$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa File: a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa (raw, json) Hash identifier: gvtxjFCfCSHxM1gBfFoxUjflNkyhNR+RQ8byW6oRQHk= Subject key identifier: E5:AB:56:2D:12:0E:94:50:06:1D:50:35:1B:3E:D4:25:99:79:3F:9B Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E2C2D48B555D3F7AC1C80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20001 IP address blocks: 66.53.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:2c:2d:48:b5:55:d3:f7:ac:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=22b81f96-35fe-4379-87fe-d08fcac0cb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:68:90:1c:3a:ff:19:eb:0d:4a:c2:7f:27: 6c:3e:df:40:57:1e:a3:ce:98:32:90:05:ba:a3:13: 72:02:56:bf:6e:35:84:dd:85:2f:0f:3b:62:89:aa: 39:0e:62:da:29:cf:87:e9:f1:9c:28:aa:de:3c:8e: f1:ea:5f:16:cb:c2:09:2c:b6:d0:e0:73:2a:df:03: 6f:95:ce:cd:5a:bc:15:a9:1a:2a:f6:1f:e6:b0:ad: 64:2c:eb:a7:cc:e7:fc:bd:90:9f:94:50:4b:f4:21: 60:c1:55:58:68:d5:55:05:59:1f:63:cc:d2:af:fd: 62:dd:ad:4f:25:6f:e1:18:ea:0c:94:1d:97:fb:5a: 0e:d8:97:1e:75:15:85:b0:54:8e:24:7b:ce:62:5a: 1d:ce:03:e9:ea:ad:bd:6b:58:c7:b6:1a:0a:67:21: e4:9a:61:8f:75:71:e3:05:ee:5f:a1:0d:a8:74:b1: d3:5a:7b:ae:88:64:d0:94:02:e3:05:9b:c5:d8:ce: b3:fa:1d:11:91:52:e4:fd:3d:e4:4e:2f:aa:a4:ca: e4:17:31:00:ef:e7:7c:1e:ba:05:9d:cb:4a:9a:89: 6d:67:f0:28:9e:8f:ce:2e:2a:c9:51:90:2e:52:80: 5e:a4:57:e1:88:6b:23:06:8d:00:5f:21:ac:34:5e: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AB:56:2D:12:0E:94:50:06:1D:50:35:1B:3E:D4:25:99:79:3F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.53.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:47:3a:35:52:e7:06:cd:2c:c9:4f:19:18:41:65:c7:e0:ee: b4:e8:82:f0:3e:7e:20:96:0d:49:5f:7a:8d:be:62:13:35:c5: 2f:37:c1:84:f9:5c:b0:80:52:7d:c2:94:0c:2b:30:41:80:8d: d3:cc:ba:02:0c:29:12:fc:e9:5f:16:b8:50:e5:d4:a2:5b:92: 58:90:63:75:ad:ef:86:11:cd:b9:ef:0a:53:6d:84:2c:1b:64: c5:8c:5a:aa:b1:e7:40:8c:74:62:dd:01:8c:d9:71:40:c8:97: 09:da:bc:77:b1:51:21:8f:7d:79:b9:1a:bc:72:b1:dd:55:ae: 5b:96:57:89:a7:21:26:5f:04:7a:34:39:5f:63:79:c8:d8:a7: cd:ad:e6:83:b7:f6:ca:36:c0:8f:ef:7f:56:06:23:8b:75:44: f6:3b:04:4b:8b:a3:64:70:37:64:17:e2:80:a8:59:9a:e7:3a: 38:62:3b:bd:32:06:1a:a4:6f:6c:9e:de:fa:0b:f1:21:93:9e: 7e:53:27:1e:2f:27:5a:4b:1f:c1:cd:72:5d:05:5a:28:73:b3: c8:dd:9d:ab:0b:a2:92:94:a4:71:0d:54:07:79:30:5c:a8:19: 58:ba:9f:63:6c:eb:70:05:0a:db:f6:10:aa:96:fb:54:e3:81: 08:8c:c9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXiwtSLVV0/esHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MjJiODFmOTYtMzVmZS00Mzc5LTg3ZmUtZDA4ZmNhYzBjYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs59okBw6/xnrDUrCfydsPt9AVx6jzpgykAW6 oxNyAla/bjWE3YUvDztiiao5DmLaKc+H6fGcKKrePI7x6l8Wy8IJLLbQ4HMq3wNv lc7NWrwVqRoq9h/msK1kLOunzOf8vZCflFBL9CFgwVVYaNVVBVkfY8zSr/1i3a1P JW/hGOoMlB2X+1oO2JcedRWFsFSOJHvOYlodzgPp6q29a1jHthoKZyHkmmGPdXHj Be5foQ2odLHTWnuuiGTQlALjBZvF2M6z+h0RkVLk/T3kTi+qpMrkFzEA7+d8HroF nctKmoltZ/Aono/OLirJUZAuUoBepFfhiGsjBo0AXyGsNF6pZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWrVi0SDpRQBh1QNRs+1CWZeT+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTA4OTkxZDEtOGNiZi0z NDYyLTk1YTMtMDQ4MGJjNWZhZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQjWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJHOjVS5wbNLMlPGRhBZcfg7rTogvA+fiCWDUlfeo2+YhM1xS83wYT5 XLCAUn3ClAwrMEGAjdPMugIMKRL86V8WuFDl1KJbkliQY3Wt74YRzbnvClNthCwb ZMWMWqqx50CMdGLdAYzZcUDIlwnavHexUSGPfXm5Grxysd1VrluWV4mnISZfBHo0 OV9jecjYp82t5oO39so2wI/vf1YGI4t1RPY7BEuLo2RwN2QX4oCoWZrnOjhiO70y Bhqkb2ye3voL8SGTnn5TJx4vJ1pLH8HNcl0FWihzs8jdnasLopKUpHENVAd5MFyo GVi6n2Ns63AFCtv2EKqW+1TjgQiMyd4= -----END CERTIFICATE-----Generated at Wed Oct 28 04:51:12 2026 by rpki-client