$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa File: 2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa (raw, json) Hash identifier: Kq8uOwP9s3vEvFMf6NyW3ZG7LAOtO/ULZPttZtRl1/s= Subject key identifier: 47:CB:4D:C4:65:F7:03:DA:F0:8E:21:E2:AF:D7:70:C9:0E:FE:9C:69 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584E210FB8F6FCDE45A4A3E17980 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 20115 IP address blocks: 68.113.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:b8:f6:fc:de:45:a4:a3:e1:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=c2340331-f813-45ba-9a56-fce46249aaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:fb:bd:42:83:d4:16:d2:ca:28:05:1c:43: ba:a2:07:5c:ca:b5:30:bb:24:e5:65:6d:af:a9:1c: 22:19:28:ec:63:d0:7f:e7:0b:40:dd:17:b7:db:e2: 2b:b1:6f:5b:68:2c:ab:53:bd:10:8b:07:e9:78:6e: 8e:30:08:40:1a:55:a0:41:d2:d2:c6:46:af:4b:4d: e2:51:97:e3:aa:c0:1c:08:ae:49:de:b1:de:59:16: 6c:68:ed:c6:eb:76:8c:c1:8e:1d:f0:a5:e8:87:76: ee:c4:95:d0:cd:19:0b:64:14:ad:6b:57:1e:82:77: b4:3b:c9:58:e0:97:ce:84:38:be:3e:c4:29:11:6c: 0b:fb:ee:b6:b8:c0:b7:e2:87:c5:fe:b4:21:37:fd: 5c:30:73:8d:0d:74:df:4d:f6:46:7d:fc:4a:44:1b: dc:94:bb:fd:d6:91:91:c8:bf:8a:66:b0:6c:92:f0: 6c:de:71:6b:53:57:3a:de:c1:b4:cc:cc:fd:1d:eb: 96:11:d2:b3:5b:cc:2e:a4:3c:35:b9:4c:94:49:2e: d3:0d:65:8b:ce:48:37:6a:38:b0:ae:10:f2:46:e8: 80:56:d5:9a:06:9e:17:a2:b5:a0:68:74:a0:2f:e8: 19:11:f4:76:a0:ac:86:da:7b:ac:54:5c:39:ad:ac: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:4D:C4:65:F7:03:DA:F0:8E:21:E2:AF:D7:70:C9:0E:FE:9C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.113.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9d:fa:cb:5e:ed:e9:d2:59:b2:c5:b7:39:5b:cb:b1:80:69: 5d:37:63:6f:c5:4f:2d:31:0c:47:6f:52:eb:3c:c9:30:1c:fd: 16:61:74:ec:ca:57:e7:df:5d:f5:0d:d6:15:f3:87:f6:71:ae: c1:77:3b:2f:c0:b5:87:60:e3:7f:e2:75:18:be:eb:71:f8:63: 32:af:bc:ad:e6:27:ba:d4:e1:1f:a3:7f:39:b5:42:9e:da:80: bf:ef:09:f6:9f:f9:21:de:75:7e:37:02:81:6c:13:55:97:77: 0a:7e:cc:bb:c7:b4:9d:f5:9b:cb:62:a5:a9:80:64:11:79:39: 4a:48:bd:62:e0:18:b2:9b:bb:50:bb:db:09:3a:94:20:2f:78: 5d:9d:ba:f4:f7:e0:b4:2e:90:2b:c3:bb:f2:46:bf:43:09:d4: e5:b0:2e:15:19:98:fc:28:1e:02:7e:52:b4:63:fb:14:91:08: 7f:27:7e:ec:06:66:6f:f2:3b:c0:77:13:ae:e4:fe:0b:7c:ea: e2:28:56:11:4a:ef:1e:26:43:c7:86:d3:5b:43:25:7e:00:a2: b8:8d:94:bb:ac:22:df:6e:62:9b:2f:81:83:e8:89:7d:ee:76: b5:e2:5c:39:1e:84:18:f5:10:c9:08:07:8d:aa:52:05:ee:0e: 0d:6a:a8:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD7j2/N5FpKPheYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk YzIzNDAzMzEtZjgxMy00NWJhLTlhNTYtZmNlNDYyNDlhYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIr7vUKD1BbSyigFHEO6ogdcyrUwuyTlZW2v qRwiGSjsY9B/5wtA3Re32+IrsW9baCyrU70QiwfpeG6OMAhAGlWgQdLSxkavS03i UZfjqsAcCK5J3rHeWRZsaO3G63aMwY4d8KXoh3buxJXQzRkLZBSta1cegne0O8lY 4JfOhDi+PsQpEWwL++62uMC34ofF/rQhN/1cMHONDXTfTfZGffxKRBvclLv91pGR yL+KZrBskvBs3nFrU1c63sG0zMz9HeuWEdKzW8wupDw1uUyUSS7TDWWLzkg3ajiw rhDyRuiAVtWaBp4XorWgaHSgL+gZEfR2oKyG2nusVFw5raxS3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfLTcRl9wPa8I4h4q/XcMkO/pxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmRiOWZlMTYtMDY4Mi0z MTBiLWE3YWItNGI4MjlkZGIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOd+ste7enSWbLFtzlby7GAaV03Y2/FTy0xDEdvUus8yTAc/RZhdOzK V+ffXfUN1hXzh/ZxrsF3Oy/AtYdg43/idRi+63H4YzKvvK3mJ7rU4R+jfzm1Qp7a gL/vCfaf+SHedX43AoFsE1WXdwp+zLvHtJ31m8tipamAZBF5OUpIvWLgGLKbu1C7 2wk6lCAveF2duvT34LQukCvDu/JGv0MJ1OWwLhUZmPwoHgJ+UrRj+xSRCH8nfuwG Zm/yO8B3E67k/gt86uIoVhFK7x4mQ8eG01tDJX4AoriNlLusIt9uYpsvgYPoiX3u drXiXDkehBj1EMkIB42qUgXuDg1qqFw= -----END CERTIFICATE-----Generated at Sat Jun 13 17:01:21 2026 by rpki-client