$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f80a115-142d-3500-a9d6-cf2a6647e2a1.roa File: 2f80a115-142d-3500-a9d6-cf2a6647e2a1.roa (raw, json) Hash identifier: zMs4edU8lRviltjYqhasJ7D1Q4Vl+4OGDHUat3rDjAI= Subject key identifier: 28:4C:A7:97:52:67:8D:50:7C:83:B9:33:D5:DA:A2:0D:55:8C:4C:CB Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD6F0199FBDBB305EEC00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f80a115-142d-3500-a9d6-cf2a6647e2a1.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 68.115.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d6:f0:19:9f:bd:bb:30:5e:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=c0d5c101-0b23-4af2-b5d0-a0482a91b4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:05:d4:36:f3:75:ee:7a:ce:72:ba:89:fe: df:af:48:06:89:e5:6d:f1:fb:0a:aa:b4:35:8b:06: 78:36:57:06:66:4f:ce:b6:4e:25:f3:cc:25:76:48: f5:51:db:fa:d2:2a:e2:99:17:c5:7b:d0:b3:18:0b: 6d:09:50:4b:be:ef:96:a4:7e:46:2c:b5:09:99:16: 4a:d9:49:a7:20:8d:33:bc:19:d6:f1:ac:14:a5:67: 9f:88:1f:dd:23:06:85:24:4f:94:09:f4:13:69:50: fa:64:f2:f0:51:bd:8a:eb:0d:d9:83:3a:53:b2:13: c5:25:85:2b:d1:5c:9c:f9:99:6b:a2:d0:5c:fd:14: 79:e8:48:96:44:5d:4e:61:e3:f6:8d:5f:40:e8:5d: 54:fa:db:a1:fd:ef:00:55:f5:80:57:57:ec:6d:3b: b9:fc:f9:29:7f:64:19:cc:32:f8:f9:54:9d:fc:1b: 45:83:4e:94:2e:04:6b:c2:6d:6e:92:20:94:03:81: 1d:56:6c:a6:5e:be:21:6e:18:35:c0:84:97:49:d0: 5c:3b:38:c4:85:99:30:6b:17:6a:c9:9b:20:6a:9b: 5c:c1:9f:32:e0:23:ee:46:24:e3:7b:b0:fa:a5:57: 5f:20:e9:85:d4:32:2a:d8:9d:ad:b7:7d:b6:a1:b4: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4C:A7:97:52:67:8D:50:7C:83:B9:33:D5:DA:A2:0D:55:8C:4C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f80a115-142d-3500-a9d6-cf2a6647e2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.115.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:da:60:bb:34:9a:a1:f4:96:6f:ec:07:0b:7c:09:89:6a:5a: a9:9e:ac:71:9e:ea:1f:ff:50:51:08:7d:40:25:0c:98:3d:4f: 6d:46:68:ca:61:2a:c9:81:80:89:66:09:ec:54:78:3b:88:07: 9a:ed:8f:66:1e:0e:5b:c9:01:52:d9:af:35:db:c4:31:97:f5: 27:11:ab:9f:c1:8e:05:a3:5e:53:4b:20:32:10:bf:e0:0a:99: 1f:c4:c9:ce:81:74:9b:e1:b4:6c:ec:b7:09:25:c6:a0:15:24: 50:e4:2b:4f:cf:53:73:05:91:1d:bf:d6:33:17:1a:0b:2c:55: b7:6b:1f:b7:59:1c:dd:d9:1d:79:d9:47:8f:2c:dd:a2:59:6b: fa:26:ff:17:10:f2:34:a4:6e:a6:33:2f:e1:98:33:40:d9:b6: 28:b4:27:3d:a5:d2:7f:0d:93:0b:5e:1c:30:b5:44:f1:56:e0: 95:a2:16:0a:6a:c1:bb:53:ec:f7:f8:c1:5a:5c:6b:06:f6:5d: e2:ba:fd:4c:69:93:fb:66:0e:fa:7c:0c:7b:bd:88:df:8f:1a: b4:2d:6a:72:d1:de:94:c0:91:9f:ae:53:3a:a2:ff:4e:d0:f3: 4b:42:c7:04:9a:52:d8:db:c0:67:9a:ff:e7:a7:96:d2:83:3c: 5d:0c:ff:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdbwGZ+9uzBe7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YzBkNWMxMDEtMGIyMy00YWYyLWI1ZDAtYTA0ODJhOTFiNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwEF1Dbzde56znK6if7fr0gGieVt8fsKqrQ1 iwZ4NlcGZk/Otk4l88wldkj1Udv60irimRfFe9CzGAttCVBLvu+WpH5GLLUJmRZK 2UmnII0zvBnW8awUpWefiB/dIwaFJE+UCfQTaVD6ZPLwUb2K6w3ZgzpTshPFJYUr 0Vyc+ZlrotBc/RR56EiWRF1OYeP2jV9A6F1U+tuh/e8AVfWAV1fsbTu5/Pkpf2QZ zDL4+VSd/BtFg06ULgRrwm1ukiCUA4EdVmymXr4hbhg1wISXSdBcOzjEhZkwaxdq yZsgaptcwZ8y4CPuRiTje7D6pVdfIOmF1DIq2J2tt322obS57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChMp5dSZ41QfIO5M9Xaog1VjEzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmY4MGExMTUtMTQyZC0z NTAwLWE5ZDYtY2YyYTY2NDdlMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzaYLs0mqH0lm/sBwt8CYlqWqmerHGe6h//UFEIfUAlDJg9T21GaMph KsmBgIlmCexUeDuIB5rtj2YeDlvJAVLZrzXbxDGX9ScRq5/BjgWjXlNLIDIQv+AK mR/Eyc6BdJvhtGzstwklxqAVJFDkK0/PU3MFkR2/1jMXGgssVbdrH7dZHN3ZHXnZ R48s3aJZa/om/xcQ8jSkbqYzL+GYM0DZtii0Jz2l0n8NkwteHDC1RPFW4JWiFgpq wbtT7Pf4wVpcawb2XeK6/Uxpk/tmDvp8DHu9iN+PGrQtanLR3pTAkZ+uUzqi/07Q 80tCxwSaUtjbwGea/+enltKDPF0M/0M= -----END CERTIFICATE-----Generated at Mon Oct 12 18:28:06 2026 by rpki-client