$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0e371ea-bd05-307d-a7c4-54e6f15e1e67.roa File: a0e371ea-bd05-307d-a7c4-54e6f15e1e67.roa (raw, json) Hash identifier: K/Tx4Xs4I7fmgd2H4hi+g2iNPQlfcRMvpkooIeeIppc= Subject key identifier: CA:C1:07:FD:2E:0D:69:AD:03:FA:68:F1:9E:6D:1D:00:64:80:7E:A2 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D8127958E96B13A6349F62480 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0e371ea-bd05-307d-a7c4-54e6f15e1e67.roa Signing time: Tue 14 Apr 2026 14:20:37 +0000 ROA not before: Tue 14 Apr 2026 14:20:37 +0000 ROA not after: Mon 13 Jul 2026 14:20:37 +0000 asID: 0 IP address blocks: 47.2.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:27:95:8e:96:b1:3a:63:49:f6:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Apr 14 14:20:37 2026 GMT Not After : Jul 13 14:20:37 2026 GMT Subject: CN=42aafa32-994f-43f8-9a8a-c804d433ae0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:5f:19:77:3e:6f:86:24:13:85:1b:ed:55: 59:da:b6:15:03:92:8f:eb:54:c9:5d:15:a4:c8:c8: 51:86:45:f6:2f:3c:b7:68:4d:32:a3:ff:4b:f1:b9: 51:c8:d4:58:7c:f3:11:e4:13:dc:b2:3e:e5:24:3e: 20:3e:a5:eb:33:ec:eb:01:ee:6e:41:5f:6e:9b:56: 3c:6d:c9:94:df:8b:4a:98:1a:c8:65:54:60:e0:f1: b3:4d:60:57:2f:d7:c3:64:b2:78:77:f4:d5:a2:62: 77:f9:21:f2:60:db:d6:f2:d3:cc:6e:2c:e0:b6:6f: d1:da:b3:b1:3e:8e:6f:4d:9d:b1:5d:51:30:5b:99: 39:b1:8b:f8:2d:3a:3b:2d:87:7d:15:38:a7:9e:1d: df:06:e3:c8:f7:49:07:cc:8d:b4:c0:1f:fe:a2:cf: 86:39:cb:89:83:fc:db:28:76:11:ed:93:63:58:fe: 01:d3:5f:cb:3a:ef:fd:a4:ad:6c:78:70:84:0b:2d: c2:f4:c8:50:e8:43:08:04:22:02:eb:29:51:3b:d2: 87:32:9b:2f:f2:1f:1a:b3:98:9d:ac:ea:95:51:f7: 56:7f:0d:25:ee:58:de:82:2e:d8:8a:8f:31:d2:b0: 9f:16:17:8b:e9:ad:91:f2:fb:1f:fe:4e:1c:ed:f9: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:07:FD:2E:0D:69:AD:03:FA:68:F1:9E:6D:1D:00:64:80:7E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0e371ea-bd05-307d-a7c4-54e6f15e1e67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.2.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a7:a4:4a:82:9f:01:6e:49:b5:cb:79:c3:d8:c5:0b:42:53: 81:fd:5e:37:ea:1a:ac:4b:56:b1:eb:13:ad:d6:e6:96:27:d9: 70:d2:a5:ed:b2:d8:8e:20:1a:cb:e0:34:da:f6:08:e4:33:38: 0d:e9:cd:5c:47:b8:b3:0f:45:4d:c6:b2:fa:f7:f5:0d:e4:43: 0d:67:09:c9:4b:df:df:a4:bb:9e:e7:13:9e:85:ac:55:40:6f: 0a:03:65:a7:5e:2c:a4:ac:c1:79:f2:25:01:df:c1:95:0b:1a: 3e:c8:4c:90:f3:79:81:c7:39:4d:d4:67:58:08:cc:80:66:9b: 44:4f:38:e5:65:31:df:cf:f8:63:06:02:d5:a1:5e:be:dc:6f: b7:24:56:0c:1d:78:f2:35:1f:9f:da:e5:09:1c:66:81:da:50: d1:60:c0:46:aa:c7:85:53:a3:23:6f:ea:24:c7:35:08:44:67: 06:7e:bf:3a:1c:0e:86:0c:52:db:96:4f:b7:f8:7e:90:b8:79: 5e:ba:ff:78:5f:4e:e1:69:3c:ad:6a:fc:e4:5a:6d:08:83:64: f4:35:23:53:21:e9:89:2f:7b:59:ad:5c:b4:11:20:7e:48:46: 65:e9:1f:c6:e8:a4:8a:70:18:6d:be:33:56:6f:1a:7e:f8:ac: f5:af:48:c6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2BJ5WOlrE6Y0n2JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDQxNDE0MjAzN1oXDTI2MDcxMzE0MjAzN1owLzEtMCsGA1UEAxMk NDJhYWZhMzItOTk0Zi00M2Y4LTlhOGEtYzgwNGQ0MzNhZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApURfGXc+b4YkE4Ub7VVZ2rYVA5KP61TJXRWk yMhRhkX2Lzy3aE0yo/9L8blRyNRYfPMR5BPcsj7lJD4gPqXrM+zrAe5uQV9um1Y8 bcmU34tKmBrIZVRg4PGzTWBXL9fDZLJ4d/TVomJ3+SHyYNvW8tPMbizgtm/R2rOx Po5vTZ2xXVEwW5k5sYv4LTo7LYd9FTinnh3fBuPI90kHzI20wB/+os+GOcuJg/zb KHYR7ZNjWP4B01/LOu/9pK1seHCECy3C9MhQ6EMIBCIC6ylRO9KHMpsv8h8as5id rOqVUfdWfw0l7ljegi7Yio8x0rCfFheL6a2R8vsf/k4c7fnHKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMrBB/0uDWmtA/po8Z5tHQBkgH6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTBlMzcxZWEtYmQwNS0z MDdkLWE3YzQtNTRlNmYxNWUxZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALwIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHqekSoKfAW5Jtct5w9jFC0JTgf1eN+oarEtWsesTrdbmlifZcNKl7bLY jiAay+A02vYI5DM4DenNXEe4sw9FTcay+vf1DeRDDWcJyUvf36S7nucTnoWsVUBv CgNlp14spKzBefIlAd/BlQsaPshMkPN5gcc5TdRnWAjMgGabRE845WUx38/4YwYC 1aFevtxvtyRWDB148jUfn9rlCRxmgdpQ0WDARqrHhVOjI2/qJMc1CERnBn6/OhwO hgxS25ZPt/h+kLh5Xrr/eF9O4Wk8rWr85FptCINk9DUjUyHpiS97Wa1ctBEgfkhG ZekfxuikinAYbb4zVm8afvis9a9Ixg== -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:42 2026 by rpki-client