$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa File: 43fc3f5d-7da6-3394-990c-e086579daa0f.roa (raw, json) Hash identifier: R/Plej0St8YGtX8n/1QQfiIm9O6TZlskH3BW0Po8p1o= Subject key identifier: 09:A0:70:43:F9:2D:08:DF:AC:AB:36:3A:DB:79:37:66:B4:71:C3:E7 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584D6C0FB57FF9E9ABDA20145600 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 29909 IP address blocks: 208.74.60.0/22 maxlen: 22 208.74.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b5:7f:f9:e9:ab:da:20:14:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=b0ca5e34-2aae-4015-9393-8f70adef2084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:b8:6d:87:a2:5b:ec:70:38:8a:91:34:b2: f9:6e:d3:eb:5a:88:4f:45:c0:65:e7:05:b3:f7:76: dd:20:1f:02:27:50:4c:fc:b8:ee:5b:ae:64:d4:82: 04:30:a6:ac:35:85:af:83:b7:b1:19:29:e2:a1:a5: 65:9f:16:4e:20:b1:03:1d:17:bb:4c:b7:18:cc:3a: b7:3b:40:26:b6:78:a0:0f:53:c9:83:4c:c1:5d:ff: 24:82:ec:e9:35:15:e0:e9:2b:67:de:66:8a:95:27: 5e:a4:70:87:2d:45:33:b1:d9:81:69:c0:19:39:1e: ff:88:1b:60:97:1d:49:48:9b:f5:c9:67:0a:84:0e: c6:fa:fb:db:b4:1e:bc:b4:af:16:ac:3a:58:61:8a: 4c:c5:9a:f7:a9:b2:b0:8c:ed:02:c0:c1:e5:57:22: 11:11:f8:ea:37:26:4b:ab:f7:c4:a0:e8:36:61:df: 32:11:71:2a:6e:27:ab:69:8c:8d:51:b8:3e:b9:19: 77:b0:25:7d:9f:e0:44:83:59:d3:de:c4:d3:bc:bc: 96:c5:ad:9a:cc:ef:58:80:e3:af:66:7b:f3:f6:10: c2:48:22:bf:30:59:1d:84:47:4b:d8:5d:a1:78:22: 56:fd:ad:3d:a7:2e:25:9b:3b:9c:b0:f5:a6:c4:56: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:70:43:F9:2D:08:DF:AC:AB:36:3A:DB:79:37:66:B4:71:C3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.74.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c1:b1:9d:73:d1:04:ae:31:68:e1:50:19:38:89:60:4d:59: 66:2a:be:4c:37:9c:fc:89:28:74:cc:81:0d:30:5f:0b:c9:b0: 20:b4:f1:8d:cd:77:29:b9:53:8f:5a:41:6b:05:66:e7:9f:a8: 42:79:ae:58:49:c4:96:17:70:f4:b6:12:9a:2c:8c:dd:9f:e9: f1:6b:5a:c6:cc:97:ce:ed:a0:55:75:0e:d5:c4:01:42:ca:4b: b6:eb:e6:13:7e:50:b7:df:cd:be:92:81:ea:32:1d:86:88:93: ae:ac:fe:fb:18:f1:49:69:dd:1c:9c:1e:45:59:64:68:8d:6f: 0b:db:ce:b1:78:8b:aa:6c:34:1e:19:9f:c3:c4:ff:e8:35:c4: 28:74:6e:f1:dd:d2:ed:d3:4f:4d:7d:a4:ae:16:ac:00:26:04: 71:4d:2a:90:fc:1f:e3:f2:ed:79:11:c0:67:eb:a0:37:fb:fd: c4:3a:0d:2d:61:aa:eb:7c:c7:08:ef:3c:1a:80:f9:92:86:a0: e6:bf:28:d8:03:b1:0e:59:1a:3a:d2:1d:8c:86:72:ad:d3:ca: 20:d0:51:4f:a7:d6:ea:a8:d3:d1:38:74:7b:3f:c6:c5:76:4f: a5:65:7a:2c:86:f7:34:f9:64:a4:17:c6:de:0d:fe:d3:b8:cb: bd:8d:cf:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7V/+emr2iAUVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YjBjYTVlMzQtMmFhZS00MDE1LTkzOTMtOGY3MGFkZWYyMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAm4bYeiW+xwOIqRNLL5btPrWohPRcBl5wWz 93bdIB8CJ1BM/LjuW65k1IIEMKasNYWvg7exGSnioaVlnxZOILEDHRe7TLcYzDq3 O0AmtnigD1PJg0zBXf8kguzpNRXg6Stn3maKlSdepHCHLUUzsdmBacAZOR7/iBtg lx1JSJv1yWcKhA7G+vvbtB68tK8WrDpYYYpMxZr3qbKwjO0CwMHlVyIREfjqNyZL q/fEoOg2Yd8yEXEqbieraYyNUbg+uRl3sCV9n+BEg1nT3sTTvLyWxa2azO9YgOOv Znvz9hDCSCK/MFkdhEdL2F2heCJW/a09py4lmzucsPWmxFa5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmgcEP5LQjfrKs2Ott5N2a0ccPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNDNmYzNmNWQtN2RhNi0z Mzk0LTk5MGMtZTA4NjU3OWRhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrBsZ1z0QSuMWjhUBk4iWBNWWYqvkw3nPyJKHTMgQ0wXwvJsCC08Y3N dym5U49aQWsFZuefqEJ5rlhJxJYXcPS2EposjN2f6fFrWsbMl87toFV1DtXEAULK S7br5hN+ULffzb6SgeoyHYaIk66s/vsY8Ulp3RycHkVZZGiNbwvbzrF4i6psNB4Z n8PE/+g1xCh0bvHd0u3TT019pK4WrAAmBHFNKpD8H+Py7XkRwGfroDf7/cQ6DS1h qut8xwjvPBqA+ZKGoOa/KNgDsQ5ZGjrSHYyGcq3TyiDQUU+n1uqo09E4dHs/xsV2 T6VleiyG9zT5ZKQXxt4N/tO4y72Nzw0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:53 2026 by rpki-client