$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9cef2fea-02bc-3ae0-96af-a09aa78c0f5e.roa File: 9cef2fea-02bc-3ae0-96af-a09aa78c0f5e.roa (raw, json) Hash identifier: ibbrLmcySX8Jc8bRO4tULX7fh3sd7RAusQ4Kq5jQdKs= Subject key identifier: 13:9F:0D:7C:DB:C9:2C:7D:5F:9B:DE:EF:79:72:61:34:1E:2F:93:0C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EC372223C5EE3E028C3706100 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9cef2fea-02bc-3ae0-96af-a09aa78c0f5e.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 20115 IP address blocks: 68.184.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:22:3c:5e:e3:e0:28:c3:70:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=c5e5a1ea-d08f-44a8-a8c5-bdefb56cbb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:6c:a3:1c:a2:d2:bb:dd:6d:65:24:fd:6b: 14:a2:10:0c:14:fc:f6:4f:3f:8d:c4:5c:dd:81:82: 1b:f7:aa:1d:2b:ca:cb:54:ff:f1:da:af:b3:e5:19: 4b:44:63:cb:15:4d:64:60:1f:93:6e:c7:ba:ad:36: 3c:4a:d6:11:46:fa:b3:49:08:17:06:53:bd:03:28: b8:9a:03:6b:9d:11:d3:7a:b6:99:a0:62:3b:32:91: 9b:c0:0a:db:d5:1b:14:de:02:28:a4:37:cd:1f:8f: a0:31:2f:79:3f:0c:b0:73:57:bd:30:78:fd:52:16: bb:57:0d:53:b9:69:90:08:95:c0:6b:38:28:3f:7d: 26:9c:b3:04:15:ef:78:9c:ba:4c:a1:2c:bf:01:21: 9b:f2:66:12:15:3f:88:fe:c7:36:5b:9b:b2:50:dd: 4a:c9:1d:2f:17:46:78:32:62:93:d2:3f:07:9e:6c: 28:a3:9d:fd:98:64:ab:12:1f:5e:99:d5:6f:73:40: e9:e5:0c:1d:e7:94:19:40:e4:92:7f:ad:9d:74:ef: c5:ff:d5:b7:89:7d:84:12:c8:5f:30:93:da:9d:0c: 17:32:32:c8:89:5c:b7:53:11:55:f6:8b:0e:2c:c9: c5:46:c8:96:f1:65:8b:4c:2e:b0:7f:d0:e0:05:0c: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9F:0D:7C:DB:C9:2C:7D:5F:9B:DE:EF:79:72:61:34:1E:2F:93:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9cef2fea-02bc-3ae0-96af-a09aa78c0f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.184.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c3:88:43:0c:77:39:dd:d3:41:6e:ea:58:6c:b2:da:40:22: 9b:46:d4:d6:df:5a:af:3d:93:1e:aa:e3:e4:5b:37:37:79:31: e2:a9:0a:5f:7e:0b:96:fd:06:30:67:3b:e9:72:a7:7a:41:75: b0:85:d7:e7:74:51:b5:67:3c:d9:96:4f:e3:15:77:78:85:eb: 87:ad:54:86:73:5e:a4:62:c0:c0:8d:dc:44:89:1c:35:84:58: 40:8e:06:de:3f:7c:5b:6c:f9:75:56:e5:33:81:1c:ca:fb:b1: 1e:4b:92:24:13:11:a0:25:32:c4:f6:05:5e:be:fc:60:18:bd: 6f:32:9d:12:29:d2:6a:98:fc:5f:e3:c8:00:93:67:47:b8:e7: 2b:e2:f5:2b:9a:09:a2:f0:82:c9:97:5d:64:b3:b5:2a:97:a4: be:6d:63:de:7c:e9:4c:87:d8:b3:b0:f7:e9:c8:dd:ea:3d:7b: af:7f:11:41:62:54:c4:ff:b3:26:1e:e6:66:74:90:83:45:39: 73:48:9e:2f:2f:87:39:74:99:59:4c:b2:d4:f3:86:b7:14:72: 55:8a:97:f4:97:97:68:c2:a4:23:a2:2d:44:b7:b6:5b:cf:16: af:c1:8d:31:10:87:38:3a:c6:06:e6:02:d9:06:f9:2e:0f:ff: 0b:0f:ca:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DciI8XuPgKMNwYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YzVlNWExZWEtZDA4Zi00NGE4LWE4YzUtYmRlZmI1NmNiYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyRsoxyi0rvdbWUk/WsUohAMFPz2Tz+NxFzd gYIb96odK8rLVP/x2q+z5RlLRGPLFU1kYB+Tbse6rTY8StYRRvqzSQgXBlO9Ayi4 mgNrnRHTeraZoGI7MpGbwArb1RsU3gIopDfNH4+gMS95Pwywc1e9MHj9Uha7Vw1T uWmQCJXAazgoP30mnLMEFe94nLpMoSy/ASGb8mYSFT+I/sc2W5uyUN1KyR0vF0Z4 MmKT0j8Hnmwoo539mGSrEh9emdVvc0Dp5Qwd55QZQOSSf62ddO/F/9W3iX2EEshf MJPanQwXMjLIiVy3UxFV9osOLMnFRsiW8WWLTC6wf9DgBQzLyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOfDXzbySx9X5ve73lyYTQeL5MMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWNlZjJmZWEtMDJiYy0z YWUwLTk2YWYtYTA5YWE3OGMwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbDiEMMdznd00Fu6lhsstpAIptG1NbfWq89kx6q4+RbNzd5MeKpCl9+ C5b9BjBnO+lyp3pBdbCF1+d0UbVnPNmWT+MVd3iF64etVIZzXqRiwMCN3ESJHDWE WECOBt4/fFts+XVW5TOBHMr7sR5LkiQTEaAlMsT2BV6+/GAYvW8ynRIp0mqY/F/j yACTZ0e45yvi9SuaCaLwgsmXXWSztSqXpL5tY9586UyH2LOw9+nI3eo9e69/EUFi VMT/syYe5mZ0kINFOXNIni8vhzl0mVlMstTzhrcUclWKl/SXl2jCpCOiLUS3tlvP Fq/BjTEQhzg6xgbmAtkG+S4P/wsPyoI= -----END CERTIFICATE-----Generated at Sat Sep 5 00:58:32 2026 by rpki-client