$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4276890a-41ca-32c7-a0df-6d169d6f4194.roa File: 4276890a-41ca-32c7-a0df-6d169d6f4194.roa (raw, json) Hash identifier: G7Y1dYs7em8Ka4Y0THCFw/ZV8K5q23ICY+jiJhxRjFo= Subject key identifier: 3D:4C:F9:F5:88:B9:78:7A:C1:93:A2:AD:20:F7:FF:C4:0E:3B:1F:B3 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DDC6CA4976ECE47007C60 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4276890a-41ca-32c7-a0df-6d169d6f4194.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 71.10.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:dc:6c:a4:97:6e:ce:47:00:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=79b40607-f258-41a1-b356-31f984cf41ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:64:b3:2c:d5:9a:ee:04:68:07:87:97:d2: 0a:89:d3:61:da:b6:ce:a7:1b:ae:b7:eb:98:45:d5: b6:98:e7:2d:d5:9c:24:f4:c0:4f:e5:c0:ee:21:52: fb:8d:a5:1a:5c:1e:64:7e:b4:25:c4:fa:24:62:38: 4e:0d:53:33:78:d0:7d:00:d1:70:3e:ee:85:7e:4b: 65:51:37:47:e2:c9:d1:6f:23:ef:49:6b:e6:70:77: 91:59:91:d2:8d:4c:d2:5d:76:90:50:29:68:d4:ae: cb:3f:b9:6c:78:75:a2:9a:4e:16:02:75:62:d7:21: 50:58:79:0c:b0:73:1f:d8:0e:d5:85:6c:64:aa:fc: bb:f2:a0:f4:89:d2:17:c2:2f:74:7d:14:aa:bc:fd: ac:aa:25:e2:25:fe:a7:3c:9e:2c:31:ed:95:9c:3a: f7:30:7e:0d:79:84:4f:5d:0b:c2:9c:ce:59:c2:d1: f1:a8:a8:e2:13:76:f9:0c:95:9f:9a:ba:05:51:d4: a8:00:2b:fb:fb:95:38:96:eb:54:e5:bf:89:9d:10: de:10:6e:06:78:8e:59:2b:54:b7:41:45:32:b0:a5: 99:fd:21:86:34:ce:30:dd:5a:c9:c4:94:a7:ab:5c: 36:5a:46:f7:f2:0b:33:21:b1:e4:b4:5d:43:f0:25: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4C:F9:F5:88:B9:78:7A:C1:93:A2:AD:20:F7:FF:C4:0E:3B:1F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4276890a-41ca-32c7-a0df-6d169d6f4194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.10.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f4:22:f5:08:8d:4b:a0:73:5b:9a:0d:11:05:33:0a:bd:7a: 0b:88:56:d4:8e:84:49:02:f6:1e:c1:66:62:39:de:d0:4b:5d: 87:bb:b5:c7:d7:c1:ef:96:35:34:a3:59:03:a5:61:6a:84:db: 59:93:db:b6:f6:a9:75:ce:84:a7:96:9c:4f:a6:14:24:d2:58: 02:36:80:5a:1b:1c:f7:66:63:43:f5:cf:3d:b0:9d:ab:d1:e6: 4c:84:bf:16:e1:17:c1:26:74:9b:72:e1:b9:36:a6:5d:2a:ce: 1e:4f:96:fb:d3:9d:ca:0c:d2:33:7f:98:6e:97:79:8e:01:80: 24:9a:99:8e:00:5d:49:af:ba:48:49:43:a9:54:93:37:3a:8f: 99:4d:b0:e0:91:f8:9b:cc:bf:d9:6d:04:31:61:46:18:f2:fd: ef:9c:88:f1:7a:75:36:28:fb:0b:d1:c6:2a:bd:13:4f:b5:d7: d1:01:a6:5a:69:51:aa:42:9a:ee:8c:81:93:18:dd:1f:6e:b1: 3c:fe:64:12:9c:93:c3:bd:4b:2f:ce:f3:22:e6:d8:54:5f:fc: e0:00:1c:43:90:0d:fd:68:58:00:b3:1f:e9:5b:93:01:a0:9a: 23:08:a0:88:a3:77:d0:0a:a5:9a:ac:43:9d:55:11:c6:54:fe: 61:e8:1e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdxspJduzkcAfGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NzliNDA2MDctZjI1OC00MWExLWIzNTYtMzFmOTg0Y2Y0MWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqClksyzVmu4EaAeHl9IKidNh2rbOpxuut+uY RdW2mOct1Zwk9MBP5cDuIVL7jaUaXB5kfrQlxPokYjhODVMzeNB9ANFwPu6Ffktl UTdH4snRbyPvSWvmcHeRWZHSjUzSXXaQUClo1K7LP7lseHWimk4WAnVi1yFQWHkM sHMf2A7VhWxkqvy78qD0idIXwi90fRSqvP2sqiXiJf6nPJ4sMe2VnDr3MH4NeYRP XQvCnM5ZwtHxqKjiE3b5DJWfmroFUdSoACv7+5U4lutU5b+JnRDeEG4GeI5ZK1S3 QUUysKWZ/SGGNM4w3VrJxJSnq1w2Wkb38gszIbHktF1D8CUmmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1M+fWIuXh6wZOirSD3/8QOOx+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDI3Njg5MGEtNDFjYS0z MmM3LWEwZGYtNmQxNjlkNmY0MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP0IvUIjUugc1uaDREFMwq9eguIVtSOhEkC9h7BZmI53tBLXYe7tcfX we+WNTSjWQOlYWqE21mT27b2qXXOhKeWnE+mFCTSWAI2gFobHPdmY0P1zz2wnavR 5kyEvxbhF8EmdJty4bk2pl0qzh5PlvvTncoM0jN/mG6XeY4BgCSamY4AXUmvukhJ Q6lUkzc6j5lNsOCR+JvMv9ltBDFhRhjy/e+ciPF6dTYo+wvRxiq9E0+119EBplpp UapCmu6MgZMY3R9usTz+ZBKck8O9Sy/O8yLm2FRf/OAAHEOQDf1oWACzH+lbkwGg miMIoIijd9AKpZqsQ51VEcZU/mHoHvM= -----END CERTIFICATE-----Generated at Sun Oct 18 13:48:27 2026 by rpki-client