$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa File: c96a32c6-d883-32cc-8734-87cd0112383a.roa (raw, json) Hash identifier: wAKMPEhYqrPmWdpXRa9Nek8HzckDPyewpOfT3DwA3xU= Subject key identifier: 49:A4:85:E0:A2:D8:64:79:97:A8:95:6F:4C:B0:CA:CE:C0:29:2B:7B Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584D1F4A47EC8A6ABA8843EC7E20 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 198949 IP address blocks: 74.123.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:47:ec:8a:6a:ba:88:43:ec:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=06a6011f-78a4-4f01-adbe-d7c0089acb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:1a:f6:9f:78:e8:3d:fb:64:b2:c8:c3:06: 08:84:f6:93:5c:fa:45:12:49:b6:30:a4:10:3c:e4: 80:3d:94:c5:3e:40:b2:b5:92:dd:7c:46:11:0c:f9: 8f:72:ba:48:5c:75:aa:1b:06:41:6f:a9:4a:3b:06: 6a:95:21:6f:6d:09:6e:7c:af:11:bd:b4:45:fc:bc: 38:c1:d1:c1:09:b6:93:1a:70:f4:86:20:fb:9c:24: 3f:30:4c:a3:6d:b5:96:39:32:30:2b:70:39:dd:a0: 0c:2a:e4:76:22:eb:01:1a:ad:6e:ca:8b:0c:0d:9e: 9b:1c:47:ce:99:20:0b:b5:c7:53:33:3b:31:41:07: 7f:d6:ed:32:8c:3e:7b:d9:c0:79:ca:b8:2b:cf:35: b4:91:5d:18:32:69:11:c4:39:45:0c:8e:f6:14:90: 56:05:bc:af:49:44:0d:b8:25:8b:6a:56:4e:99:94: d4:75:59:b5:51:75:ac:1c:41:ec:4b:73:7c:ea:c2: cb:62:bf:70:05:a2:d0:66:7d:f3:49:2f:90:1b:4e: 39:09:2c:0c:1e:d1:62:27:14:f1:bb:9e:11:35:94: 97:77:2e:16:ff:70:ba:31:df:53:87:c9:4e:38:51: 50:17:14:f9:60:a4:ad:df:33:22:c3:5f:3a:68:ff: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A4:85:E0:A2:D8:64:79:97:A8:95:6F:4C:B0:CA:CE:C0:29:2B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c96a32c6-d883-32cc-8734-87cd0112383a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 74.123.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:61:1f:82:ed:8e:60:8d:f2:bf:df:12:29:ce:5a:66:a5:bb: 3c:64:3f:f2:42:4b:2a:1e:84:43:f4:54:09:7c:48:76:70:a1: 45:89:ad:87:15:48:1b:52:62:5a:71:7f:e2:f7:50:4c:17:85: b4:55:49:26:ee:17:fb:44:ef:d4:7d:6b:af:cd:f8:51:9b:8d: ea:24:6d:e4:df:2d:c1:30:fa:ad:50:53:8c:07:79:2b:56:62: 81:17:c5:38:2f:28:ae:17:99:5b:6c:bb:1d:c4:24:f4:67:76: e0:71:01:b5:b2:7c:25:df:82:ad:64:52:f0:dd:ed:82:39:17: d8:9b:1e:88:4c:74:f4:6b:98:24:c1:b6:ee:eb:9d:9e:6d:ae: d1:50:be:aa:75:cb:b4:73:56:4b:53:8c:c2:b1:24:d2:15:76: b0:7d:32:ce:57:44:1f:ed:bf:36:de:06:1c:1d:29:a4:94:3a: 4c:d8:67:1c:e3:9d:5f:d3:46:92:9f:a6:76:f5:1e:9a:a0:31: 1f:36:7b:a5:d3:40:b2:fe:3a:45:17:bb:c6:b9:a6:c2:0c:ff: 91:8c:bc:d5:37:9d:f2:66:be:85:c1:4d:b5:de:cd:7c:b6:31: 45:c7:fb:34:99:4a:b1:68:0b:1b:a0:89:3e:73:d4:61:b8:d9: fd:46:3e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkfsimq6iEPsfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDZhNjAxMWYtNzhhNC00ZjAxLWFkYmUtZDdjMDA4OWFjYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEa9p946D37ZLLIwwYIhPaTXPpFEkm2MKQQ POSAPZTFPkCytZLdfEYRDPmPcrpIXHWqGwZBb6lKOwZqlSFvbQlufK8RvbRF/Lw4 wdHBCbaTGnD0hiD7nCQ/MEyjbbWWOTIwK3A53aAMKuR2IusBGq1uyosMDZ6bHEfO mSALtcdTMzsxQQd/1u0yjD572cB5yrgrzzW0kV0YMmkRxDlFDI72FJBWBbyvSUQN uCWLalZOmZTUdVm1UXWsHEHsS3N86sLLYr9wBaLQZn3zSS+QG045CSwMHtFiJxTx u54RNZSXdy4W/3C6Md9Th8lOOFFQFxT5YKSt3zMiw186aP8R1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmkheCi2GR5l6iVb0ywys7AKSt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzk2YTMyYzYtZDg4My0z MmNjLTg3MzQtODdjZDAxMTIzODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnu0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJhH4LtjmCN8r/fEinOWmaluzxkP/JCSyoehEP0VAl8SHZwoUWJrYcV SBtSYlpxf+L3UEwXhbRVSSbuF/tE79R9a6/N+FGbjeokbeTfLcEw+q1QU4wHeStW YoEXxTgvKK4XmVtsux3EJPRnduBxAbWyfCXfgq1kUvDd7YI5F9ibHohMdPRrmCTB tu7rnZ5trtFQvqp1y7RzVktTjMKxJNIVdrB9Ms5XRB/tvzbeBhwdKaSUOkzYZxzj nV/TRpKfpnb1HpqgMR82e6XTQLL+OkUXu8a5psIM/5GMvNU3nfJmvoXBTbXezXy2 MUXH+zSZSrFoCxugiT5z1GG42f1GPlc= -----END CERTIFICATE-----Generated at Wed Mar 25 03:34:16 2026 by rpki-client