$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f050db6f-4672-330c-9967-c055a6d6f164.roa File: f050db6f-4672-330c-9967-c055a6d6f164.roa (raw, json) Hash identifier: xvZXJRWbABIR88ZnSlhyizKj+xqzcEJ6QFNXDrQ7aKQ= Subject key identifier: 2D:DD:90:5A:08:1D:0B:99:0B:BA:32:EC:D0:CC:33:E0:1D:3E:2E:BC Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EABB6F56ED40FC9A948CBE380 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f050db6f-4672-330c-9967-c055a6d6f164.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 23222 IP address blocks: 128.92.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:f5:6e:d4:0f:c9:a9:48:cb:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=7cd6f2a9-68f9-4a50-87c6-73eb25464379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:a2:11:6d:f1:f8:e0:2b:ea:74:16:cb:df: 40:58:3a:9f:a5:32:7e:87:bd:f3:b8:05:b0:3b:64: c9:57:af:c2:d8:68:c3:fd:79:27:d8:fd:0b:38:b4: 8e:12:35:5b:a7:15:37:da:47:0c:42:1f:7d:ce:ee: f3:d7:2a:58:d2:fa:2d:75:bb:81:04:83:3f:1f:75: 7c:59:02:25:6c:15:ac:42:e0:75:95:a5:b3:55:72: a6:6f:90:9c:ac:54:7a:ca:25:9b:62:ab:dc:0b:d1: ba:20:14:c3:bd:0e:5c:d3:36:b7:38:1d:bc:bb:92: 4c:3f:5d:06:99:ec:65:24:a1:82:27:3c:3c:59:6c: 64:a9:27:6c:86:be:c8:03:48:45:73:4c:e0:c9:b7: fa:86:dd:f5:f5:f9:63:8c:d1:70:5a:92:0f:a3:38: 63:96:48:7a:96:5c:a5:31:40:60:a2:b3:b1:65:82: 9e:c3:81:fe:49:ab:f8:0d:35:51:cf:45:fe:e6:21: 08:40:16:be:1c:5b:b9:1a:1e:90:eb:c3:39:2d:df: 47:68:6f:69:44:0f:4b:30:15:ec:56:51:17:67:ac: a7:e7:38:37:2d:66:71:d5:c7:31:da:b7:95:4b:d6: 99:fa:e7:4a:f2:d4:30:82:97:26:7d:7a:80:57:41: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:90:5A:08:1D:0B:99:0B:BA:32:EC:D0:CC:33:E0:1D:3E:2E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f050db6f-4672-330c-9967-c055a6d6f164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 128.92.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:64:8f:f1:0d:01:f3:55:23:fb:57:00:50:0b:71:d3:e7:35: 46:0f:11:36:03:cf:2c:9d:57:22:05:4e:a2:30:14:41:5d:40: b8:db:a1:dd:77:6e:b3:80:6b:27:23:cc:8f:60:79:63:e1:85: ba:80:28:a1:2e:09:38:9c:02:62:76:d3:f8:8e:d2:25:94:bc: 56:71:56:b7:eb:6e:47:22:88:5b:c4:4c:4f:50:28:4f:61:a4: 04:c6:71:3b:df:86:ef:c2:41:fa:89:70:bb:30:46:85:0a:ff: d1:73:ba:31:1d:9d:38:10:b1:93:c6:d8:62:d9:1b:56:40:15: be:43:ea:66:77:6b:15:c6:7c:c1:d1:1a:40:12:ae:87:eb:69: c7:86:42:4b:0e:9f:47:4b:f7:f0:b2:7a:63:4d:f4:ff:0c:da: d4:07:3f:1f:78:7b:af:87:cf:d7:88:c8:81:60:96:9d:f5:0e: 86:d9:54:f1:52:6b:8f:4c:30:28:70:9c:56:41:db:90:ac:e2: 93:50:8b:60:99:fd:6a:77:d2:88:cb:eb:3f:05:ff:08:68:84: 11:c6:fe:7c:8c:5a:20:60:b7:77:de:5d:cc:93:40:0c:ba:21: 54:1b:88:58:54:c7:84:d7:39:1a:96:cd:d0:84:8d:b2:02:d2: a8:46:67:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtvVu1A/JqUjL44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk N2NkNmYyYTktNjhmOS00YTUwLTg3YzYtNzNlYjI1NDY0Mzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaOiEW3x+OAr6nQWy99AWDqfpTJ+h73zuAWw O2TJV6/C2GjD/Xkn2P0LOLSOEjVbpxU32kcMQh99zu7z1ypY0votdbuBBIM/H3V8 WQIlbBWsQuB1laWzVXKmb5CcrFR6yiWbYqvcC9G6IBTDvQ5c0za3OB28u5JMP10G mexlJKGCJzw8WWxkqSdshr7IA0hFc0zgybf6ht319fljjNFwWpIPozhjlkh6llyl MUBgorOxZYKew4H+Sav4DTVRz0X+5iEIQBa+HFu5Gh6Q68M5Ld9HaG9pRA9LMBXs VlEXZ6yn5zg3LWZx1ccx2reVS9aZ+udK8tQwgpcmfXqAV0G61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3dkFoIHQuZC7oy7NDMM+AdPi68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjA1MGRiNmYtNDY3Mi0z MzBjLTk5NjctYzA1NWE2ZDZmMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgFyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFkj/ENAfNVI/tXAFALcdPnNUYPETYDzyydVyIFTqIwFEFdQLjbod13 brOAaycjzI9geWPhhbqAKKEuCTicAmJ20/iO0iWUvFZxVrfrbkciiFvETE9QKE9h pATGcTvfhu/CQfqJcLswRoUK/9FzujEdnTgQsZPG2GLZG1ZAFb5D6mZ3axXGfMHR GkASrofraceGQksOn0dL9/CyemNN9P8M2tQHPx94e6+Hz9eIyIFglp31DobZVPFS a49MMChwnFZB25Cs4pNQi2CZ/Wp30ojL6z8F/whohBHG/nyMWiBgt3feXcyTQAy6 IVQbiFhUx4TXORqWzdCEjbIC0qhGZ1Q= -----END CERTIFICATE-----Generated at Sat Sep 5 07:12:18 2026 by rpki-client