$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa File: cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa (raw, json) Hash identifier: N1mjlkRziHmMYlQrs5tkJkb34RyHKj0y7pvCoaYuPqs= Subject key identifier: EF:11:BC:E8:8A:4D:70:AF:00:1D:2D:77:E0:6F:63:41:C6:CD:D5:90 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EC37216E1108DB21901B6EE80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 20115 IP address blocks: 24.205.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:16:e1:10:8d:b2:19:01:b6:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=030d6877-fe48-4a99-8478-10e713bd65c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:70:74:ba:91:89:88:a5:e9:c0:fe:84:21: 7c:cf:06:46:19:ec:12:79:30:85:a1:9a:04:2c:bf: cf:9e:45:28:01:d6:8e:d2:6b:42:67:32:96:bc:7a: 30:c3:eb:cb:85:41:45:60:bc:9b:bc:c2:c7:37:b4: cf:bb:f5:69:e8:e2:77:ab:25:ba:ad:39:62:09:bd: d8:9e:87:ce:3b:81:e5:0a:61:cd:ad:9d:bd:c2:32: c4:0c:6f:5a:a9:34:f5:99:ba:0a:d5:28:70:5a:ae: 67:b4:b0:d5:c2:42:f9:bf:e7:45:f2:5a:90:c9:3b: 86:bb:f7:d4:44:9e:8b:f2:c1:0c:86:b3:e5:60:fb: ce:fe:08:fb:1a:31:01:03:25:cd:a8:2d:05:d3:7f: 98:9f:a5:b9:0c:60:0f:42:d5:0f:82:b8:e1:c7:5b: 24:ae:9b:9d:33:50:5b:ea:b9:15:05:6d:0b:c4:a6: 74:6d:ef:4b:5f:ca:42:29:77:83:cb:51:44:d8:21: c2:8f:8e:6e:11:be:a9:39:17:9b:d2:e4:40:4d:06: 3d:95:d6:97:02:98:29:a0:fc:fe:28:9f:81:b5:21: 4e:b9:03:94:38:e3:2a:06:13:da:f3:1b:4e:88:27: d5:b3:42:4b:70:da:d9:23:ad:89:db:64:e3:d7:83: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:11:BC:E8:8A:4D:70:AF:00:1D:2D:77:E0:6F:63:41:C6:CD:D5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.205.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:07:fe:a0:10:84:e4:02:bf:40:5f:9b:84:0e:46:4f:bc:c0: 21:a9:9a:05:28:0f:fe:3b:ad:80:23:80:78:b9:8d:ba:72:54: 6a:c0:d8:6d:f4:ea:97:f2:a1:92:70:06:ec:34:1d:a2:32:23: d4:4a:0f:11:35:85:a8:31:4d:0f:47:4d:a6:bf:67:d6:c1:14: 06:b1:55:ac:21:22:ac:99:85:8a:26:61:ee:da:66:66:b1:b9: 17:8f:98:40:47:8b:bb:1c:1c:24:f8:29:fa:d6:9c:49:fa:a9: 40:85:bb:b2:a6:70:8a:9e:17:9f:bc:f0:09:90:ff:1e:f2:1e: 57:c4:59:e1:5b:89:a1:2d:84:6e:d6:4c:40:dd:d7:b5:53:f0: eb:c6:71:f2:6a:9f:80:13:1b:ca:73:46:61:48:91:c3:26:ce: db:d3:42:07:7b:09:27:e2:c2:c7:d1:ba:74:f0:b6:3e:5e:40: 04:84:5c:0c:a9:30:36:33:0d:98:97:a7:fe:b9:ce:82:8e:0e: bf:ee:a9:98:42:5f:fa:51:8a:5c:3b:a1:ef:59:11:6f:c9:4c: 24:fb:5c:31:7b:cd:1d:08:8b:c1:2b:e0:4e:23:98:52:b4:b0: 1b:8b:be:c2:8b:c0:b7:e1:1b:57:2c:4e:39:7f:a8:2c:68:5c: f1:d0:9c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DchbhEI2yGQG27oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDMwZDY4NzctZmU0OC00YTk5LTg0NzgtMTBlNzEzYmQ2NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmJwdLqRiYil6cD+hCF8zwZGGewSeTCFoZoE LL/PnkUoAdaO0mtCZzKWvHoww+vLhUFFYLybvMLHN7TPu/Vp6OJ3qyW6rTliCb3Y nofOO4HlCmHNrZ29wjLEDG9aqTT1mboK1ShwWq5ntLDVwkL5v+dF8lqQyTuGu/fU RJ6L8sEMhrPlYPvO/gj7GjEBAyXNqC0F03+Yn6W5DGAPQtUPgrjhx1skrpudM1Bb 6rkVBW0LxKZ0be9LX8pCKXeDy1FE2CHCj45uEb6pOReb0uRATQY9ldaXApgpoPz+ KJ+BtSFOuQOUOOMqBhPa8xtOiCfVs0JLcNrZI62J22Tj14PqiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8RvOiKTXCvAB0td+BvY0HGzdWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2Y2N2QyNDAtN2ExMi0z YTI5LWJhOWUtMDljOThjMTRiNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGM3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsH/qAQhOQCv0Bfm4QORk+8wCGpmgUoD/47rYAjgHi5jbpyVGrA2G30 6pfyoZJwBuw0HaIyI9RKDxE1hagxTQ9HTaa/Z9bBFAaxVawhIqyZhYomYe7aZmax uRePmEBHi7scHCT4KfrWnEn6qUCFu7KmcIqeF5+88AmQ/x7yHlfEWeFbiaEthG7W TEDd17VT8OvGcfJqn4ATG8pzRmFIkcMmztvTQgd7CSfiwsfRunTwtj5eQASEXAyp MDYzDZiXp/65zoKODr/uqZhCX/pRilw7oe9ZEW/JTCT7XDF7zR0Ii8Er4E4jmFK0 sBuLvsKLwLfhG1csTjl/qCxoXPHQnGw= -----END CERTIFICATE-----Generated at Sat Sep 5 01:41:42 2026 by rpki-client