$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa File: 4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json) Hash identifier: lNTtE5Nr9xExRNGc0r2bgHRSfPVA8T7SwRMH80kW+vY= Subject key identifier: 24:EE:C6:E1:32:9D:70:0A:D8:82:D4:79:A5:28:80:5A:3C:73:36:9C Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F4328584D4D5A6C2F3E8F3F9023A7EA80 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 399989 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6c:2f:3e:8f:3f:90:23:a7:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=9b02403d-9967-4c3b-b2b0-50a345961a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:13:c9:2f:fb:95:56:2b:32:aa:9f:0a:71: 06:8a:b7:b3:88:fc:1d:4d:c6:de:fd:6b:5e:a6:c8: 0d:d9:79:69:e6:dd:ee:27:b8:ab:5e:8b:26:8d:42: e0:73:08:70:7a:aa:ad:5c:4c:b5:5c:28:6f:27:5f: f4:5b:0b:2e:ea:1c:75:0c:51:4a:9e:6b:0b:9c:35: 17:9a:fa:8d:d2:40:50:57:ec:a6:2a:6c:56:07:a1: 7b:81:60:81:b7:b1:df:66:d6:44:4e:30:4d:30:ec: 0e:53:4b:61:62:51:2d:f9:d8:c4:b3:66:e2:92:5d: 6d:03:3c:26:bf:43:64:29:e7:50:43:01:70:81:a0: 7d:8a:ee:3b:b9:34:42:cf:42:6d:d3:42:60:75:73: 0a:0b:d9:40:11:15:71:44:c7:6d:15:68:77:a4:bc: 22:a3:ff:40:1e:ca:7b:7d:20:89:66:bf:52:85:70: 35:c4:f0:3f:12:66:43:da:76:e1:ed:c7:39:2a:f7: c1:33:0e:b8:c2:7e:d6:2b:42:ac:55:98:ce:6f:02: f0:0c:2f:f9:02:fc:9d:a6:22:d2:5b:c8:76:31:d6: 36:26:a5:d1:9b:6b:f7:d6:8b:0b:f4:44:0b:1e:46: 75:20:24:7b:f1:3c:80:97:22:49:3d:56:69:3c:6f: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:C6:E1:32:9D:70:0A:D8:82:D4:79:A5:28:80:5A:3C:73:36:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0a:e9:f6:9e:8f:ad:0d:c9:14:23:b7:e2:21:1b:56:58:c5: 2b:7b:0c:88:46:7b:7e:17:0f:6c:aa:f0:b2:44:27:6a:3e:f3: 8d:19:d1:29:43:f8:d2:d2:7b:0b:83:c7:e3:e4:c5:ee:e3:13: ef:3c:87:48:be:47:9a:2b:fe:6c:bf:28:25:30:62:ff:b8:5d: d1:9d:30:df:99:a6:35:97:c6:17:62:bb:83:67:dc:cc:ff:f4: 9b:de:10:de:4b:ad:c6:a1:34:f7:df:81:39:b5:c5:58:8b:0a: e5:27:a4:5f:ae:0e:04:70:3d:3d:8b:55:21:1f:b5:d5:01:af: 46:3d:c8:2c:3e:a3:92:e0:5e:62:0a:c0:5e:88:7e:66:a2:94: a4:0d:b1:fb:98:ce:d9:5e:64:e1:10:d8:45:3f:f9:d7:56:75: 06:08:69:1a:6f:13:77:4e:dc:64:d4:f2:0b:a0:5f:f2:fc:b3: 09:8b:10:2f:8f:4b:ad:6b:1d:44:c2:3b:90:78:d3:90:17:6d: 2b:b2:b6:81:91:5b:c2:b4:ea:95:cd:3e:d9:27:51:54:7b:97: 93:de:f4:7d:9b:45:0d:24:1c:d6:91:08:2d:18:16:03:73:91: f7:4e:a1:53:d0:52:e8:12:0f:ae:9e:3b:3d:28:a1:a7:22:d5: e0:a9:e9:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmwvPo8/kCOn6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OWIwMjQwM2QtOTk2Ny00YzNiLWIyYjAtNTBhMzQ1OTYxYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsATyS/7lVYrMqqfCnEGireziPwdTcbe/Wte psgN2Xlp5t3uJ7irXosmjULgcwhweqqtXEy1XChvJ1/0Wwsu6hx1DFFKnmsLnDUX mvqN0kBQV+ymKmxWB6F7gWCBt7HfZtZETjBNMOwOU0thYlEt+djEs2bikl1tAzwm v0NkKedQQwFwgaB9iu47uTRCz0Jt00JgdXMKC9lAERVxRMdtFWh3pLwio/9AHsp7 fSCJZr9ShXA1xPA/EmZD2nbh7cc5KvfBMw64wn7WK0KsVZjObwLwDC/5AvydpiLS W8h2MdY2JqXRm2v31osL9EQLHkZ1ICR78TyAlyJJPVZpPG8E6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTuxuEynXAK2ILUeaUogFo8czacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvNGE0OGUyMGEtMGUyOS0z ZTFmLWE4MWUtNGE3MmI3NDJlNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsK6faej60NyRQjt+IhG1ZYxSt7DIhGe34XD2yq8LJEJ2o+840Z0SlD +NLSewuDx+Pkxe7jE+88h0i+R5or/my/KCUwYv+4XdGdMN+ZpjWXxhdiu4Nn3Mz/ 9JveEN5LrcahNPffgTm1xViLCuUnpF+uDgRwPT2LVSEftdUBr0Y9yCw+o5LgXmIK wF6IfmailKQNsfuYztleZOEQ2EU/+ddWdQYIaRpvE3dO3GTU8gugX/L8swmLEC+P S61rHUTCO5B405AXbSuytoGRW8K06pXNPtknUVR7l5Pe9H2bRQ0kHNaRCC0YFgNz kfdOoVPQUugSD66eOz0ooaci1eCp6Yc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:20 2026 by rpki-client