$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa File: eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa (raw, json) Hash identifier: xc/x88N4JMM/QPKOSfwrvljUNcNN49PmCBIUjPrqVgM= Subject key identifier: C1:E6:E1:80:2E:34:A2:2D:DE:93:06:AE:5D:1F:7B:0E:0E:10:45:EE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E4FDDDBA8CAC68F20AC80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 68.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:4f:dd:db:a8:ca:c6:8f:20:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=ff1714ae-044a-4b75-95fc-412d0955e026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:ba:7a:7d:d4:cb:7b:68:83:dd:11:32:49: d5:63:62:62:47:14:d3:3f:2c:b6:d0:a5:e5:2e:15: d7:65:45:1c:db:aa:24:a2:da:b8:63:9f:73:01:12: f9:c5:43:98:10:35:9c:93:97:5f:e2:fd:b4:45:8a: f9:76:24:46:7e:0c:91:56:48:6a:28:5c:ce:31:6f: 2a:3c:7b:70:25:b1:fb:36:ae:8a:2b:fb:54:1e:24: 20:ec:72:db:ca:89:73:40:7a:d5:3d:f5:6f:ee:68: 79:86:7c:a2:49:18:3e:2d:c9:92:c1:9f:8e:3b:e5: 74:6d:54:99:02:da:94:7e:5f:f8:aa:95:1a:e7:fc: ca:11:1e:c0:11:4d:1c:75:d7:c4:ca:a5:f1:b9:74: 09:1e:ad:ac:50:b5:3b:fb:05:e3:2e:b8:51:cb:76: ec:52:45:46:e2:c8:e8:18:6c:24:74:fa:d0:08:d7: cd:1c:8e:f1:7a:c8:01:f8:ea:18:84:0d:de:a9:43: c0:33:df:93:52:2d:d8:d4:9a:da:ac:31:4e:23:07: 6b:c0:a5:90:2d:5a:e3:b5:80:9f:c9:43:e0:a4:7c: ef:ea:0b:fb:25:81:49:d3:db:76:23:0c:79:ea:cc: b5:6b:3d:25:ee:32:66:de:92:b0:64:67:14:b5:a0: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E6:E1:80:2E:34:A2:2D:DE:93:06:AE:5D:1F:7B:0E:0E:10:45:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:96:db:9e:ea:50:ef:f3:00:a1:ef:fb:97:db:d6:a8:99:12: 53:47:7d:8d:8e:9b:a5:0e:45:ed:59:20:67:d5:b4:18:40:12: ea:54:f6:47:89:64:6c:28:9c:94:4a:f2:1d:9a:9f:55:c5:53: f9:ac:49:08:a6:85:2d:d1:8d:f1:0f:3b:00:33:66:4c:c7:1f: 02:80:59:3e:47:cf:61:f5:4d:b9:91:65:93:bf:df:d7:e4:ec: e6:08:08:d8:b8:7b:17:06:2d:a4:9d:2e:43:8a:46:1b:bb:db: b3:89:5c:65:ac:bb:89:7a:d9:49:98:e4:18:0e:ad:01:c9:a0: 03:a5:3f:8f:66:2d:c6:83:d7:81:60:e7:9c:3e:9d:1a:6e:d0: 1c:1d:9f:55:8b:7f:d5:cd:f9:28:99:c2:46:22:9f:c7:b5:44: 4e:57:b2:ca:71:e9:7a:93:f3:1c:ce:54:64:80:cb:e5:35:dc: 68:73:e0:05:56:28:71:ad:58:66:a2:be:d5:48:84:e0:39:cf: 6b:60:bd:e0:6d:03:ab:33:51:b3:2c:34:37:57:13:a7:88:77: 6c:f6:80:ac:55:60:55:9c:b8:c4:c8:dc:5d:36:20:fd:2c:dc: 3e:c1:f3:74:d0:00:f1:f2:07:16:20:3c:76:86:03:0c:93:d6: 42:41:f4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXk/d26jKxo8grIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZmYxNzE0YWUtMDQ0YS00Yjc1LTk1ZmMtNDEyZDA5NTVlMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTK6en3Uy3tog90RMknVY2JiRxTTPyy20KXl LhXXZUUc26okotq4Y59zARL5xUOYEDWck5df4v20RYr5diRGfgyRVkhqKFzOMW8q PHtwJbH7Nq6KK/tUHiQg7HLbyolzQHrVPfVv7mh5hnyiSRg+LcmSwZ+OO+V0bVSZ AtqUfl/4qpUa5/zKER7AEU0cddfEyqXxuXQJHq2sULU7+wXjLrhRy3bsUkVG4sjo GGwkdPrQCNfNHI7xesgB+OoYhA3eqUPAM9+TUi3Y1JrarDFOIwdrwKWQLVrjtYCf yUPgpHzv6gv7JYFJ09t2Iwx56sy1az0l7jJm3pKwZGcUtaB9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHm4YAuNKIt3pMGrl0few4OEEXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWNlYjcwNjYtZGE0OS0z OGVhLTkzZTctYTE2NWIwYWE3YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSW257qUO/zAKHv+5fb1qiZElNHfY2Om6UORe1ZIGfVtBhAEupU9keJ ZGwonJRK8h2an1XFU/msSQimhS3RjfEPOwAzZkzHHwKAWT5Hz2H1TbmRZZO/39fk 7OYICNi4excGLaSdLkOKRhu727OJXGWsu4l62UmY5BgOrQHJoAOlP49mLcaD14Fg 55w+nRpu0Bwdn1WLf9XN+SiZwkYin8e1RE5Xsspx6XqT8xzOVGSAy+U13Ghz4AVW KHGtWGaivtVIhOA5z2tgveBtA6szUbMsNDdXE6eId2z2gKxVYFWcuMTI3F02IP0s 3D7B83TQAPHyBxYgPHaGAwyT1kJB9MM= -----END CERTIFICATE-----Generated at Sat Oct 17 22:09:30 2026 by rpki-client