$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29b8dbee-0411-3939-bd0a-32615084e870.roa File: 29b8dbee-0411-3939-bd0a-32615084e870.roa (raw, json) Hash identifier: OW+nvLiC5aoYQ1RNYiPDiTOvyy78tq42SU90a1JwuCs= Subject key identifier: 31:84:9B:1D:8B:27:1D:F5:0D:87:2E:CC:4D:EC:B0:2C:B2:FF:81:75 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EC3721255278CB4D2C78930A8 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29b8dbee-0411-3939-bd0a-32615084e870.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 20115 IP address blocks: 24.240.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:12:55:27:8c:b4:d2:c7:89:30:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=d64183f3-e153-4e84-a759-696b717877cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:da:53:51:11:42:63:8a:51:b4:06:b8:b0:6a: 15:34:66:11:2d:55:f0:d2:ed:2e:15:04:63:d0:07: 6b:40:09:dd:17:37:45:46:55:e0:77:24:23:b1:42: 1f:49:ae:f6:08:15:10:e4:d8:84:11:97:3c:18:52: 84:2c:08:9f:c3:bf:32:17:3b:da:e3:35:37:a7:23: 0e:2d:3c:f0:fb:b8:20:49:41:b9:5b:3b:e3:81:5f: 69:fd:55:96:d4:43:a6:d8:74:9c:fc:7e:1e:37:43: 0a:f9:cd:dd:ee:7a:08:cc:3a:92:8f:4f:c3:9e:f3: db:0d:00:2d:ff:ac:04:86:cf:0f:e1:31:4a:f5:99: 2a:b2:f1:3b:84:62:97:c6:9b:e8:a1:00:31:06:db: 65:c0:2b:91:a3:42:52:12:11:f2:2c:2e:b2:db:e6: f0:2b:65:a8:c1:0a:62:61:30:98:23:ba:20:4a:25: 64:2b:a2:4a:14:5b:0b:2d:d7:be:25:d2:88:5a:f8: 90:82:78:bb:b8:e9:94:b1:2b:3d:84:49:78:cc:c0: ca:44:b0:f9:0f:54:bc:80:5b:b7:45:11:0f:c9:db: d4:00:a7:12:ba:40:16:23:8b:6e:a2:87:1b:92:dc: 2e:9c:a9:34:7c:de:38:a9:f8:e5:b2:5c:ee:eb:7f: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:84:9B:1D:8B:27:1D:F5:0D:87:2E:CC:4D:EC:B0:2C:B2:FF:81:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29b8dbee-0411-3939-bd0a-32615084e870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.240.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:4c:06:65:32:2b:61:55:22:56:f3:ff:05:61:3d:df:e1:44: 28:84:b7:4a:14:80:9c:c8:c2:aa:a8:26:ce:d7:47:50:e9:64: bc:4e:be:66:b6:27:b8:cb:50:12:ff:07:0e:dc:f6:34:79:ad: 10:60:58:0d:1b:61:2d:c0:4e:b2:de:3f:56:2d:af:f2:d4:cf: 25:ff:a4:3c:5e:c7:01:c9:ab:4c:10:ec:ba:d3:86:05:16:67: b1:0c:38:3b:c1:5f:d1:01:f1:ca:08:c6:a9:6e:18:44:19:66: 9f:44:8a:e3:32:e0:f7:f5:39:b2:fc:43:26:1a:8a:36:a0:73: b7:ca:67:5b:55:95:8d:c0:d6:ab:aa:36:9c:d8:93:fb:54:12: 3f:92:a4:e2:88:3b:71:c7:4e:08:e7:24:84:14:f2:87:35:56: 77:23:d0:9b:85:ee:29:19:87:93:24:61:88:7e:f5:ac:48:82: d9:12:e4:60:b3:2e:3b:cc:a6:66:f7:98:40:23:b1:1a:fb:61: ad:b0:19:9e:4c:42:f1:c3:11:c2:71:8c:48:6d:7a:2c:c4:70: d1:d7:0e:90:14:57:20:42:33:f7:5f:d2:4a:6f:3d:3d:c8:49: 81:dd:4d:e6:c0:d8:64:12:b1:cc:1c:46:34:dc:34:a7:09:b1: d5:cf:fb:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DchJVJ4y00seJMKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDY0MTgzZjMtZTE1My00ZTg0LWE3NTktNjk2YjcxNzg3N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNpTURFCY4pRtAa4sGoVNGYRLVXw0u0uFQRj 0AdrQAndFzdFRlXgdyQjsUIfSa72CBUQ5NiEEZc8GFKELAifw78yFzva4zU3pyMO LTzw+7ggSUG5WzvjgV9p/VWW1EOm2HSc/H4eN0MK+c3d7noIzDqSj0/DnvPbDQAt /6wEhs8P4TFK9ZkqsvE7hGKXxpvooQAxBttlwCuRo0JSEhHyLC6y2+bwK2WowQpi YTCYI7ogSiVkK6JKFFsLLde+JdKIWviQgni7uOmUsSs9hEl4zMDKRLD5D1S8gFu3 RREPydvUAKcSukAWI4tuoocbktwunKk0fN44qfjlslzu639SMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGEmx2LJx31DYcuzE3ssCyy/4F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjliOGRiZWUtMDQxMS0z OTM5LWJkMGEtMzI2MTUwODRlODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtMBmUyK2FVIlbz/wVhPd/hRCiEt0oUgJzIwqqoJs7XR1DpZLxOvma2 J7jLUBL/Bw7c9jR5rRBgWA0bYS3ATrLeP1Ytr/LUzyX/pDxexwHJq0wQ7LrThgUW Z7EMODvBX9EB8coIxqluGEQZZp9EiuMy4Pf1ObL8QyYaijagc7fKZ1tVlY3A1quq NpzYk/tUEj+SpOKIO3HHTgjnJIQU8oc1Vncj0JuF7ikZh5MkYYh+9axIgtkS5GCz LjvMpmb3mEAjsRr7Ya2wGZ5MQvHDEcJxjEhteizEcNHXDpAUVyBCM/df0kpvPT3I SYHdTebA2GQSscwcRjTcNKcJsdXP+yA= -----END CERTIFICATE-----Generated at Sat Sep 5 04:13:22 2026 by rpki-client