$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa File: 948a4eb4-2363-37ae-bcd7-e82c57868f30.roa (raw, json) Hash identifier: /ZFB/0MgGpXE3zQiDg3ckq/11tqiYu3dBaBHC7Fys70= Subject key identifier: AF:88:FD:A7:59:F7:44:88:65:FA:0C:4E:25:5B:92:92:F1:8A:BB:02 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DCADD03C1E4B2E08DF600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 24.159.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:ca:dd:03:c1:e4:b2:e0:8d:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=6f980535-981d-4d31-8e87-b4bdb9b7ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:07:e2:87:8f:f8:32:0f:d4:38:f3:20:92: bf:19:3b:ad:cc:43:9d:7a:c3:80:27:76:ff:5f:cc: cc:13:34:4e:65:3b:e2:20:cf:10:b8:61:99:3b:3c: 5d:26:6b:4a:c4:0f:33:6b:2f:62:64:f8:93:8e:b7: 5a:8c:0b:b3:af:8c:c0:ce:19:d7:8e:77:e5:8d:44: 57:f2:c1:84:aa:2c:74:2a:c2:a5:ea:3f:9d:95:b3: f7:5b:8d:aa:d7:19:31:a8:3a:4b:8d:66:2e:2f:52: 14:60:6e:05:9a:5c:5c:11:09:17:16:0f:5b:5f:9b: 3e:b3:b8:9e:26:7c:0d:91:7f:45:7d:06:aa:ca:67: 94:c6:87:2d:4b:46:41:2c:03:99:aa:8f:16:f2:6c: e5:be:73:4b:8a:cf:c2:ee:60:75:0b:31:01:f4:e9: 6a:22:ca:c3:48:3b:24:96:15:81:1a:2e:39:6b:cc: f2:45:96:88:0a:1b:b4:14:3a:ec:79:92:02:71:5d: f6:71:43:45:10:cd:a3:24:d0:97:e6:08:aa:3b:ed: 0d:51:bb:f5:24:08:84:04:ec:36:91:a7:2d:0c:bd: c6:17:ff:1b:7a:c7:a2:d1:02:ac:1f:9e:dd:03:32: b8:e3:29:6c:83:13:d0:b6:03:e0:3c:c7:fd:19:5b: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:FD:A7:59:F7:44:88:65:FA:0C:4E:25:5B:92:92:F1:8A:BB:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.159.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:c4:b0:8a:f4:da:2e:e1:23:78:32:62:4b:ff:01:17:09:b1: 63:54:b4:be:17:b5:3d:fd:da:63:f7:9a:0c:0e:3d:30:ce:0a: 66:c0:cd:b0:5e:26:55:4f:f1:ce:76:20:a5:97:d3:17:23:55: 9f:a0:97:2f:c9:4c:c5:d6:8f:50:84:65:89:14:78:31:eb:ff: 9b:7d:c6:4e:e3:44:11:fa:27:ae:29:02:c9:7b:14:19:5f:bb: c9:91:20:98:2d:40:04:1b:79:5a:49:05:0e:89:47:e6:56:7d: 89:23:6d:5f:cb:b0:93:b2:b4:e4:44:59:76:45:a3:16:bd:6c: 3c:26:7f:bb:b0:20:71:ef:2c:59:38:e1:aa:c9:c1:ab:ec:43: 4f:45:ae:53:37:be:50:1e:6a:e0:47:85:e8:23:33:81:78:f9: 1f:c2:dd:20:70:cb:c6:84:61:7d:ae:59:11:eb:f1:8c:f8:28: 16:00:15:29:e4:b1:d2:fb:2c:16:87:f7:51:fc:a9:b2:6e:d0: 00:95:4e:ae:78:8f:30:09:15:05:67:d9:02:d0:8a:ac:be:cc: ee:c2:15:97:d8:63:40:23:aa:f7:24:47:bb:08:51:b4:e0:b0: 46:09:5d:6a:4f:99:23:11:e7:5b:67:66:a6:ab:45:db:2b:a2: f8:aa:12:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXcrdA8HksuCN9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NmY5ODA1MzUtOTgxZC00ZDMxLThlODctYjRiZGI5YjdjY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEsH4oeP+DIP1DjzIJK/GTutzEOdesOAJ3b/ X8zMEzROZTviIM8QuGGZOzxdJmtKxA8zay9iZPiTjrdajAuzr4zAzhnXjnfljURX 8sGEqix0KsKl6j+dlbP3W42q1xkxqDpLjWYuL1IUYG4FmlxcEQkXFg9bX5s+s7ie JnwNkX9FfQaqymeUxoctS0ZBLAOZqo8W8mzlvnNLis/C7mB1CzEB9OlqIsrDSDsk lhWBGi45a8zyRZaIChu0FDrseZICcV32cUNFEM2jJNCX5giqO+0NUbv1JAiEBOw2 kactDL3GF/8besei0QKsH57dAzK44ylsgxPQtgPgPMf9GVufLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+I/adZ90SIZfoMTiVbkpLxirsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTQ4YTRlYjQtMjM2My0z N2FlLWJjZDctZTgyYzU3ODY4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJ+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/EsIr02i7hI3gyYkv/ARcJsWNUtL4XtT392mP3mgwOPTDOCmbAzbBe JlVP8c52IKWX0xcjVZ+gly/JTMXWj1CEZYkUeDHr/5t9xk7jRBH6J64pAsl7FBlf u8mRIJgtQAQbeVpJBQ6JR+ZWfYkjbV/LsJOytOREWXZFoxa9bDwmf7uwIHHvLFk4 4arJwavsQ09FrlM3vlAeauBHhegjM4F4+R/C3SBwy8aEYX2uWRHr8Yz4KBYAFSnk sdL7LBaH91H8qbJu0ACVTq54jzAJFQVn2QLQiqy+zO7CFZfYY0AjqvckR7sIUbTg sEYJXWpPmSMR51tnZqarRdsroviqEhY= -----END CERTIFICATE-----Generated at Sat Oct 17 08:53:37 2026 by rpki-client