$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87372bfc-50fc-38d7-85bc-a5510b08e546.roa File: 87372bfc-50fc-38d7-85bc-a5510b08e546.roa (raw, json) Hash identifier: cFT1yNKZ7qCBktENvWmlGJmIAXxIVRSKU2znnMmRVNw= Subject key identifier: C0:F5:E0:D3:E1:18:64:95:01:F3:AD:1B:E8:5F:62:F8:B2:1F:17:D5 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DCFF77DACF7DFC448FD80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87372bfc-50fc-38d7-85bc-a5510b08e546.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 66.190.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:cf:f7:7d:ac:f7:df:c4:48:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=df0b7d0c-3712-41f1-bdba-4c7e8742fabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:11:32:90:7c:00:6d:1f:5a:c1:43:f4:22: 2c:07:ae:25:6a:c9:ac:4c:35:df:bc:65:17:37:e2: ce:fb:ea:ac:91:7c:b3:32:0c:9c:c1:76:d1:91:f9: 62:cc:5f:45:36:6a:08:15:82:40:e9:e5:96:c0:34: 89:a7:4b:48:90:69:0d:d8:a8:c1:6d:54:1a:83:77: 42:26:58:01:80:2e:78:71:51:82:f7:bd:97:a3:db: 22:7d:82:00:5e:9a:55:bc:5e:b1:1b:d2:ac:c8:a9: 2d:88:9b:4d:55:7f:6c:ac:dc:98:54:ac:24:bb:22: c2:bf:cb:59:55:b1:61:bd:e7:2a:3b:de:51:af:f9: f5:68:d8:ef:9c:c5:51:3c:74:81:d4:f3:42:00:db: ba:ba:38:ba:e1:57:60:40:af:4a:66:02:8a:f1:c8: e4:b5:5d:6f:ee:0e:8e:79:dc:24:0b:85:3e:dd:fb: a9:bf:1d:4c:8a:52:eb:44:ba:64:1f:51:b8:53:ee: 21:3d:25:8e:24:4f:67:65:de:a0:e2:c9:1f:59:f6: 9f:ef:8c:21:6a:7c:b0:42:46:48:ff:fd:8e:56:5f: 62:4f:8f:f7:2c:9a:7d:38:a5:bf:ce:8c:c7:09:96: c8:74:4c:65:d6:52:e4:90:37:ee:23:f3:bf:25:7b: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F5:E0:D3:E1:18:64:95:01:F3:AD:1B:E8:5F:62:F8:B2:1F:17:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87372bfc-50fc-38d7-85bc-a5510b08e546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.190.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fb:55:8f:a5:eb:d7:35:17:ff:d6:af:9d:8c:b2:8c:18:0a: 91:53:30:a4:ae:7d:ef:07:7e:7d:d8:02:87:1f:9c:96:d0:53: 9d:e7:fb:e9:00:36:c5:8c:f7:ec:d9:5a:0a:e8:a1:e8:15:d7: 63:49:9b:d7:85:20:8b:64:9c:a0:ce:76:7c:40:86:7c:3c:37: 97:60:6e:b0:12:62:5a:d2:e5:83:a9:16:45:b1:fc:59:cd:86: 2c:a8:80:14:d6:55:45:ec:70:e0:6e:fc:87:78:36:b7:2c:1d: 7c:a2:7f:54:dc:34:b1:9c:0f:d2:e4:67:2b:57:4c:db:83:f4: e4:4d:3e:4c:8a:a2:81:81:d4:25:75:07:bc:5c:6c:c8:8b:30: 59:19:3a:da:db:d5:f6:4e:18:a8:7e:d1:11:bc:02:6f:35:ca: 02:c9:5e:2d:6e:78:10:0d:c0:06:aa:6d:62:26:63:5e:3a:77: 3d:87:45:4c:80:75:a7:ca:1c:1a:8c:f4:92:20:c3:df:f8:ac: 1d:79:59:ee:65:e9:4a:15:27:82:ff:2d:fa:e0:61:23:df:07: b4:f0:2c:cf:1e:54:92:46:d0:ce:ed:4c:56:77:02:fb:52:47: 9e:ef:c9:98:8f:f2:fe:be:94:4b:5b:c0:c1:84:55:3a:97:d4: 05:ce:4e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXc/3faz338RI/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZGYwYjdkMGMtMzcxMi00MWYxLWJkYmEtNGM3ZTg3NDJmYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglgRMpB8AG0fWsFD9CIsB64lasmsTDXfvGUX N+LO++qskXyzMgycwXbRkflizF9FNmoIFYJA6eWWwDSJp0tIkGkN2KjBbVQag3dC JlgBgC54cVGC972Xo9sifYIAXppVvF6xG9KsyKktiJtNVX9srNyYVKwkuyLCv8tZ VbFhvecqO95Rr/n1aNjvnMVRPHSB1PNCANu6uji64VdgQK9KZgKK8cjktV1v7g6O edwkC4U+3fupvx1MilLrRLpkH1G4U+4hPSWOJE9nZd6g4skfWfaf74whanywQkZI //2OVl9iT4/3LJp9OKW/zozHCZbIdExl1lLkkDfuI/O/JXsbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD14NPhGGSVAfOtG+hfYviyHxfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODczNzJiZmMtNTBmYy0z OGQ3LTg1YmMtYTU1MTBiMDhlNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT7VY+l69c1F//Wr52MsowYCpFTMKSufe8Hfn3YAocfnJbQU53n++kA NsWM9+zZWgrooegV12NJm9eFIItknKDOdnxAhnw8N5dgbrASYlrS5YOpFkWx/FnN hiyogBTWVUXscOBu/Id4NrcsHXyif1TcNLGcD9LkZytXTNuD9ORNPkyKooGB1CV1 B7xcbMiLMFkZOtrb1fZOGKh+0RG8Am81ygLJXi1ueBANwAaqbWImY146dz2HRUyA dafKHBqM9JIgw9/4rB15We5l6UoVJ4L/LfrgYSPfB7TwLM8eVJJG0M7tTFZ3AvtS R57vyZiP8v6+lEtbwMGEVTqX1AXOTls= -----END CERTIFICATE-----Generated at Tue Oct 6 11:19:10 2026 by rpki-client