$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd9e1237-3613-316d-be7c-9dcebeac08ec.roa File: cd9e1237-3613-316d-be7c-9dcebeac08ec.roa (raw, json) Hash identifier: e54E+IJhYsz6y8ug9vcsTDMLM3WzA6q83Teh+FcTTyQ= Subject key identifier: D3:0D:37:8F:B3:6F:00:5F:08:10:DC:4A:A2:D9:ED:3E:60:0B:30:74 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F3CE29741618C6E90AA338C40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd9e1237-3613-316d-be7c-9dcebeac08ec.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 71.95.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:97:41:61:8c:6e:90:aa:33:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=c677e73c-7004-4c8f-b744-74e06f5e4d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:03:10:a7:48:20:be:48:87:b1:d9:63:9b:25: 19:00:e7:e6:7e:56:aa:9a:df:1e:de:d8:12:8c:ca: fa:bc:1b:5d:a7:c7:82:8a:34:d1:a9:49:ab:38:21: 64:95:84:1a:37:64:16:f0:a6:13:78:79:46:59:64: ff:d3:94:b1:95:81:91:bb:a3:db:3e:6b:70:5b:8b: 9f:ee:25:d3:ad:4b:05:2a:2f:4c:89:8b:ac:67:f4: 30:4e:8f:d7:2a:f5:e4:62:39:f5:f2:fe:dd:20:b9: 4b:73:c4:5b:88:6c:cd:c8:1d:a4:04:70:ab:ec:4c: 6c:d4:d9:38:39:bc:87:81:cf:a7:38:48:52:67:3f: 63:0a:d2:c0:43:3f:3e:f8:a0:6e:8c:e4:82:4f:e6: df:8f:28:44:b3:0d:99:3d:9d:a1:be:f9:3b:94:ac: 82:3a:36:2c:bc:86:10:4b:90:28:9f:df:17:72:ee: 77:c0:07:0e:f4:03:92:2b:5c:25:5c:40:a0:3f:91: a1:09:67:92:90:5b:8c:a0:da:97:be:a8:70:d3:a2: 40:5a:2f:c3:53:31:46:cb:02:8b:a8:6d:1f:52:33: d7:b0:95:03:05:b0:95:17:77:09:1c:63:f6:27:1f: 22:53:e4:ef:d9:51:82:08:8d:34:19:b1:f4:ce:db: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:37:8F:B3:6F:00:5F:08:10:DC:4A:A2:D9:ED:3E:60:0B:30:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd9e1237-3613-316d-be7c-9dcebeac08ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.95.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ea:83:a5:05:f2:e0:46:0e:c6:ee:fe:53:d3:17:80:2e:ef: 4d:97:3c:16:bc:2b:5f:bb:a5:19:d1:3c:36:f7:b9:e7:92:f2: 74:68:ca:19:14:57:f3:b8:51:3f:76:95:a3:6a:d3:22:68:09: 1f:58:93:87:ed:84:9f:9f:1b:03:6d:2b:c0:33:5c:a9:f1:28: 35:45:23:f2:5e:4c:c4:97:a9:3a:82:7f:e5:ac:35:dd:9b:c7: da:4c:33:63:ed:cc:0d:f7:32:82:d4:7d:83:a3:a4:d0:0c:69: ee:ee:cc:fe:64:ad:0b:08:50:2a:f1:62:08:f6:c0:da:53:cf: fb:d5:7e:43:56:f8:f0:0b:dc:f4:4a:2f:0c:96:75:9a:3b:ac: 9f:5b:08:59:4a:34:d9:41:77:b4:18:ec:cc:67:b7:77:2e:39: 1f:7b:c1:e0:01:99:8c:06:f9:9b:ac:cf:39:df:fa:3c:8b:3d: 0e:20:31:ef:20:27:83:f6:a0:29:32:76:cf:b9:1d:f1:d2:9f: db:a7:cd:09:f9:3b:3d:ef:85:b2:da:04:e3:cd:3f:7d:25:f1: a7:00:88:e0:ef:13:9b:9b:84:76:1b:37:46:e5:ec:ae:c7:bd: 58:5c:8e:aa:89:5d:87:11:22:b5:74:ca:a9:e6:e8:e0:76:7d: 5d:c4:81:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pdBYYxukKozjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YzY3N2U3M2MtNzAwNC00YzhmLWI3NDQtNzRlMDZmNWU0ZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAMQp0ggvkiHsdljmyUZAOfmflaqmt8e3tgS jMr6vBtdp8eCijTRqUmrOCFklYQaN2QW8KYTeHlGWWT/05SxlYGRu6PbPmtwW4uf 7iXTrUsFKi9MiYusZ/QwTo/XKvXkYjn18v7dILlLc8RbiGzNyB2kBHCr7Exs1Nk4 ObyHgc+nOEhSZz9jCtLAQz8++KBujOSCT+bfjyhEsw2ZPZ2hvvk7lKyCOjYsvIYQ S5Aon98Xcu53wAcO9AOSK1wlXECgP5GhCWeSkFuMoNqXvqhw06JAWi/DUzFGywKL qG0fUjPXsJUDBbCVF3cJHGP2Jx8iU+Tv2VGCCI00GbH0zts3EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMNN4+zbwBfCBDcSqLZ7T5gCzB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2Q5ZTEyMzctMzYxMy0z MTZkLWJlN2MtOWRjZWJlYWMwOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArqg6UF8uBGDsbu/lPTF4Au702XPBa8K1+7pRnRPDb3ueeS8nRoyhkU V/O4UT92laNq0yJoCR9Yk4fthJ+fGwNtK8AzXKnxKDVFI/JeTMSXqTqCf+WsNd2b x9pMM2PtzA33MoLUfYOjpNAMae7uzP5krQsIUCrxYgj2wNpTz/vVfkNW+PAL3PRK LwyWdZo7rJ9bCFlKNNlBd7QY7Mxnt3cuOR97weABmYwG+Zuszznf+jyLPQ4gMe8g J4P2oCkyds+5HfHSn9unzQn5Oz3vhbLaBOPNP30l8acAiODvE5ubhHYbN0bl7K7H vVhcjqqJXYcRIrV0yqnm6OB2fV3Egbg= -----END CERTIFICATE-----Generated at Sun Sep 20 19:43:06 2026 by rpki-client