$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4bfe4d29-71be-303b-90e8-a17381394227.roa File: 4bfe4d29-71be-303b-90e8-a17381394227.roa (raw, json) Hash identifier: +paLn+nNu/MO2HpU2mE2HSDusBjUlrbf91Pq8uAFMBM= Subject key identifier: 63:21:C4:0E:EB:28:74:81:6E:A3:34:E3:37:F6:52:31:E6:70:EB:C7 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E293F8A111D959DFCD840 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4bfe4d29-71be-303b-90e8-a17381394227.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 11426 IP address blocks: 192.60.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:29:3f:8a:11:1d:95:9d:fc:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=608e8dbd-9c74-4bcb-8e72-7c144b412358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:47:3b:4d:2e:3f:76:1c:0b:05:cc:a5:34: c1:dc:ba:ad:36:66:df:63:e5:0e:b6:15:95:3a:5c: df:4f:c6:03:49:1a:68:08:d4:1a:da:9b:0d:a3:cc: 52:38:4a:37:ad:ef:c7:4a:e6:f7:70:ee:94:89:e7: ec:6f:3d:40:ea:36:cf:62:cd:c2:99:d1:a4:75:fc: 2f:8c:4d:60:d2:ce:e3:0d:05:89:08:ee:d7:7c:9e: a4:6f:13:a1:1f:cf:f8:c7:81:d4:db:a2:95:07:38: 42:e8:52:48:fa:c8:d3:5b:eb:ed:6d:46:38:1a:d8: d6:90:4e:a9:11:58:53:47:1b:78:18:1b:66:7b:bf: 6a:ed:b6:94:3a:9e:57:ba:4f:12:40:8e:bf:0b:51: 01:e6:01:79:b4:5d:d3:3a:f0:a8:ca:cd:39:36:3b: 65:7e:8a:6d:cd:88:fc:94:04:df:0b:35:13:2f:0e: c8:f0:be:e1:f1:2c:44:f2:9b:c0:4e:78:8e:b7:26: e5:de:bf:de:63:01:79:58:66:35:c8:24:3e:47:49: 89:6a:e5:e7:56:78:75:b3:e7:15:1b:f9:63:ce:ce: c6:4e:cc:3c:3b:9f:d4:7c:bd:29:d9:11:81:2d:04: 9b:a0:8b:4b:41:20:4c:1a:44:b5:00:20:8f:4e:b6: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:21:C4:0E:EB:28:74:81:6E:A3:34:E3:37:F6:52:31:E6:70:EB:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4bfe4d29-71be-303b-90e8-a17381394227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.60.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:83:8d:1d:81:93:34:15:21:94:b0:4d:ce:ea:b7:49:56:6d: 73:e7:d0:f4:04:93:08:57:4e:0d:8c:71:cf:fc:ba:9a:01:31: e0:40:b0:7c:92:35:ad:7a:ff:7a:9f:d5:66:7a:73:06:09:c6: b1:8d:8a:6e:c8:9c:94:10:24:8b:9b:63:24:e2:81:fc:82:90: fc:35:58:c3:91:fd:e2:d4:6b:cb:1c:62:c0:0e:d7:dc:aa:0b: bf:42:ba:a3:5c:3d:64:3e:39:05:72:df:c3:bf:28:07:17:17: 54:89:37:b5:85:a6:66:07:d6:40:4e:4c:a8:ac:3d:3d:e9:33: f3:18:1b:43:93:dc:7c:d3:22:d7:ff:57:00:e9:44:5a:7b:36: c8:19:1e:82:f3:11:6a:e2:f8:87:f2:8c:eb:34:da:c1:11:e0: a0:51:94:c5:a8:70:72:25:e2:ba:76:14:f5:71:2c:eb:61:25: 0f:c2:8b:0a:ea:57:e5:70:87:18:ac:0a:72:05:7c:12:c6:8f: 41:b1:33:25:2d:05:e3:a0:ff:5e:c9:8b:ba:50:27:49:11:68: 83:70:0f:ab:2c:52:95:b9:98:df:99:19:5f:93:e5:d9:94:5a: 23:06:db:c1:a0:85:cd:d2:ef:4b:3d:da:29:a2:d4:3c:92:24: 6b:da:16:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXik/ihEdlZ382EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NjA4ZThkYmQtOWM3NC00YmNiLThlNzItN2MxNDRiNDEyMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw1HO00uP3YcCwXMpTTB3LqtNmbfY+UOthWV OlzfT8YDSRpoCNQa2psNo8xSOEo3re/HSub3cO6Uiefsbz1A6jbPYs3CmdGkdfwv jE1g0s7jDQWJCO7XfJ6kbxOhH8/4x4HU26KVBzhC6FJI+sjTW+vtbUY4GtjWkE6p EVhTRxt4GBtme79q7baUOp5Xuk8SQI6/C1EB5gF5tF3TOvCoys05NjtlfoptzYj8 lATfCzUTLw7I8L7h8SxE8pvATniOtybl3r/eYwF5WGY1yCQ+R0mJauXnVnh1s+cV G/ljzs7GTsw8O5/UfL0p2RGBLQSboItLQSBMGkS1ACCPTras5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMhxA7rKHSBbqM04zf2UjHmcOvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGJmZTRkMjktNzFiZS0z MDNiLTkwZTgtYTE3MzgxMzk0MjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqDjR2BkzQVIZSwTc7qt0lWbXPn0PQEkwhXTg2Mcc/8upoBMeBAsHyS Na16/3qf1WZ6cwYJxrGNim7InJQQJIubYyTigfyCkPw1WMOR/eLUa8scYsAO19yq C79CuqNcPWQ+OQVy38O/KAcXF1SJN7WFpmYH1kBOTKisPT3pM/MYG0OT3HzTItf/ VwDpRFp7NsgZHoLzEWri+IfyjOs02sER4KBRlMWocHIl4rp2FPVxLOthJQ/Ciwrq V+VwhxisCnIFfBLGj0GxMyUtBeOg/17Ji7pQJ0kRaINwD6ssUpW5mN+ZGV+T5dmU WiMG28Gghc3S70s92imi1DySJGvaFho= -----END CERTIFICATE-----Generated at Sat Oct 10 13:27:51 2026 by rpki-client