$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa File: d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa (raw, json) Hash identifier: Uxxhc6nDZ87b1M3o1X3Wf139ui+vUnuymjJ4aWVaUvg= Subject key identifier: 21:2A:98:3B:F3:86:99:81:C6:53:13:45:BC:C9:3E:D0:CF:1D:88:EF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E4BB1E60569CA275AE1C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 68.114.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:4b:b1:e6:05:69:ca:27:5a:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=bbd6dbc0-65e0-4cc9-b0f1-6e664545068d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:4a:fc:58:88:f2:7c:4a:ea:51:e6:db:f1: 02:38:0d:1c:5c:62:2e:9f:ff:bb:c3:68:a6:b2:ee: 67:68:5b:35:4a:b1:41:67:4c:33:c5:12:0a:4c:13: 00:16:4e:77:af:b8:48:ac:90:b8:0d:8c:29:5c:32: 08:bf:5d:dd:ba:7f:2d:bb:83:c0:3d:84:15:7d:5d: 83:48:b3:b9:38:ad:9c:5f:00:5a:13:aa:8a:b6:f1: 7b:2d:98:b0:e5:a2:77:3c:37:35:75:b5:91:21:90: f3:19:ea:76:73:f1:cc:8c:56:af:ef:99:b8:53:ce: 6d:ee:2b:5b:f7:c4:6d:12:d3:04:5c:e0:49:a1:aa: 5c:57:89:42:e4:66:de:27:df:6f:03:dc:fa:8d:4f: 79:98:ae:6c:81:8c:67:33:be:9e:2e:f2:5f:02:00: 17:2b:6e:66:29:ba:d5:e2:e0:ba:b9:db:57:b6:ed: a0:59:e4:19:3c:94:7f:e8:bc:13:ed:46:44:b1:af: 07:f5:e5:8e:53:77:36:61:88:cf:18:77:6e:c8:da: 25:5c:c3:b0:b1:b0:93:16:9c:16:52:16:76:d3:78: bf:cd:be:ad:df:22:64:74:5f:81:b6:33:55:db:0d: 23:a8:f5:04:87:86:dd:58:33:83:32:57:d6:5c:0b: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:98:3B:F3:86:99:81:C6:53:13:45:BC:C9:3E:D0:CF:1D:88:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3b:05:07:13:19:fd:7a:ea:68:1e:ec:04:aa:db:d7:be:8e: 20:9f:8c:be:ba:1f:46:0e:13:44:24:1b:07:dd:08:3a:ff:08: 67:35:be:a7:41:89:b4:a0:f5:95:49:22:2d:72:57:a3:41:b0: 79:0c:13:8e:87:a4:d0:d5:6d:48:c2:ca:0c:09:21:04:d1:f6: 7f:7e:64:21:93:ab:c5:df:d3:30:ba:bb:fc:a2:4f:95:8c:c6: 32:6a:7f:f8:71:a4:98:04:d8:be:03:9f:70:32:09:c3:84:79: 85:ae:49:b1:17:01:dc:81:fa:4e:36:2b:ab:05:0f:85:97:0f: c3:20:8e:73:a9:cb:fd:35:02:41:27:6f:75:b6:a0:40:e2:65: 5e:1b:66:92:12:7c:81:e9:b1:d3:06:4a:d6:3d:6d:15:a2:3e: fb:6e:09:46:c9:85:20:f4:80:f1:76:ec:54:3c:32:fa:74:5f: 14:d5:7d:e3:05:cf:1f:57:6e:a3:a3:f3:43:f0:19:50:4c:2e: 4f:3c:37:ba:09:2c:95:e4:0d:47:e4:cd:84:0e:2a:15:fd:b2: 15:57:e2:6a:d4:6a:75:e5:ca:9d:01:cf:c4:69:5d:d8:5d:87: 3d:c7:be:95:d9:b1:47:a4:87:f5:7a:6b:57:f1:7d:40:06:b4: 50:2d:d9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXkux5gVpyida4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YmJkNmRiYzAtNjVlMC00Y2M5LWIwZjEtNmU2NjQ1NDUwNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu85K/FiI8nxK6lHm2/ECOA0cXGIun/+7w2im su5naFs1SrFBZ0wzxRIKTBMAFk53r7hIrJC4DYwpXDIIv13dun8tu4PAPYQVfV2D SLO5OK2cXwBaE6qKtvF7LZiw5aJ3PDc1dbWRIZDzGep2c/HMjFav75m4U85t7itb 98RtEtMEXOBJoapcV4lC5GbeJ99vA9z6jU95mK5sgYxnM76eLvJfAgAXK25mKbrV 4uC6udtXtu2gWeQZPJR/6LwT7UZEsa8H9eWOU3c2YYjPGHduyNolXMOwsbCTFpwW UhZ203i/zb6t3yJkdF+BtjNV2w0jqPUEh4bdWDODMlfWXAtXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEqmDvzhpmBxlMTRbzJPtDPHYjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDk1OGQ5MWUtZGFmZS0z ZmI4LTgwZDItN2EwZjZiYzYyMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARHIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo7BQcTGf166mge7ASq29e+jiCfjL66H0YOE0QkGwfdCDr/CGc1vqdB ibSg9ZVJIi1yV6NBsHkME46HpNDVbUjCygwJIQTR9n9+ZCGTq8Xf0zC6u/yiT5WM xjJqf/hxpJgE2L4Dn3AyCcOEeYWuSbEXAdyB+k42K6sFD4WXD8MgjnOpy/01AkEn b3W2oEDiZV4bZpISfIHpsdMGStY9bRWiPvtuCUbJhSD0gPF27FQ8Mvp0XxTVfeMF zx9XbqOj80PwGVBMLk88N7oJLJXkDUfkzYQOKhX9shVX4mrUanXlyp0Bz8RpXdhd hz3HvpXZsUekh/V6a1fxfUAGtFAt2XU= -----END CERTIFICATE-----Generated at Sat Oct 17 22:09:40 2026 by rpki-client