$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5f4c9f58-4cce-3c54-bf1d-a457a7e2b723.roa File: 5f4c9f58-4cce-3c54-bf1d-a457a7e2b723.roa (raw, json) Hash identifier: MbB896Xr3SbMB0iL/k+OyGJpDIlppLFPdAJC2QrA4FI= Subject key identifier: A3:2D:3F:FD:BB:5C:73:F2:5E:C8:A0:EF:3C:C1:F2:6E:AE:77:84:A5 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F5BD60B15D6FE6AE9889F0700 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5f4c9f58-4cce-3c54-bf1d-a457a7e2b723.roa Signing time: Thu 01 Oct 2026 15:05:17 +0000 ROA not before: Thu 01 Oct 2026 15:05:17 +0000 ROA not after: Wed 30 Dec 2026 16:05:17 +0000 asID: 22974 IP address blocks: 97.85.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:d6:0b:15:d6:fe:6a:e9:88:9f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 1 15:05:17 2026 GMT Not After : Dec 30 16:05:17 2026 GMT Subject: CN=b3f05f7d-6ef8-44f1-aca3-92398ae52653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:d3:4c:28:9d:a3:ed:c6:c4:ab:77:1e:6a: aa:01:45:f8:86:ea:48:c6:86:29:06:43:e9:a9:27: af:85:c1:cb:b5:7a:64:bc:3b:84:4a:04:2b:53:bf: f4:8f:06:24:7e:ca:96:f6:e5:e3:aa:29:ce:f8:df: 0d:16:1e:3b:ae:14:26:db:af:4f:af:82:99:05:7f: 66:27:99:d3:41:ae:da:03:c5:11:3b:b5:58:3c:de: 53:49:88:ac:d9:71:3a:69:37:c8:46:90:1b:f1:c0: 33:c8:ef:9c:0c:e2:4f:c3:26:9e:8c:c0:82:49:0e: 8e:7f:17:62:8e:52:cc:3e:ac:3e:af:2f:b1:3a:c8: 74:7e:ee:4a:57:d3:88:31:92:f4:96:e2:40:39:b3: 5f:19:b2:c6:5d:e5:89:d4:b1:4d:f6:1b:a4:d9:6a: 76:54:81:fc:3a:15:87:6a:08:80:78:68:58:dc:19: 54:00:0e:74:78:be:ae:1b:53:c6:38:83:7a:6b:c8: 7d:bb:2c:ab:6e:14:91:7e:67:18:33:d6:5b:b4:bb: cc:a0:e4:66:78:24:39:50:7e:db:ea:51:8a:6a:82: f5:8f:97:16:c8:7b:d8:15:ec:eb:ec:7f:c7:a8:2c: 47:97:6d:4b:de:9c:c5:d4:23:24:b0:f7:85:a8:d9: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2D:3F:FD:BB:5C:73:F2:5E:C8:A0:EF:3C:C1:F2:6E:AE:77:84:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5f4c9f58-4cce-3c54-bf1d-a457a7e2b723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.85.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:94:a9:18:3f:7f:27:35:07:4c:6d:63:5e:e9:f7:6d:d0:e1: c2:59:81:bd:49:bf:b3:d8:e0:52:94:63:ea:32:49:0d:60:bf: 2d:69:d4:a2:de:dd:28:0a:d0:ca:48:b5:a1:aa:d4:e8:52:a9: cd:03:d3:66:7f:2b:2f:c1:90:6c:57:e7:a0:5e:76:3f:8f:76: 10:58:a9:e5:4b:3b:95:42:a0:51:70:dc:0c:ff:ea:a4:fe:86: ac:6d:cc:f4:16:33:98:67:5b:89:af:1b:81:79:b5:1d:37:60: a2:d2:c8:b9:51:10:d2:a6:8a:d0:7b:0a:0f:01:2f:58:e4:d7: 9a:83:52:fb:99:9e:c3:48:a4:53:36:9b:fb:0a:cc:e3:9f:3a: 14:80:45:d2:84:b8:12:d0:da:0b:db:56:8a:21:72:a0:20:b8: 7e:32:ea:93:da:f7:6e:7e:53:51:b8:2c:d9:3b:89:69:42:f3: 61:54:3f:be:ac:87:b1:d7:77:ff:d3:66:67:52:4a:e5:ee:e4: 86:45:f8:3e:ec:5c:22:46:cf:24:4c:af:4c:21:ff:db:7a:60: 19:79:b7:f3:e0:d8:1a:11:7b:93:81:d7:eb:b8:40:23:d3:50: bb:1a:fe:6f:be:69:5e:3a:9e:d6:67:7e:20:9d:91:1d:52:ad: e0:39:cb:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9b1gsV1v5q6YifBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwMTE1MDUxN1oXDTI2MTIzMDE2MDUxN1owLzEtMCsGA1UEAxMk YjNmMDVmN2QtNmVmOC00NGYxLWFjYTMtOTIzOThhZTUyNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20/TTCido+3GxKt3HmqqAUX4hupIxoYpBkPp qSevhcHLtXpkvDuESgQrU7/0jwYkfsqW9uXjqinO+N8NFh47rhQm269Pr4KZBX9m J5nTQa7aA8URO7VYPN5TSYis2XE6aTfIRpAb8cAzyO+cDOJPwyaejMCCSQ6Ofxdi jlLMPqw+ry+xOsh0fu5KV9OIMZL0luJAObNfGbLGXeWJ1LFN9huk2Wp2VIH8OhWH agiAeGhY3BlUAA50eL6uG1PGOIN6a8h9uyyrbhSRfmcYM9ZbtLvMoORmeCQ5UH7b 6lGKaoL1j5cWyHvYFezr7H/HqCxHl21L3pzF1CMksPeFqNkcPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMtP/27XHPyXsig7zzB8m6ud4SlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWY0YzlmNTgtNGNjZS0z YzU0LWJmMWQtYTQ1N2E3ZTJiNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyUqRg/fyc1B0xtY17p923Q4cJZgb1Jv7PY4FKUY+oySQ1gvy1p1KLe 3SgK0MpItaGq1OhSqc0D02Z/Ky/BkGxX56Bedj+PdhBYqeVLO5VCoFFw3Az/6qT+ hqxtzPQWM5hnW4mvG4F5tR03YKLSyLlRENKmitB7Cg8BL1jk15qDUvuZnsNIpFM2 m/sKzOOfOhSARdKEuBLQ2gvbVoohcqAguH4y6pPa925+U1G4LNk7iWlC82FUP76s h7HXd//TZmdSSuXu5IZF+D7sXCJGzyRMr0wh/9t6YBl5t/Pg2BoRe5OB1+u4QCPT ULsa/m++aV46ntZnfiCdkR1SreA5y18= -----END CERTIFICATE-----Generated at Mon Oct 19 22:45:58 2026 by rpki-client