ecpVwjs2+O1/fKwv/ADFac8K6k5d4/Nx+F5Q 6BBRwTltrr6HNYX8qFO2KtD0QcxsyIc1GfSchn4MMDu36haHPiupgly1x6rYcxLp U6EDOkZ/NQZ4QPPEXKca/KQP8r15kqtLANaKN9cM5vUHFSxGTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4MIO0ec+1sgX3k17A7EOX25wrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMmY3MDU2N2QtMGNmMC0z YzE0LTllNzktM2FlMjk3MzViYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1 MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4 ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNalnV2Kv06OtQ7mMDVkoKtvoMQQ1zDg7AHUYeXIMt4NExtCr/7MSLM jCXibbL6WXOXx4vU3BJrcxwi5E1l7tYcarGWGy51ZTKu3SnvuAYZfaRUSmAns/J6 boIyls5jW5E85lwjYMSzYSgUOo0Y5Tyn9+VF7uAmQV7H3Mr2zjiWJYBl1T5iVf8w SVRKW/MV+1zA12nNQYPkYKEWA88todTw5kLfDXkPdtLNx8n0zbV0ci9taZB4pdsk pczLInzjUknZB5vLEd5XG+a3OXnXjAMHOvXwUM6+XGg60r0hMcym9lvmvdKVGdOd wjsuCt8Pjf4+66zKuD9Rr3i3KjeeozQ= -----END CERTIFICATE-----Generated at Mon Apr 13 12:28:45 2026 by rpki-client