$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa File: 20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa (raw, json) Hash identifier: q4WV7e2k+SZL32T79MNgCs2uzyxXWoVc35OPaW3t+IY= Subject key identifier: 5B:7D:99:AF:D1:17:DD:24:83:C6:60:55:E1:33:0E:91:56:92:FA:64 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E2E4ACF24D94FF51468B0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 138.229.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:2e:4a:cf:24:d9:4f:f5:14:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=c543d86b-5cf9-4780-b470-3f10a1d47204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:a4:76:03:a8:2f:c2:a9:4d:54:13:e0:04: 2f:f7:77:42:a4:18:60:4b:42:5b:13:cf:2d:ea:0b: ee:68:f2:af:32:04:1b:2b:a8:0f:3b:58:e5:07:e7: 92:d9:26:b0:c4:30:23:66:0c:ea:2b:e8:57:89:07: 45:2f:38:6e:32:46:5e:8b:c8:45:e3:a5:1d:cd:9e: ef:01:33:1b:4a:e2:95:ae:99:ad:de:66:68:92:e1: 8a:25:4a:ea:2b:75:db:ef:8f:44:18:44:fd:6e:23: 47:2c:94:64:75:81:3f:82:cc:73:ab:c9:5b:13:34: 6d:9a:04:96:58:52:f0:a4:d3:d6:9c:ab:ed:a8:ab: 5f:b6:f0:17:d4:e2:b6:86:31:41:74:4d:e1:84:2b: 2b:e7:31:91:b0:76:8d:6b:3b:6b:e1:76:51:33:8a: 69:48:b2:e7:bb:dc:48:f7:bd:a3:c0:6c:7d:54:9b: 7b:2e:09:33:9a:3f:2f:c8:8e:05:60:5a:83:5d:ae: 5a:b9:9f:b0:cd:de:1b:db:92:57:a6:41:f4:7a:f4: 82:4e:66:ca:dc:6c:99:ea:9a:07:92:bf:e1:d7:aa: c3:ab:d7:02:24:d9:bb:b1:c7:50:ad:dc:09:db:a1: b2:05:4f:55:b2:8c:49:dd:f0:92:71:21:a7:c6:20: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:99:AF:D1:17:DD:24:83:C6:60:55:E1:33:0E:91:56:92:FA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 138.229.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a8:13:f0:25:f5:e8:47:bd:a4:ba:ee:85:5d:f6:95:06:5a: 77:55:99:bf:bd:dc:2c:76:18:47:71:74:79:19:b4:f0:5f:59: 2a:fa:fd:1c:51:2f:d8:8a:06:a3:51:ee:7f:3b:06:ee:c0:8f: 73:32:6d:af:e3:a0:b2:72:49:10:7b:af:d0:ba:82:28:fe:6b: 0d:72:82:1d:d0:1f:00:e6:81:10:57:8e:16:c3:b4:d1:fa:27: a1:f3:57:93:b0:b2:a6:ad:0f:06:37:9d:b4:c4:63:2b:ef:96: 8f:1d:32:f2:4c:26:44:ae:05:0e:0d:4e:7c:40:20:d5:e9:58: 53:72:b5:b4:98:a4:27:1e:95:66:e8:ac:d0:53:22:d6:5b:7f: dc:25:67:61:10:11:d7:b6:16:61:96:ce:69:7c:65:10:77:d5: 56:3a:1f:49:71:15:30:be:51:de:91:d8:c7:41:34:6b:88:6b: 1f:88:42:0d:35:f7:68:40:f0:90:f4:2d:b5:6b:6a:c2:9e:19: ef:7e:6a:81:4b:05:32:ed:4c:40:a8:3d:59:35:f8:87:ab:51: d8:80:45:5d:24:84:68:e2:f1:ff:a3:1e:97:2e:ac:b0:da:23: 35:06:07:58:56:95:c4:de:3d:2a:23:2d:5d:ab:13:a2:3f:b1: d4:ff:42:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXi5KzyTZT/UUaLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YzU0M2Q4NmItNWNmOS00NzgwLWI0NzAtM2YxMGExZDQ3MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsakdgOoL8KpTVQT4AQv93dCpBhgS0JbE88t 6gvuaPKvMgQbK6gPO1jlB+eS2SawxDAjZgzqK+hXiQdFLzhuMkZei8hF46UdzZ7v ATMbSuKVrpmt3mZokuGKJUrqK3Xb749EGET9biNHLJRkdYE/gsxzq8lbEzRtmgSW WFLwpNPWnKvtqKtftvAX1OK2hjFBdE3hhCsr5zGRsHaNaztr4XZRM4ppSLLnu9xI 972jwGx9VJt7Lgkzmj8vyI4FYFqDXa5auZ+wzd4b25JXpkH0evSCTmbK3GyZ6poH kr/h16rDq9cCJNm7scdQrdwJ26GyBU9VsoxJ3fCScSGnxiBvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt9ma/RF90kg8ZgVeEzDpFWkvpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjBlY2MxZmItY2FhYi0z OWUxLWFjMGQtNmFlOWIwMzc3ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiuWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGoE/Al9ehHvaS67oVd9pUGWndVmb+93Cx2GEdxdHkZtPBfWSr6/RxR L9iKBqNR7n87Bu7Aj3Myba/joLJySRB7r9C6gij+aw1ygh3QHwDmgRBXjhbDtNH6 J6HzV5OwsqatDwY3nbTEYyvvlo8dMvJMJkSuBQ4NTnxAINXpWFNytbSYpCcelWbo rNBTItZbf9wlZ2EQEde2FmGWzml8ZRB31VY6H0lxFTC+Ud6R2MdBNGuIax+IQg01 92hA8JD0LbVrasKeGe9+aoFLBTLtTECoPVk1+IerUdiARV0khGji8f+jHpcurLDa IzUGB1hWlcTePSojLV2rE6I/sdT/Qlk= -----END CERTIFICATE-----Generated at Sat Oct 17 23:53:08 2026 by rpki-client