$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d781723-7e32-31fd-8e88-a3c6c9e2fb7e.roa File: 1d781723-7e32-31fd-8e88-a3c6c9e2fb7e.roa (raw, json) Hash identifier: dizY2NR0ID5GjCubX5MTDDy3QWmjuQTfpbRVBC2bb/w= Subject key identifier: 5F:BF:37:D5:4E:2E:28:1A:91:34:9C:B1:D9:D6:E1:A7:85:0E:F3:38 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CB68CA3E3765B34759E240 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d781723-7e32-31fd-8e88-a3c6c9e2fb7e.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 24.182.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:68:ca:3e:37:65:b3:47:59:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7f3c355a-f024-4ec0-8c58-0192bfadc19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:aa:e0:b9:f7:99:60:d9:e7:52:7c:23:b6: 9e:0f:80:76:b6:ea:12:96:9f:d0:46:12:aa:2b:39: 41:0e:8c:6f:8c:a0:41:f4:63:a1:ca:ca:ea:a6:32: b4:29:01:4d:3b:20:be:78:2b:b3:4a:f5:ff:97:8d: 60:74:f9:95:59:4e:e8:e7:c6:ef:6d:d8:bf:4e:50: bc:6d:a6:15:7d:8e:01:81:c2:5a:85:d0:50:6a:e4: 29:c1:c2:0d:fb:06:39:30:c8:a2:0c:2a:eb:89:20: 6d:8a:c1:92:38:34:5d:b4:dc:b0:78:c0:aa:b8:6f: 8d:d3:77:92:1c:99:21:e8:7f:ca:a2:01:51:28:46: 86:72:10:86:8b:0d:f5:39:fb:5f:90:d0:99:ac:39: cb:ab:de:29:2c:b5:4f:27:fc:0c:ec:0e:db:22:61: 60:4d:e5:4e:87:5d:1b:d4:dd:20:0f:c3:4d:36:78: f5:2e:f6:8b:09:a4:27:89:74:1a:4a:5a:e0:a8:08: 18:0e:aa:5d:2f:13:fa:36:e8:3c:64:94:50:e0:50: 0b:d6:16:ad:be:f3:92:5c:c1:95:57:15:77:4c:4e: a8:d8:62:f1:7b:94:84:49:2b:b4:22:76:a0:51:89: 58:18:27:12:96:37:94:31:21:0a:9d:74:5d:1b:7d: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BF:37:D5:4E:2E:28:1A:91:34:9C:B1:D9:D6:E1:A7:85:0E:F3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d781723-7e32-31fd-8e88-a3c6c9e2fb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.182.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:de:5c:41:cb:78:26:af:c5:d1:9b:43:1f:b0:0d:5f:71:65: 6a:46:a9:ea:4c:b1:3b:bd:30:1a:fe:a9:ea:08:5e:b0:aa:91: c7:29:90:cf:9c:51:bd:2e:3c:f3:c9:43:81:c9:20:6a:0a:c3: 41:c7:2e:ae:e6:1c:80:8e:0f:2d:1c:78:19:48:1c:99:32:de: c3:f4:4f:c2:27:cf:f1:96:a1:de:8d:80:dc:51:51:7a:72:7c: 03:10:e9:d4:21:52:75:c9:4e:2f:42:72:e9:fb:5b:c7:16:87: c8:a3:09:b1:27:4c:10:65:2b:07:d3:f2:ad:0e:7b:ec:26:4b: aa:d0:df:06:fe:c8:9f:93:55:63:49:dc:6a:73:53:f4:dc:92: 48:8d:74:10:5f:1a:59:82:a4:e5:fd:ac:33:03:af:94:26:2c: 75:00:71:78:2d:aa:a3:a0:19:57:e3:7c:70:9e:b5:2d:16:d1: 5c:75:af:94:77:dd:b3:dc:65:7f:dd:a1:bd:b3:bc:f6:f7:c2: 50:aa:04:9a:d6:be:e2:7a:1b:d5:95:05:7c:51:c7:54:c7:a2: c9:6c:5a:fb:ff:3d:97:42:9f:1e:bc:ce:a4:1d:87:61:e2:15: 1a:43:b2:48:b1:1f:34:d3:b2:a1:97:b7:12:18:37:db:57:ae: db:f8:19:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay2jKPjdls0dZ4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2YzYzM1NWEtZjAyNC00ZWMwLThjNTgtMDE5MmJmYWRjMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlviq4Ln3mWDZ51J8I7aeD4B2tuoSlp/QRhKq KzlBDoxvjKBB9GOhysrqpjK0KQFNOyC+eCuzSvX/l41gdPmVWU7o58bvbdi/TlC8 baYVfY4BgcJahdBQauQpwcIN+wY5MMiiDCrriSBtisGSODRdtNyweMCquG+N03eS HJkh6H/KogFRKEaGchCGiw31OftfkNCZrDnLq94pLLVPJ/wM7A7bImFgTeVOh10b 1N0gD8NNNnj1LvaLCaQniXQaSlrgqAgYDqpdLxP6Nug8ZJRQ4FAL1hatvvOSXMGV VxV3TE6o2GLxe5SESSu0InagUYlYGCcSljeUMSEKnXRdG30XswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+/N9VOLigakTScsdnW4aeFDvM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWQ3ODE3MjMtN2UzMi0z MWZkLThlODgtYTNjNmM5ZTJmYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGLaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7eXEHLeCavxdGbQx+wDV9xZWpGqepMsTu9MBr+qeoIXrCqkccpkM+c Ub0uPPPJQ4HJIGoKw0HHLq7mHICODy0ceBlIHJky3sP0T8Inz/GWod6NgNxRUXpy fAMQ6dQhUnXJTi9Ccun7W8cWh8ijCbEnTBBlKwfT8q0Oe+wmS6rQ3wb+yJ+TVWNJ 3GpzU/TckkiNdBBfGlmCpOX9rDMDr5QmLHUAcXgtqqOgGVfjfHCetS0W0Vx1r5R3 3bPcZX/dob2zvPb3wlCqBJrWvuJ6G9WVBXxRx1THoslsWvv/PZdCnx68zqQdh2Hi FRpDskixHzTTsqGXtxIYN9tXrtv4GZA= -----END CERTIFICATE-----Generated at Mon Mar 23 16:06:41 2026 by rpki-client