$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1bba0e2-e8fd-34b0-9f7a-1923c04a70e0.roa File: a1bba0e2-e8fd-34b0-9f7a-1923c04a70e0.roa (raw, json) Hash identifier: Ur7Jjjd/WwaAYvQKwXFXGbmJT41V56hWIhGBVLXfdKk= Subject key identifier: 62:DD:6E:F9:7A:84:58:86:28:8C:53:3D:59:B3:0B:68:2E:EF:CB:19 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F0D6CE573789DB5958426F000 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1bba0e2-e8fd-34b0-9f7a-1923c04a70e0.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 33588 IP address blocks: 159.111.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e5:73:78:9d:b5:95:84:26:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=ec02fad1-ff22-468f-98f9-60ca75b2bfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:23:b0:34:6c:18:70:f4:4d:65:eb:0c:7e: a4:d4:b4:f2:b6:84:d7:0c:61:1a:79:b8:26:0e:1a: b5:ee:b1:8e:2d:9d:f0:08:e3:8c:5e:38:ab:1a:bc: 60:58:32:81:44:02:e4:18:d0:9d:80:b8:74:b7:4f: a6:27:c4:d8:90:b3:09:bf:8f:dd:16:3c:d8:c2:bd: 4e:6a:5c:bc:c3:d9:5b:5c:fa:f6:cd:c9:c6:07:7d: fb:aa:77:c9:ca:e8:78:10:a0:d4:69:09:cf:b6:2a: 29:2a:41:09:ec:31:6a:a0:80:1d:29:43:61:f1:57: 45:b0:db:ff:15:af:fb:b1:93:44:7b:44:ed:30:8c: 0d:44:5d:82:ac:e5:4a:c5:e4:dc:02:e6:5f:c5:d0: 74:76:1f:17:5c:c6:30:69:7d:6e:83:22:fb:b9:ee: 1b:5b:de:73:cd:75:c6:c4:d8:f3:23:7f:f2:09:28: 83:3c:f5:40:38:fa:45:ba:7c:3b:09:fe:cf:18:96: 66:fd:cf:30:08:39:25:8e:c7:e4:ed:01:ae:22:fe: 93:d1:4b:6a:fb:92:1a:19:51:2a:b7:bf:3c:7e:b3: 3d:5f:0b:69:e1:83:e8:6b:61:4f:ae:82:92:ce:2b: c9:83:26:14:02:e1:13:60:22:50:72:ba:e7:8d:b6: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DD:6E:F9:7A:84:58:86:28:8C:53:3D:59:B3:0B:68:2E:EF:CB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1bba0e2-e8fd-34b0-9f7a-1923c04a70e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2c:ee:8a:6f:b4:f8:b0:20:8e:98:e3:e0:19:02:10:c9:81: dc:c7:72:71:e7:43:79:82:f5:b0:29:b0:e6:af:5c:c7:69:af: f5:cb:f5:4c:90:8c:4b:91:98:e3:02:8c:85:9a:21:eb:11:05: 5f:c2:71:5f:0d:28:2c:41:b5:3c:eb:6a:63:6b:98:87:df:2c: 1e:d5:2c:0f:89:99:77:ce:ec:5b:6f:f1:80:db:db:e2:8f:bd: d9:0e:4f:2f:b6:53:6a:34:58:67:03:e6:65:72:b0:a9:3a:32: 7a:cf:97:0c:8e:39:30:a1:17:2a:3f:df:6c:d5:a7:74:25:7e: 6b:c5:89:e7:fd:60:f5:7c:f6:0e:88:1c:4e:a8:5f:05:2d:7c: e2:31:88:e9:29:e9:6c:26:2b:61:d4:21:d4:f5:c2:7d:79:53: 41:e6:76:3c:aa:73:1f:53:cc:2f:6e:ef:c6:d5:8c:c5:2c:4b: f2:db:51:0d:1a:68:da:37:06:ae:6a:ba:1d:f8:a6:6c:79:5c: 5f:5d:f9:9a:51:48:73:51:fd:f3:7e:80:bc:a0:4e:3c:51:43: 2a:10:f3:2a:f4:62:2d:f2:06:6c:b9:1d:02:b1:2c:f9:a1:fa: 72:c4:13:2b:63:39:b6:52:e4:e6:8e:66:9e:20:94:48:eb:31: d6:e5:83:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOVzeJ21lYQm8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZWMwMmZhZDEtZmYyMi00NjhmLTk4ZjktNjBjYTc1YjJiZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFsjsDRsGHD0TWXrDH6k1LTytoTXDGEaebgm Dhq17rGOLZ3wCOOMXjirGrxgWDKBRALkGNCdgLh0t0+mJ8TYkLMJv4/dFjzYwr1O aly8w9lbXPr2zcnGB337qnfJyuh4EKDUaQnPtiopKkEJ7DFqoIAdKUNh8VdFsNv/ Fa/7sZNEe0TtMIwNRF2CrOVKxeTcAuZfxdB0dh8XXMYwaX1ugyL7ue4bW95zzXXG xNjzI3/yCSiDPPVAOPpFunw7Cf7PGJZm/c8wCDkljsfk7QGuIv6T0Utq+5IaGVEq t788frM9Xwtp4YPoa2FProKSzivJgyYUAuETYCJQcrrnjbb4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLdbvl6hFiGKIxTPVmzC2gu78sZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTFiYmEwZTItZThmZC0z NGIwLTlmN2EtMTkyM2MwNGE3MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn28MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgs7opvtPiwII6Y4+AZAhDJgdzHcnHnQ3mC9bApsOavXMdpr/XL9UyQ jEuRmOMCjIWaIesRBV/CcV8NKCxBtTzramNrmIffLB7VLA+JmXfO7Ftv8YDb2+KP vdkOTy+2U2o0WGcD5mVysKk6MnrPlwyOOTChFyo/32zVp3QlfmvFief9YPV89g6I HE6oXwUtfOIxiOkp6WwmK2HUIdT1wn15U0Hmdjyqcx9TzC9u78bVjMUsS/LbUQ0a aNo3Bq5quh34pmx5XF9d+ZpRSHNR/fN+gLygTjxRQyoQ8yr0Yi3yBmy5HQKxLPmh +nLEEytjObZS5OaOZp4glEjrMdblg2A= -----END CERTIFICATE-----Generated at Sun Sep 20 19:42:58 2026 by rpki-client