$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df4735f8-980a-343b-8e6a-d8c2b68baa11.roa File: df4735f8-980a-343b-8e6a-d8c2b68baa11.roa (raw, json) Hash identifier: NUrSBoZNpYnt4TlSSUj+ePokILwJoUDqT1RXY4pbKLg= Subject key identifier: 08:BC:5D:41:03:8E:C0:80:D0:0B:C1:23:80:3C:B2:5F:CE:54:02:C9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD2CC41452154E8F55700 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df4735f8-980a-343b-8e6a-d8c2b68baa11.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 24.241.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d2:cc:41:45:21:54:e8:f5:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=02b19064-6517-4012-ac14-20446f660ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:94:66:00:cd:57:ff:c5:dd:3c:09:4d:ae: 83:17:f0:0a:67:29:8e:e0:87:b1:22:dc:45:14:d8: 7d:e2:3d:38:63:06:00:f8:ea:05:ff:0c:b2:ec:e7: 6e:2a:60:56:8d:68:c7:f5:f0:10:ee:67:f0:a3:11: c6:75:9c:1b:9b:9f:74:bf:6d:fb:10:56:22:1d:89: ff:8f:62:44:98:ae:be:fe:0b:70:7b:07:4a:a7:3a: 06:86:4f:c5:07:57:f6:b0:33:2e:b4:40:96:3d:14: 02:1e:ed:d7:d4:ae:52:b2:ff:11:af:9e:05:2e:a0: 81:7f:27:7c:fe:99:3b:66:8f:d1:1d:9d:98:6d:29: 4c:2b:2d:dc:36:e4:40:90:dc:96:31:a0:c7:0e:f7: b2:ee:27:c2:e0:2a:a2:84:86:30:39:e7:86:98:5d: 6d:36:6b:e4:55:0c:e2:77:8c:1f:c4:d8:c9:4b:ad: 88:42:f6:08:23:9c:54:e0:5e:ab:2c:80:53:40:7a: 57:01:54:6c:de:e9:f4:b1:55:d6:54:ac:22:44:d8: 46:4c:15:59:bd:58:a3:43:4d:65:2a:36:29:c9:c6: 29:c5:41:20:0a:b3:58:f2:66:87:ee:2b:ea:c7:be: 4b:c2:39:8f:87:96:98:ca:99:b4:67:6f:d7:bc:db: 0c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:5D:41:03:8E:C0:80:D0:0B:C1:23:80:3C:B2:5F:CE:54:02:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df4735f8-980a-343b-8e6a-d8c2b68baa11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.241.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b5:e2:29:8a:47:be:31:5f:df:f6:5f:a1:23:87:64:ed:62: ce:6e:5e:d0:34:44:ed:58:9d:f2:5e:93:18:38:a4:ca:2f:bf: a0:b9:6a:f7:2d:bd:d4:9d:05:bb:cc:63:e6:11:a2:8e:cd:64: 34:08:8a:1d:45:50:30:06:d2:98:11:23:f8:2e:d8:eb:e4:31: e1:41:5c:4a:04:4d:d7:5c:9c:01:0d:85:a2:e5:3e:b4:de:35: 8f:14:e2:f4:8e:b5:fe:eb:4a:96:1e:4a:d1:3e:4a:19:23:d9: 50:2c:f4:77:a2:ac:a9:ed:73:84:1d:14:8e:94:65:87:95:38: 14:3a:dd:fd:79:21:8f:9f:a3:fc:1a:4b:8b:4b:04:92:d3:4b: 01:f9:60:48:b7:d9:5f:37:2e:58:57:3d:0d:83:1d:5b:f2:4b: a4:5f:f4:ef:d5:a7:0c:4d:1b:fc:22:d6:5c:aa:65:ce:2a:c1: 7f:c4:6b:d5:45:72:b0:22:fd:b5:d9:40:03:d2:4c:77:95:65: 84:f7:fe:d9:44:5b:d1:14:cd:c3:05:80:8a:8a:b1:3f:f9:b1: b8:88:96:1a:e5:db:57:cb:98:b9:d9:7f:46:e4:7e:ca:2e:c7: c2:8f:bf:67:73:b5:00:a5:32:86:c9:e2:00:16:de:80:a2:15: 93:c5:f7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdLMQUUhVOj1VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MDJiMTkwNjQtNjUxNy00MDEyLWFjMTQtMjA0NDZmNjYwYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlICUZgDNV//F3TwJTa6DF/AKZymO4IexItxF FNh94j04YwYA+OoF/wyy7OduKmBWjWjH9fAQ7mfwoxHGdZwbm590v237EFYiHYn/ j2JEmK6+/gtwewdKpzoGhk/FB1f2sDMutECWPRQCHu3X1K5Ssv8Rr54FLqCBfyd8 /pk7Zo/RHZ2YbSlMKy3cNuRAkNyWMaDHDvey7ifC4CqihIYwOeeGmF1tNmvkVQzi d4wfxNjJS62IQvYII5xU4F6rLIBTQHpXAVRs3un0sVXWVKwiRNhGTBVZvVijQ01l KjYpycYpxUEgCrNY8maH7ivqx75LwjmPh5aYypm0Z2/XvNsMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi8XUEDjsCA0AvBI4A8sl/OVALJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGY0NzM1ZjgtOTgwYS0z NDNiLThlNmEtZDhjMmI2OGJhYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO14imKR74xX9/2X6Ejh2TtYs5uXtA0RO1YnfJekxg4pMovv6C5avct vdSdBbvMY+YRoo7NZDQIih1FUDAG0pgRI/gu2OvkMeFBXEoETddcnAENhaLlPrTe NY8U4vSOtf7rSpYeStE+Shkj2VAs9HeirKntc4QdFI6UZYeVOBQ63f15IY+fo/wa S4tLBJLTSwH5YEi32V83LlhXPQ2DHVvyS6Rf9O/VpwxNG/wi1lyqZc4qwX/Ea9VF crAi/bXZQAPSTHeVZYT3/tlEW9EUzcMFgIqKsT/5sbiIlhrl21fLmLnZf0bkfsou x8KPv2dztQClMobJ4gAW3oCiFZPF94Y= -----END CERTIFICATE-----Generated at Fri Oct 23 09:40:02 2026 by rpki-client