$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9595e1b-249c-3f26-8479-a55abef0e9c3.roa File: b9595e1b-249c-3f26-8479-a55abef0e9c3.roa (raw, json) Hash identifier: SRMsdQb1yoc0VpYEZN1X6V+LBbXkYkcaUQH1BWZOsbc= Subject key identifier: 4C:75:89:46:D3:4C:42:81:E6:C8:67:C1:C7:38:4B:CC:83:F3:AF:07 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD0DA9C4783B0C231D4C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9595e1b-249c-3f26-8479-a55abef0e9c3.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 68.112.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d0:da:9c:47:83:b0:c2:31:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=25a4dea7-e69b-4d54-8387-e0d4915ed5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:77:af:30:d3:12:6b:ef:d2:fc:99:dc:6a: ac:02:92:83:40:69:e2:be:2e:2a:e4:f6:50:e5:7c: 9f:2c:12:26:1b:94:19:f2:8b:08:23:5d:91:e1:bb: 3c:4d:e8:fd:ec:e9:c3:0b:ad:1f:ba:1a:52:9b:8a: f6:1a:e8:30:95:ba:a3:0d:1e:5e:6b:52:a5:b3:f2: 16:b2:45:63:de:cd:11:6c:07:73:6c:e5:ae:d4:e8: 84:08:35:d6:52:f9:e2:cf:2f:5f:ff:ab:af:a9:41: 99:53:37:11:4c:4e:36:da:c8:7e:b9:b2:89:13:0b: 45:f7:56:94:c7:c5:d1:82:df:7c:e2:22:8f:9c:ad: 2a:94:dd:68:72:d9:08:b1:80:84:65:dc:2f:8d:8f: e1:52:1f:de:f8:1a:67:cf:2e:62:6f:ce:45:b1:6b: 3f:54:1e:5f:a0:34:c0:47:f8:3d:aa:93:8a:b5:8d: 5c:3e:a7:15:62:7f:f0:a7:a5:8b:12:7d:79:5d:c8: f1:87:e4:01:1d:57:6e:37:2e:34:26:51:bf:11:58: 25:22:00:12:af:a6:e0:7c:7c:7e:51:b9:10:1b:94: 1b:77:d1:28:4d:27:d0:28:2a:12:55:cc:42:77:d8: e8:8a:9e:fd:81:db:3b:58:e6:26:e9:99:dc:f4:8b: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:89:46:D3:4C:42:81:E6:C8:67:C1:C7:38:4B:CC:83:F3:AF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9595e1b-249c-3f26-8479-a55abef0e9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.112.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:3c:ed:fb:61:e0:b5:64:f3:f7:32:25:cd:fb:36:d7:f2:90: aa:7c:ac:1f:3e:55:d0:2f:cb:60:54:61:23:cc:00:43:11:a5: 4a:30:89:53:6e:9a:ce:68:f6:a1:09:ec:38:91:20:77:82:11: 62:24:d6:fc:35:a5:d4:2e:a3:dc:d7:d9:10:c4:74:4d:cc:a0: 0e:7b:19:44:c2:16:ac:72:37:b8:25:a4:9d:10:cb:5f:06:b0: 66:46:44:c6:aa:94:33:e0:52:fe:9d:6e:e8:41:5f:25:0d:ff: 72:f2:c0:dc:7c:38:89:03:e6:ba:a2:f9:19:2a:2d:21:ca:8f: 99:a5:19:2d:69:f3:4e:f6:e9:73:21:3f:3f:a6:0b:44:6b:98: 47:94:3b:ff:ef:d1:fc:cd:5b:9b:60:8d:75:ca:43:64:c4:67: 27:96:f9:f7:be:1b:fc:46:fb:43:c1:3a:4a:28:14:fd:e0:35: 92:34:d2:bd:ef:39:61:06:a8:d1:e0:e9:78:57:f9:74:c1:19: 96:e0:74:2d:d8:57:6f:ba:a5:dc:f8:2b:0d:5c:88:d5:93:08: 93:b7:84:fb:46:4b:3e:e8:f1:ba:74:17:23:50:66:87:7b:6a: e7:b6:79:a4:d0:9f:e0:76:8d:0e:8d:5c:f9:1c:f6:00:56:72: bd:7e:30:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdDanEeDsMIx1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MjVhNGRlYTctZTY5Yi00ZDU0LTgzODctZTBkNDkxNWVkNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt13rzDTEmvv0vyZ3GqsApKDQGnivi4q5PZQ 5XyfLBImG5QZ8osII12R4bs8Tej97OnDC60fuhpSm4r2GugwlbqjDR5ea1Kls/IW skVj3s0RbAdzbOWu1OiECDXWUvnizy9f/6uvqUGZUzcRTE422sh+ubKJEwtF91aU x8XRgt984iKPnK0qlN1octkIsYCEZdwvjY/hUh/e+Bpnzy5ib85FsWs/VB5foDTA R/g9qpOKtY1cPqcVYn/wp6WLEn15Xcjxh+QBHVduNy40JlG/EVglIgASr6bgfHx+ UbkQG5Qbd9EoTSfQKCoSVcxCd9joip79gds7WOYm6Znc9Iv3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx1iUbTTEKB5shnwcc4S8yD868HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjk1OTVlMWItMjQ5Yy0z ZjI2LTg0NzktYTU1YWJlZjBlOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMg87fth4LVk8/cyJc37NtfykKp8rB8+VdAvy2BUYSPMAEMRpUowiVNu ms5o9qEJ7DiRIHeCEWIk1vw1pdQuo9zX2RDEdE3MoA57GUTCFqxyN7glpJ0Qy18G sGZGRMaqlDPgUv6dbuhBXyUN/3LywNx8OIkD5rqi+RkqLSHKj5mlGS1p80726XMh Pz+mC0RrmEeUO//v0fzNW5tgjXXKQ2TEZyeW+fe+G/xG+0PBOkooFP3gNZI00r3v OWEGqNHg6XhX+XTBGZbgdC3YV2+6pdz4Kw1ciNWTCJO3hPtGSz7o8bp0FyNQZod7 aue2eaTQn+B2jQ6NXPkc9gBWcr1+MJg= -----END CERTIFICATE-----Generated at Thu Oct 22 20:31:50 2026 by rpki-client