$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa File: f984caa1-48ee-3a26-8d40-a1b14e45f110.roa (raw, json) Hash identifier: AsVBLaV5AK7ih6zwh0DlENbCWn46Ty0hOcOnX8NGa1c= Subject key identifier: 29:03:5C:F7:72:BB:DD:9E:81:22:72:CB:CD:5A:2A:FD:F9:B6:AE:40 Certificate issuer: /CN=74a39a1b-8414-451d-8610-7af7342dc8f6 Certificate serial: 010D0C9F4328584D95EFEAB8CB2E8FF26961DC80 Authority key identifier: 88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 21976 IP address blocks: 192.16.204.0/24 maxlen: 24 192.108.106.0/24 maxlen: 24 2620:45:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ea:b8:cb:2e:8f:f2:69:61:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a39a1b-8414-451d-8610-7af7342dc8f6 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=38a278c0-5fb8-4593-b0d7-53b021fb4616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:1f:5c:27:10:f8:4d:82:49:19:13:12:3b: ec:6c:45:35:5f:11:4d:56:ca:1b:bd:08:f0:4a:28: dd:c5:d6:0c:78:62:2b:4c:22:89:f3:4f:88:51:bb: 94:80:9e:4e:d1:cb:c0:e0:11:f9:cc:8c:d4:01:1d: a6:0c:98:c7:d7:ea:e9:7e:57:d4:fa:9f:de:63:b4: c6:04:cc:97:6d:2f:b6:f7:09:3e:f8:71:a4:87:8a: 26:18:0b:bc:c7:aa:d9:d7:86:ce:44:28:d9:a8:e1: 80:ac:c4:bf:a9:85:4f:16:7c:0d:29:bf:0a:aa:59: 8b:e0:b7:f1:66:58:e1:07:b3:ed:15:2d:a8:62:16: be:56:ff:e1:bc:14:24:f4:a3:2c:c8:10:a9:18:00: 6a:7e:62:82:7a:75:48:59:c0:b7:b3:dd:35:ef:73: 5a:47:76:79:74:0f:00:a6:54:0a:64:86:22:77:85: c6:18:bb:9a:9e:10:5b:c2:8c:8c:7d:3d:8e:d1:58: 53:df:3c:e1:c6:c1:e2:6c:2c:90:8f:69:d3:95:25: fe:16:b4:5e:5e:f5:63:f4:64:6b:20:de:28:ed:c6: c7:db:a9:fd:9a:3d:df:fa:e1:cf:60:00:fb:6c:a9: 93:a5:6d:e7:82:b7:6f:ee:30:73:ef:d1:d4:04:e9: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:5C:F7:72:BB:DD:9E:81:22:72:CB:CD:5A:2A:FD:F9:B6:AE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl X509v3 Authority Key Identifier: keyid:88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer sbgp-ipAddrBlock: critical IPv4: 192.16.204.0/24 192.108.106.0/24 IPv6: 2620:45:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2c:2c:0c:72:51:d0:23:83:a1:b0:65:36:52:5b:0b:84:e4: aa:4e:db:9f:f1:5e:3e:6e:39:40:fe:37:63:36:54:f8:55:85: 59:ca:9c:2b:ca:5c:c8:fb:ab:e4:f8:39:3e:6a:70:ec:6e:c1: 6f:cc:d0:a1:f9:a9:55:b0:45:59:0a:85:b3:34:09:48:da:b7: d2:1b:24:a9:3b:1b:9f:21:fc:78:a9:09:0f:7c:24:51:b8:7c: d5:4f:b0:c9:7c:31:fb:91:b0:a4:24:5a:27:1d:7d:7f:f8:52: b6:51:be:c3:ec:a8:e4:06:de:57:0a:63:3c:80:4d:eb:ac:af: 78:c1:38:df:d5:4c:82:6b:ea:ba:88:8b:d1:c8:81:20:be:d9: 7b:61:8e:f6:8c:08:b9:f0:dd:71:43:e4:74:01:2c:45:d7:c1: 51:4b:d2:d3:ef:42:56:b1:25:2d:32:02:59:a5:35:2a:75:21: 9a:2a:ee:79:ff:ce:b2:77:3b:c4:55:bd:af:54:bd:bf:1c:6f: 46:74:fa:7a:a0:53:15:c9:5b:1d:a5:1c:ac:fb:54:a5:8b:65: d7:ad:41:47:20:40:9f:f8:7e:c6:5a:e3:84:ce:02:8b:86:d9: bd:e0:a6:ed:a6:63:4d:f4:78:57:25:47:1e:8e:a4:3e:f7:28: 89:cb:31:3e -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE2V7+q4yy6P8mlh3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhMzlhMWItODQxNC00NTFkLTg2MTAtN2FmNzM0MmRj OGY2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MzhhMjc4YzAtNWZiOC00NTkzLWIwZDctNTNiMDIxZmI0NjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3EfXCcQ+E2CSRkTEjvsbEU1XxFNVsobvQjw SijdxdYMeGIrTCKJ80+IUbuUgJ5O0cvA4BH5zIzUAR2mDJjH1+rpflfU+p/eY7TG BMyXbS+29wk++HGkh4omGAu8x6rZ14bORCjZqOGArMS/qYVPFnwNKb8KqlmL4Lfx ZljhB7PtFS2oYha+Vv/hvBQk9KMsyBCpGABqfmKCenVIWcC3s90173NaR3Z5dA8A plQKZIYid4XGGLuanhBbwoyMfT2O0VhT3zzhxsHibCyQj2nTlSX+FrReXvVj9GRr IN4o7cbH26n9mj3f+uHPYAD7bKmTpW3ngrdv7jBz79HUBOn7CQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFCkDXPdyu92egSJyy81aKv35tq5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGEz OWExYi04NDE0LTQ1MWQtODYxMC03YWY3MzQyZGM4ZjYvZjk4NGNhYTEtNDhlZS0z YTI2LThkNDAtYTFiMTRlNDVmMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhMzlhMWItODQxNC00NTFkLTg2 MTAtN2FmNzM0MmRjOGY2Lzc0YTM5YTFiLTg0MTQtNDUxZC04NjEwLTdhZjczNDJk YzhmNi5jcmwwHwYDVR0jBBgwFoAUiHVdBiYi7RqletdVS8yuxNiMOj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGEzOWExYi04NDE0LTQ1MWQtODYxMC03YWY3 MzQyZGM4ZjYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwBDMAwQA wGxqMA8EAgACMAkDBwAmIABFwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoiwsDHJR0CODobBlNlJbC4Tk qk7bn/FePm45QP43YzZU+FWFWcqcK8pcyPur5Pg5Pmpw7G7Bb8zQofmpVbBFWQqF szQJSNq30hskqTsbnyH8eKkJD3wkUbh81U+wyXwx+5GwpCRaJx19f/hStlG+w+yo 5AbeVwpjPIBN66yveME439VMgmvquoiL0ciBIL7Ze2GO9owIufDdcUPkdAEsRdfB UUvS0+9CVrElLTICWaU1KnUhmiruef/Osnc7xFW9r1S9vxxvRnT6eqBTFclbHaUc rPtUpYtl161BRyBAn/h+xlrjhM4Ci4bZveCm7aZjTfR4VyVHHo6kPvcoicsxPg== -----END CERTIFICATE-----Generated at Mon Apr 27 13:58:01 2026 by rpki-client