$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5f5772f2-5069-3991-a790-7c5ab9052e8f.roa File: 5f5772f2-5069-3991-a790-7c5ab9052e8f.roa (raw, json) Hash identifier: tbX+M2qLlFHcZ1nnWmNotc+VAzREzLLcQph8kEKXel8= Subject key identifier: 7F:B8:1B:40:43:52:A0:48:4B:23:40:97:A9:9D:95:47:1C:F5:DD:E4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EC3726D6CC3DEBFA81F33F900 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5f5772f2-5069-3991-a790-7c5ab9052e8f.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 7843 IP address blocks: 131.150.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:6d:6c:c3:de:bf:a8:1f:33:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=0da9946c-eb29-4998-af48-6618d10961f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:b1:3e:47:3e:2f:fc:d1:38:e5:91:22:f2: 0e:0c:d0:5e:5e:7b:6f:b7:21:64:fd:dd:a7:97:67: c9:07:4b:0b:0a:ab:82:bc:ed:a3:63:59:76:91:47: 3f:8c:ac:d9:eb:ea:17:d1:de:a1:e6:89:7b:12:a3: 3a:82:71:24:97:a1:71:b7:ad:83:a7:e9:4c:32:d8: c2:43:97:42:48:15:77:74:a8:54:45:bf:ad:5c:0f: 9e:bc:f5:1d:20:b4:54:a8:a4:58:e5:2e:54:1f:74: 47:a5:68:0e:d9:ce:3a:76:03:df:f7:90:c3:83:31: 17:0b:4a:66:03:ce:91:d2:c6:95:ce:78:0a:9f:9d: e0:c5:e5:78:2c:9c:62:93:1d:e5:50:1c:30:bf:94: 62:bf:04:eb:36:72:02:47:45:2c:ab:c7:f2:01:6c: 2f:f9:86:c3:2c:e3:c0:7a:97:91:30:4c:03:1d:d9: b0:b9:b4:e6:cd:57:ee:64:d1:16:4f:07:f5:75:ca: 3a:7e:4d:fa:08:3b:98:24:b1:9c:82:1f:33:ca:da: ba:a9:97:73:34:82:13:82:6b:af:89:c6:eb:fb:92: 9c:98:15:bc:8b:d6:52:81:11:eb:22:51:2c:c7:63: 1a:c9:9f:ab:ab:3e:5b:fc:c6:f1:c3:07:0a:e4:5c: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B8:1B:40:43:52:A0:48:4B:23:40:97:A9:9D:95:47:1C:F5:DD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5f5772f2-5069-3991-a790-7c5ab9052e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.150.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:44:25:db:e4:61:54:48:d2:64:61:a6:27:c8:5f:41:ec:a3: 13:13:1f:b5:9d:ec:d2:79:00:3c:8b:b0:ea:6a:36:02:b8:b0: ec:bc:e7:1f:09:d8:09:45:fc:48:c8:a0:03:b9:d1:78:db:46: 7f:fd:0c:8f:75:23:7d:cc:97:18:d6:9c:b9:ec:0a:74:e0:01: c9:31:53:da:02:be:b9:eb:dd:7a:bc:f3:27:9f:68:b4:cd:1b: 2c:ae:e2:4a:a4:45:d5:3e:83:e4:43:e5:90:6d:52:40:43:e3: da:2c:9f:74:a4:cd:84:24:b6:38:f5:82:a9:53:fa:36:c4:84: c0:0d:d9:87:43:7e:0d:e0:a0:ca:0d:12:04:1d:f7:c6:e0:6f: b0:57:d5:8f:be:5c:d6:d3:25:bb:6c:47:28:80:b7:2d:4b:39: b8:84:3d:ab:72:65:63:56:dd:d2:08:f4:1d:40:3b:b0:0a:73: f7:46:ff:f8:ab:ef:15:a3:0e:46:7b:ba:df:09:96:50:8a:f9: 9b:72:fc:06:24:cd:a3:30:78:06:31:47:dc:12:f6:f3:1c:09: 2b:56:19:ad:dd:81:63:44:e5:02:a2:60:28:96:aa:eb:e0:77: 16:1c:dd:2d:b5:77:a4:65:27:0e:34:6b:e8:1c:c6:28:9c:d0: af:db:00:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcm1sw96/qB8z+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MGRhOTk0NmMtZWIyOS00OTk4LWFmNDgtNjYxOGQxMDk2MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo6xPkc+L/zROOWRIvIODNBeXntvtyFk/d2n l2fJB0sLCquCvO2jY1l2kUc/jKzZ6+oX0d6h5ol7EqM6gnEkl6Fxt62Dp+lMMtjC Q5dCSBV3dKhURb+tXA+evPUdILRUqKRY5S5UH3RHpWgO2c46dgPf95DDgzEXC0pm A86R0saVzngKn53gxeV4LJxikx3lUBwwv5RivwTrNnICR0Usq8fyAWwv+YbDLOPA epeRMEwDHdmwubTmzVfuZNEWTwf1dco6fk36CDuYJLGcgh8zytq6qZdzNIITgmuv icbr+5KcmBW8i9ZSgRHrIlEsx2MayZ+rqz5b/MbxwwcK5FxRdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+4G0BDUqBISyNAl6mdlUcc9d3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWY1NzcyZjItNTA2OS0z OTkxLWE3OTAtN2M1YWI5MDUyZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChEJdvkYVRI0mRhpifIX0HsoxMTH7Wd7NJ5ADyLsOpqNgK4sOy85x8J 2AlF/EjIoAO50XjbRn/9DI91I33MlxjWnLnsCnTgAckxU9oCvrnr3Xq88yefaLTN Gyyu4kqkRdU+g+RD5ZBtUkBD49osn3SkzYQktjj1gqlT+jbEhMAN2YdDfg3goMoN EgQd98bgb7BX1Y++XNbTJbtsRyiAty1LObiEPatyZWNW3dII9B1AO7AKc/dG//ir 7xWjDkZ7ut8JllCK+Zty/AYkzaMweAYxR9wS9vMcCStWGa3dgWNE5QKiYCiWquvg dxYc3S21d6RlJw40a+gcxiic0K/bAPI= -----END CERTIFICATE-----Generated at Sun Sep 27 09:03:31 2026 by rpki-client