$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/668e7ce4-e750-35be-b10b-32c365c6f99a.roa File: 668e7ce4-e750-35be-b10b-32c365c6f99a.roa (raw, json) Hash identifier: dh7bGhdkOzuVvcVEVGNbRjMeiP5mKSqFViKJTfkdfbU= Subject key identifier: 9C:9B:0D:F5:39:E2:DA:DD:61:48:79:53:06:F2:53:C6:67:DC:B6:BB Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EC37296F2C8EFD4BF13210DA0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/668e7ce4-e750-35be-b10b-32c365c6f99a.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 20115 IP address blocks: 71.14.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:96:f2:c8:ef:d4:bf:13:21:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=5e285c4b-39fb-4897-a3a5-a8570ab6e4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0d:f4:40:9b:44:04:b5:89:70:5d:fe:28:3e: 3f:b0:63:4d:52:f2:5f:86:ae:e3:59:69:19:6e:35: de:8f:d9:82:0f:2a:48:f4:80:fe:30:ab:59:16:1b: 0f:fb:a2:93:f6:05:76:b9:df:a9:fd:9b:d8:18:4c: f4:cb:60:1c:05:42:08:c5:13:90:cb:0e:72:c7:5d: 15:bc:18:aa:fd:12:d3:f3:79:6a:4b:10:d1:1f:55: f7:a6:60:c8:29:9f:d9:da:48:b7:8c:0d:57:a8:01: de:70:12:9d:e8:cd:ac:cc:d5:ee:2c:20:24:85:de: ca:4a:66:62:31:1c:51:9d:60:ff:b1:e2:f0:2c:09: aa:4c:f9:e4:95:72:57:96:2f:4a:45:b3:9f:cb:a2: 90:dd:93:79:c9:44:2d:cc:93:af:14:63:e0:12:78: d5:72:7f:c1:d0:ee:7d:bc:7c:a6:ab:e1:9d:85:f4: 1e:b6:a4:7b:0a:4b:b1:cb:b6:5d:60:f7:52:eb:9e: 1e:2e:a1:e1:a4:c5:ba:bb:32:13:bd:b3:79:c8:35: e3:78:86:c9:ba:33:01:4f:55:93:49:89:c3:32:20: 70:c9:1a:0c:f8:ce:28:36:4b:6c:05:f1:e2:31:b8: 0f:ae:57:ba:5c:53:46:29:9b:cf:ba:66:88:da:c4: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9B:0D:F5:39:E2:DA:DD:61:48:79:53:06:F2:53:C6:67:DC:B6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/668e7ce4-e750-35be-b10b-32c365c6f99a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.14.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:26:4c:fc:e6:91:c2:36:7b:d8:1b:de:f7:3e:7e:ba:bc:3e: 4c:2e:25:a2:a4:d0:9f:46:2c:7c:8d:76:e3:74:dd:be:8e:22: a5:52:a9:59:bf:da:5f:30:7f:da:01:49:49:4c:b4:05:da:26: 07:ef:78:8d:e9:5f:1c:77:7e:40:b1:3b:e0:e7:c3:16:b9:77: 6e:0d:bc:5a:2c:52:88:43:24:a1:ca:12:d4:43:4a:07:96:a2: 54:9d:43:c5:32:dd:d6:90:aa:dc:ef:9a:d8:9c:0d:f0:ce:fc: 8f:9e:6e:00:65:46:e9:f2:2c:ff:0b:1f:32:8b:18:93:bf:db: 20:b2:96:0f:58:2c:ae:0f:db:13:2e:6e:a3:a1:c6:d4:66:10: 81:5e:bd:7d:49:7a:86:45:8a:ef:d8:63:fb:39:98:92:40:0c: 09:fd:20:15:e0:30:8b:ed:e7:e1:44:63:c3:92:b5:96:6b:00: 4b:b0:e0:14:e0:e9:8c:1d:88:b2:7a:c2:69:36:63:d8:1a:85: b8:2f:13:4a:5f:a0:c3:aa:9a:a3:18:10:ab:16:39:e8:54:eb: b4:96:6f:5a:4c:9e:33:ad:3c:ca:89:f5:93:d4:85:cc:fc:7d: ec:06:08:d5:be:1b:af:b6:72:5b:22:ff:ae:8f:0a:51:99:43: 9d:37:3d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcpbyyO/UvxMhDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NWUyODVjNGItMzlmYi00ODk3LWEzYTUtYTg1NzBhYjZlNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA30QJtEBLWJcF3+KD4/sGNNUvJfhq7jWWkZ bjXej9mCDypI9ID+MKtZFhsP+6KT9gV2ud+p/ZvYGEz0y2AcBUIIxROQyw5yx10V vBiq/RLT83lqSxDRH1X3pmDIKZ/Z2ki3jA1XqAHecBKd6M2szNXuLCAkhd7KSmZi MRxRnWD/seLwLAmqTPnklXJXli9KRbOfy6KQ3ZN5yUQtzJOvFGPgEnjVcn/B0O59 vHymq+GdhfQetqR7Ckuxy7ZdYPdS654eLqHhpMW6uzITvbN5yDXjeIbJujMBT1WT SYnDMiBwyRoM+M4oNktsBfHiMbgPrle6XFNGKZvPumaI2sQN4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJybDfU54trdYUh5UwbyU8Zn3La7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjY4ZTdjZTQtZTc1MC0z NWJlLWIxMGItMzJjMzY1YzZmOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERw6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJomTPzmkcI2e9gb3vc+frq8PkwuJaKk0J9GLHyNduN03b6OIqVSqVm/ 2l8wf9oBSUlMtAXaJgfveI3pXxx3fkCxO+Dnwxa5d24NvFosUohDJKHKEtRDSgeW olSdQ8Uy3daQqtzvmticDfDO/I+ebgBlRunyLP8LHzKLGJO/2yCylg9YLK4P2xMu bqOhxtRmEIFevX1JeoZFiu/YY/s5mJJADAn9IBXgMIvt5+FEY8OStZZrAEuw4BTg 6YwdiLJ6wmk2Y9gahbgvE0pfoMOqmqMYEKsWOehU67SWb1pMnjOtPMqJ9ZPUhcz8 fewGCNW+G6+2clsi/66PClGZQ503PeM= -----END CERTIFICATE-----Generated at Sat Sep 5 00:58:11 2026 by rpki-client