$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa File: 5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa (raw, json) Hash identifier: kknx7WouJtWjwFEFsbjH2jmv9nQ81v6PQcfzo6og2QY= Subject key identifier: 1D:84:D8:CA:FF:DA:DC:2E:61:C6:0D:D7:2A:68:DE:50:13:B9:C5:2F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DC3C0129B21045C50F998 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 71.87.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:c3:c0:12:9b:21:04:5c:50:f9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=afb5ebd7-e8a6-48cd-b859-3f49cc9258b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:f6:af:e2:de:32:66:1a:2a:41:8b:7f:10: ea:d6:52:87:36:f0:95:c4:7c:50:df:04:1a:b6:0e: 01:ef:7e:0e:23:da:c5:36:38:04:e4:23:47:c1:44: 55:10:a4:77:c7:11:94:3e:62:03:09:ca:ed:a6:de: 63:8a:6f:9b:13:c0:f9:b9:ae:1d:5a:06:3a:c3:ca: 01:40:2d:77:56:4b:28:bc:34:97:45:f5:d6:4b:65: 80:db:0f:25:b3:fc:ba:34:7b:af:24:33:4b:2d:5e: fb:b0:8b:60:f6:c0:c1:85:9a:b0:ea:ec:1c:f6:8d: f6:3b:a9:ee:9c:c2:17:db:a6:72:88:f6:db:b1:1a: a9:d8:b2:d2:35:b8:9d:b3:69:25:f7:9a:16:86:dc: 35:ca:c3:6d:bc:47:48:7f:6e:82:0c:6e:d3:28:7e: a1:dc:e9:9e:0c:f0:2c:a6:94:d1:b4:ba:fa:4f:fa: 50:bf:8c:a5:d8:13:2c:4c:ba:a7:d6:be:68:bd:26: 82:51:66:e4:36:5b:f0:56:e8:b6:d5:8a:c9:9e:2c: ca:9c:dd:43:53:16:65:5b:6d:30:60:d3:b6:e5:68: 4a:03:b1:10:43:50:36:35:b4:48:6d:9a:91:cd:6c: cd:97:9e:41:ef:83:a6:0c:2a:53:25:3b:fc:6b:bc: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:D8:CA:FF:DA:DC:2E:61:C6:0D:D7:2A:68:DE:50:13:B9:C5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5aa2afea-60d3-3b4e-a2eb-5e93610b9a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.87.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:66:cb:b8:d2:88:52:27:79:45:ea:0d:19:41:68:4c:a0:64: ad:00:70:cd:c1:9b:68:79:00:96:d4:93:a2:a8:b8:0f:c4:e4: b0:71:d3:c3:aa:6d:a6:d4:45:0b:0d:42:c4:d0:ae:3b:df:31: 81:e3:c0:40:a2:fa:b7:00:6b:28:4e:5a:78:ea:f0:5b:89:a9: ee:65:f9:72:72:53:05:06:73:a7:fa:15:a8:43:94:0a:c8:1b: 17:e9:1d:11:dd:f8:6a:8d:8d:47:da:ee:bb:d3:4b:68:2f:11: 07:00:4b:77:40:96:8f:fe:14:e0:44:83:5a:02:c2:a2:fe:6f: a1:db:4f:6e:a1:76:7e:36:e5:74:50:47:6a:91:0a:64:9f:64: 2f:6e:dc:0e:69:b9:74:dc:37:9c:34:97:02:87:46:cf:a5:7d: 1f:e2:d8:0c:32:4b:1f:c6:e9:3e:82:cc:1a:f8:33:6e:df:48: 83:f3:b7:cb:33:f4:b9:d5:e1:f7:a0:76:9b:41:d0:cd:73:c0: 6e:06:e1:d1:81:a1:c2:a6:37:08:67:0d:e9:60:fe:e2:9e:a7: d7:a6:80:f2:ef:35:2d:8b:5a:f1:6b:bd:c9:66:64:f4:b3:07: 96:e5:9e:1a:a1:e4:a8:2e:c1:d6:13:6e:c6:ad:59:6f:b4:61: 9c:b9:24:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXcPAEpshBFxQ+ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YWZiNWViZDctZThhNi00OGNkLWI4NTktM2Y0OWNjOTI1OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfb2r+LeMmYaKkGLfxDq1lKHNvCVxHxQ3wQa tg4B734OI9rFNjgE5CNHwURVEKR3xxGUPmIDCcrtpt5jim+bE8D5ua4dWgY6w8oB QC13VksovDSXRfXWS2WA2w8ls/y6NHuvJDNLLV77sItg9sDBhZqw6uwc9o32O6nu nMIX26ZyiPbbsRqp2LLSNbids2kl95oWhtw1ysNtvEdIf26CDG7TKH6h3OmeDPAs ppTRtLr6T/pQv4yl2BMsTLqn1r5ovSaCUWbkNlvwVui21YrJnizKnN1DUxZlW20w YNO25WhKA7EQQ1A2NbRIbZqRzWzNl55B74OmDCpTJTv8a7wYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2E2Mr/2twuYcYN1ypo3lATucUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWFhMmFmZWEtNjBkMy0z YjRlLWEyZWItNWU5MzYxMGI5YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtmy7jSiFIneUXqDRlBaEygZK0AcM3Bm2h5AJbUk6KouA/E5LBx08Oq babURQsNQsTQrjvfMYHjwECi+rcAayhOWnjq8FuJqe5l+XJyUwUGc6f6FahDlArI GxfpHRHd+GqNjUfa7rvTS2gvEQcAS3dAlo/+FOBEg1oCwqL+b6HbT26hdn425XRQ R2qRCmSfZC9u3A5puXTcN5w0lwKHRs+lfR/i2AwySx/G6T6CzBr4M27fSIPzt8sz 9LnV4fegdptB0M1zwG4G4dGBocKmNwhnDelg/uKep9emgPLvNS2LWvFrvclmZPSz B5blnhqh5KguwdYTbsatWW+0YZy5JN0= -----END CERTIFICATE-----Generated at Sun Oct 18 09:17:48 2026 by rpki-client