$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/821c71de-7e79-3378-b70e-f6b790ba17c0.roa File: 821c71de-7e79-3378-b70e-f6b790ba17c0.roa (raw, json) Hash identifier: KsEc1sxCvLOW4sm9TZKScJ+dYbdRFiIUujja+kvYOCg= Subject key identifier: 8C:1D:82:96:AA:CB:DF:44:5A:EC:C3:38:D5:46:D3:B8:A8:50:CE:75 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E6604C1FB28EDC5DC6580 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/821c71de-7e79-3378-b70e-f6b790ba17c0.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 33588 IP address blocks: 35.131.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:66:04:c1:fb:28:ed:c5:dc:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=936c89f9-436f-4a08-b243-ba3c949ca928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:5a:b4:58:d7:e7:a8:c4:e1:81:c9:03:fb: 08:45:96:6d:ba:a8:d0:5b:66:51:1c:a8:f3:1d:2e: a1:2d:17:58:d8:80:92:27:c9:43:d1:31:21:a4:44: 52:b9:8d:24:b0:14:77:cf:e8:17:d8:58:f1:d0:16: 84:54:f1:43:3e:59:bc:00:3e:d1:30:45:27:d9:a3: 70:8d:c2:fc:8d:e2:ca:f4:f8:3f:7d:21:95:3f:f3: 7d:55:17:e3:c8:c7:65:ad:1c:4b:c0:d0:77:ec:38: 06:34:3c:08:e6:32:68:8a:bb:c2:0e:c2:a3:57:69: 1f:37:b6:dd:54:eb:49:0b:b6:95:32:d9:51:66:3b: 2a:3a:b3:6c:a0:36:0d:89:62:cf:3a:4c:ad:3e:84: b6:e9:58:3e:ff:38:fe:53:55:3c:db:6a:de:59:b1: fc:78:97:3f:04:47:9d:3e:1d:23:e5:43:5c:6a:ea: 7c:de:24:a1:15:3f:c2:78:98:8d:07:ac:f6:59:7d: 66:91:61:96:91:6a:c6:b3:7b:f1:e3:89:31:dd:c9: d6:03:0f:cc:56:ae:dc:e9:ba:5a:ad:5f:29:c8:08: 6b:29:df:7a:6d:db:ce:80:a6:73:7b:d0:c9:60:c7: da:2d:7b:4c:b7:2b:04:22:7e:46:2e:a1:84:30:08: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:82:96:AA:CB:DF:44:5A:EC:C3:38:D5:46:D3:B8:A8:50:CE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/821c71de-7e79-3378-b70e-f6b790ba17c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 35.131.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:99:72:0b:17:6c:d8:82:0b:b9:3a:7f:08:49:32:e5:4b:cd: bd:e9:42:6c:2b:c6:e4:b5:db:87:8b:16:0d:87:24:78:b9:27: 5a:a4:33:5c:12:a2:c4:6c:fb:a2:a2:af:d4:0b:cc:cf:97:89: fd:fe:d6:5b:7d:94:f8:df:e1:b8:c8:a7:e0:aa:c3:b5:88:e1: 92:34:03:72:bc:8d:ac:b1:b8:a4:7d:dc:30:09:b8:af:fe:f7: 66:71:0c:1a:98:fc:1b:ca:38:78:4a:5e:dc:fd:69:0a:b3:47: f0:dd:3c:34:07:03:5b:b8:92:e4:bb:82:7b:e5:f9:9e:16:f8: 91:d8:97:82:d1:18:ab:20:df:e3:f4:b5:a8:11:89:f7:2c:15: dc:62:bc:53:ac:bc:1d:ab:ca:d8:d2:ec:bb:f0:6d:e0:5f:48: 67:dc:cb:6c:44:c1:b0:ad:ec:c9:13:dd:70:ab:de:47:58:d7: b4:72:b7:38:71:4d:40:79:6e:0d:85:eb:be:93:28:21:fd:e6: 6d:ef:41:9d:ce:75:b0:b0:6c:e6:38:2c:0b:ea:62:24:eb:c6: 15:ed:8a:5d:48:20:49:5b:7d:92:69:b5:3c:fa:92:b6:0a:d7: 8f:10:9f:c8:6b:19:29:32:3f:5a:fd:9c:24:a6:b0:29:3b:da: 79:71:76:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmYEwfso7cXcZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OTM2Yzg5ZjktNDM2Zi00YTA4LWIyNDMtYmEzYzk0OWNhOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNNatFjX56jE4YHJA/sIRZZtuqjQW2ZRHKjz HS6hLRdY2ICSJ8lD0TEhpERSuY0ksBR3z+gX2Fjx0BaEVPFDPlm8AD7RMEUn2aNw jcL8jeLK9Pg/fSGVP/N9VRfjyMdlrRxLwNB37DgGNDwI5jJoirvCDsKjV2kfN7bd VOtJC7aVMtlRZjsqOrNsoDYNiWLPOkytPoS26Vg+/zj+U1U822reWbH8eJc/BEed Ph0j5UNcaup83iShFT/CeJiNB6z2WX1mkWGWkWrGs3vx44kx3cnWAw/MVq7c6bpa rV8pyAhrKd96bdvOgKZze9DJYMfaLXtMtysEIn5GLqGEMAjyOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwdgpaqy99EWuzDONVG07ioUM51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODIxYzcxZGUtN2U3OS0z Mzc4LWI3MGUtZjZiNzkwYmExN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI4MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSZcgsXbNiCC7k6fwhJMuVLzb3pQmwrxuS124eLFg2HJHi5J1qkM1wS osRs+6Kir9QLzM+Xif3+1lt9lPjf4bjIp+Cqw7WI4ZI0A3K8jayxuKR93DAJuK/+ 92ZxDBqY/BvKOHhKXtz9aQqzR/DdPDQHA1u4kuS7gnvl+Z4W+JHYl4LRGKsg3+P0 tagRifcsFdxivFOsvB2rytjS7LvwbeBfSGfcy2xEwbCt7MkT3XCr3kdY17Rytzhx TUB5bg2F676TKCH95m3vQZ3OdbCwbOY4LAvqYiTrxhXtil1IIElbfZJptTz6krYK 148Qn8hrGSkyP1r9nCSmsCk72nlxdh4= -----END CERTIFICATE-----Generated at Mon Oct 12 18:37:18 2026 by rpki-client