$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa File: 96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa (raw, json) Hash identifier: 3DzP5Qdk0B6b5zgnBqA2PIPlnMRPAn7ho+Pc8J2o6h4= Subject key identifier: CE:11:2D:E7:A5:FD:8B:B4:2F:0F:CD:A3:0F:70:DA:99:0A:06:45:F1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD3CEDF0A8DFBA4C3F400 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 66.188.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d3:ce:df:0a:8d:fb:a4:c3:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=837009c8-16e5-4b30-a965-0f1edb314f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:59:0e:4b:fd:c4:4b:87:0c:a1:f2:6c:e1: 9c:07:bc:98:6a:bd:bb:3f:32:1b:23:fb:c9:ed:bf: a8:f5:5f:02:b2:5c:28:c9:dc:9f:c4:61:fa:56:c5: 66:96:24:d0:17:b5:1e:1e:83:73:0f:07:6a:45:6f: 5e:68:fa:22:0d:be:69:84:2b:e9:dd:8f:15:3d:af: a2:14:39:22:c0:be:f8:bf:b2:3d:1f:83:da:b8:6d: 9e:04:43:4f:9f:5f:51:5c:74:33:0b:2e:d1:ae:21: dd:77:9e:2a:6e:f2:68:06:44:27:5c:1c:67:1e:90: e3:e5:fc:b8:76:60:11:48:86:60:4e:89:74:6e:bb: 47:61:5f:23:07:b0:f3:c2:3e:e0:1e:44:b4:cc:8a: 5f:bb:fd:17:27:72:ad:7e:9e:7c:9a:d7:57:5f:78: ad:9e:04:34:34:ea:a9:0b:14:57:d4:ec:b6:a6:84: 26:f7:66:88:39:85:79:b8:e1:fa:9c:15:0f:83:11: 76:35:e9:e4:e0:65:f4:a9:03:53:9c:9c:08:54:07: 79:bb:70:0d:3c:76:fb:3a:55:be:54:60:f1:bb:43: 8f:c0:58:5d:46:38:76:9d:56:84:c6:35:9b:a1:72: fb:1f:ee:f7:9a:bf:b7:c8:55:a0:bc:2e:a5:43:26: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:2D:E7:A5:FD:8B:B4:2F:0F:CD:A3:0F:70:DA:99:0A:06:45:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.188.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:2b:cc:f7:57:7e:29:ea:f6:f6:15:ff:04:82:7b:76:01:d4: 6e:20:c8:9e:68:3a:f8:03:06:32:d2:d5:41:98:49:7c:f0:91: d2:bb:51:2e:7d:a8:8d:29:03:05:1a:1a:f4:5d:d7:3e:a3:d0: db:3a:e8:d5:88:d9:58:6c:33:52:4c:67:bf:96:77:d3:27:75: 32:72:2f:ec:ab:6e:8d:65:b0:1e:30:50:76:a4:55:d8:54:52: 90:5f:c0:2c:92:76:45:03:ac:80:a9:bd:77:a2:28:7d:7d:17: 78:f8:cf:d7:1b:47:c2:11:4f:74:2b:9b:09:17:86:ba:f7:b3: b5:d6:fe:a3:88:28:db:47:3c:61:65:0d:b7:8d:b4:aa:e9:15: d9:92:5e:1b:d4:d8:17:a3:24:6d:6d:fd:9e:b7:1f:f7:60:86: 58:e1:8e:e5:18:8a:89:6a:36:c5:53:6d:a2:af:f3:d3:ec:5f: 4e:7d:a7:47:c2:6a:09:c4:49:cf:d0:03:a7:55:ff:25:ba:8e: 8d:e2:f1:88:ef:09:6c:50:d3:cc:f7:0f:36:a2:bf:a9:f8:1f: be:4c:ff:d1:f3:1e:53:f4:31:ac:62:be:17:1d:1f:00:a8:40: 04:65:6a:7d:3c:f3:ce:d7:09:27:06:32:db:94:8b:fd:13:73: d6:37:15:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdPO3wqN+6TD9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ODM3MDA5YzgtMTZlNS00YjMwLWE5NjUtMGYxZWRiMzE0ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BNZDkv9xEuHDKHybOGcB7yYar27PzIbI/vJ 7b+o9V8CslwoydyfxGH6VsVmliTQF7UeHoNzDwdqRW9eaPoiDb5phCvp3Y8VPa+i FDkiwL74v7I9H4PauG2eBENPn19RXHQzCy7RriHdd54qbvJoBkQnXBxnHpDj5fy4 dmARSIZgTol0brtHYV8jB7Dzwj7gHkS0zIpfu/0XJ3Ktfp58mtdXX3itngQ0NOqp CxRX1Oy2poQm92aIOYV5uOH6nBUPgxF2Nenk4GX0qQNTnJwIVAd5u3ANPHb7OlW+ VGDxu0OPwFhdRjh2nVaExjWboXL7H+73mr+3yFWgvC6lQybZpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4RLeel/Yu0Lw/Now9w2pkKBkXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTZmNzBjZWItMDRlMS0z YmYyLTkxMzUtZjQxMTllNDEzYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQryAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgrzPdXfinq9vYV/wSCe3YB1G4gyJ5oOvgDBjLS1UGYSXzwkdK7US59 qI0pAwUaGvRd1z6j0Ns66NWI2VhsM1JMZ7+Wd9MndTJyL+yrbo1lsB4wUHakVdhU UpBfwCySdkUDrICpvXeiKH19F3j4z9cbR8IRT3QrmwkXhrr3s7XW/qOIKNtHPGFl DbeNtKrpFdmSXhvU2BejJG1t/Z63H/dghljhjuUYiolqNsVTbaKv89PsX059p0fC agnESc/QA6dV/yW6jo3i8YjvCWxQ08z3Dzaiv6n4H75M/9HzHlP0MaxivhcdHwCo QARlan08887XCScGMtuUi/0Tc9Y3FYg= -----END CERTIFICATE-----Generated at Sat Oct 17 11:40:12 2026 by rpki-client