$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa File: b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa (raw, json) Hash identifier: nozDQkB1kAE2dt1IQ2lLwtxO1E1dA2GRaHxFZyLvz30= Subject key identifier: 2F:33:DC:43:97:B7:A5:B7:76:E5:0B:84:83:F5:0B:23:06:C8:81:CC Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655E2FCE6CA222A154A1A000 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 24.231.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:2f:ce:6c:a2:22:a1:54:a1:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=b196beea-8117-4f9a-8254-358f8fdab6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:fe:7c:e1:4a:54:f0:e3:7b:dc:fb:fb:dd: ae:b7:c1:0d:0f:2a:d2:95:e7:bf:91:d4:ca:36:b5: 9b:09:fa:b0:16:5a:c7:5a:25:cb:99:85:a5:b8:4f: 04:d7:93:c5:82:61:25:14:06:de:18:01:70:25:f2: 12:74:1a:d5:0f:03:0f:a1:1f:85:40:02:08:14:1e: 54:c2:a4:df:c7:58:96:01:fe:80:86:79:c4:aa:ee: 9f:d5:7a:51:08:da:42:83:86:1b:47:87:40:99:d3: b8:c2:f3:6a:58:ed:5f:55:f7:fa:7d:31:3a:69:cf: 8b:45:d2:72:a2:15:35:72:5b:38:df:d4:27:1d:f1: 3e:43:fb:8f:ef:78:99:5c:45:93:1b:79:35:9e:87: d5:88:0b:17:6c:ef:61:61:1d:7f:05:f4:d5:30:4c: 29:3a:ec:dc:c6:e9:0b:f9:c6:3d:17:9e:1c:09:ea: 1d:80:81:fa:77:bc:6a:d4:2f:b1:73:20:2b:5b:86: 73:79:0e:a2:c9:f6:a0:19:be:c6:0d:41:b5:b2:56: 99:90:a9:9b:5a:64:4b:32:06:0e:ec:40:65:71:4b: c0:45:84:98:58:d7:dc:e3:10:75:a5:38:6f:30:c7: 83:c6:1c:56:49:92:ec:f2:9c:de:05:75:26:d5:7a: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:DC:43:97:B7:A5:B7:76:E5:0B:84:83:F5:0B:23:06:C8:81:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.231.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:98:12:98:48:a2:2d:86:a8:86:5f:fa:3d:d5:79:c4:01:c3: f5:15:53:8c:46:70:ed:7f:1e:f1:1b:0f:0e:2e:cb:e7:6c:47: 61:f9:08:c1:96:81:3b:71:9b:f0:b4:ae:9f:97:da:9e:43:58: 5f:6e:9f:c0:a2:a8:68:4d:9a:a0:d8:a4:d6:84:98:f6:ca:8b: 4a:2a:f3:02:2e:95:61:01:b5:c4:89:49:19:62:43:52:97:a7: 6c:bb:7b:4a:0b:c9:8c:01:92:c8:09:89:8b:c6:61:53:1e:38: e3:4e:38:d7:c6:06:62:e1:fd:a9:f7:61:73:64:f4:40:bf:71: 73:72:ff:b7:e5:d6:a5:e1:b5:cd:f1:53:9f:a1:82:8b:f1:64: 51:e9:63:69:21:20:81:6e:0a:63:db:b5:b7:f2:e4:71:91:66: 80:c3:00:09:f7:77:7f:9a:d1:76:fc:60:b7:7a:e7:a6:71:87: bf:7b:bd:b7:8a:87:67:88:aa:fd:a5:bf:76:99:5f:70:50:40: 05:b1:8a:e3:4f:96:65:90:ab:d2:be:19:63:ab:95:44:1c:56: 3f:50:8a:0a:27:cb:60:89:4b:f2:5a:b2:6e:97:44:2b:ba:bb: cd:25:f4:67:00:fd:35:bf:91:6c:46:c7:0e:ab:04:4a:eb:22: 38:d4:8e:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXi/ObKIioVShoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YjE5NmJlZWEtODExNy00ZjlhLTgyNTQtMzU4ZjhmZGFiNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rn+fOFKVPDje9z7+92ut8ENDyrSlee/kdTK NrWbCfqwFlrHWiXLmYWluE8E15PFgmElFAbeGAFwJfISdBrVDwMPoR+FQAIIFB5U wqTfx1iWAf6AhnnEqu6f1XpRCNpCg4YbR4dAmdO4wvNqWO1fVff6fTE6ac+LRdJy ohU1cls439QnHfE+Q/uP73iZXEWTG3k1nofViAsXbO9hYR1/BfTVMEwpOuzcxukL +cY9F54cCeodgIH6d7xq1C+xcyArW4ZzeQ6iyfagGb7GDUG1slaZkKmbWmRLMgYO 7EBlcUvARYSYWNfc4xB1pThvMMeDxhxWSZLs8pzeBXUm1XomzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8z3EOXt6W3duULhIP1CyMGyIHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjk2ZDUzNTUtZjI5Yi0z Mjk5LWFhMjktYTFjMDVjZGY1ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGOeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiYEphIoi2GqIZf+j3VecQBw/UVU4xGcO1/HvEbDw4uy+dsR2H5CMGW gTtxm/C0rp+X2p5DWF9un8CiqGhNmqDYpNaEmPbKi0oq8wIulWEBtcSJSRliQ1KX p2y7e0oLyYwBksgJiYvGYVMeOONOONfGBmLh/an3YXNk9EC/cXNy/7fl1qXhtc3x U5+hgovxZFHpY2khIIFuCmPbtbfy5HGRZoDDAAn3d3+a0Xb8YLd656Zxh797vbeK h2eIqv2lv3aZX3BQQAWxiuNPlmWQq9K+GWOrlUQcVj9Qigony2CJS/Jasm6XRCu6 u80l9GcA/TW/kWxGxw6rBErrIjjUjjw= -----END CERTIFICATE-----Generated at Tue Oct 13 17:06:26 2026 by rpki-client