$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e2ce587d-c3d8-3633-9cbb-85cd5dcd1e40.roa File: e2ce587d-c3d8-3633-9cbb-85cd5dcd1e40.roa (raw, json) Hash identifier: acwmvTZrOjfhJiPu2q+nEUyD5vfS1a7V3io+nvhRgtw= Subject key identifier: 86:56:CE:CA:02:E8:61:20:B4:70:5A:98:49:B6:94:2C:E9:F7:43:F9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584EE4F1F658CF0568CAE9898260 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e2ce587d-c3d8-3633-9cbb-85cd5dcd1e40.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 401875 IP address blocks: 168.148.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:f6:58:cf:05:68:ca:e9:89:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=dd42aaa5-6cb2-469b-8aff-b22a2fddf32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:9e:45:e4:ab:d0:a1:e5:ad:80:56:f5:d7: e2:a0:8d:d0:a5:62:ff:f5:51:3e:0a:73:f8:d2:4f: a5:6f:68:ef:ab:3a:73:18:b9:b3:a9:ba:6e:9b:63: c8:27:0c:26:61:82:8b:b4:8c:e2:c6:af:b6:71:47: 97:26:30:0a:ee:57:ef:5c:3e:a5:1c:f7:87:29:3e: 3b:b1:0e:02:8b:19:1c:c5:ac:60:e6:bc:e1:52:17: af:76:3b:98:dc:3b:7c:e6:dd:fb:10:52:ca:8a:69: 8f:3f:08:71:07:ce:78:85:3a:18:5a:c1:fa:2f:7f: 9a:53:a3:5f:1e:44:22:76:10:b5:4a:e1:51:19:16: 5b:16:8f:d6:24:31:7b:8e:de:57:d4:3c:57:99:cf: ae:5f:a7:10:c0:18:98:ab:30:27:09:82:e2:85:5b: 48:f8:c4:63:d7:e6:eb:99:28:22:e0:43:ee:6a:6c: 76:28:be:b2:1b:d6:34:80:ce:92:3a:93:f1:0b:70: 7b:1d:f6:f9:8e:ca:af:43:89:92:b3:01:17:dd:be: e9:55:05:0c:d2:a2:45:b4:bc:04:35:a7:98:59:bb: b4:a4:4a:b8:7b:d7:e4:14:e2:f1:66:1b:d4:0e:c4: 4f:a2:eb:89:e3:d7:b9:d4:75:f6:53:3c:ec:96:6f: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:CE:CA:02:E8:61:20:B4:70:5A:98:49:B6:94:2C:E9:F7:43:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e2ce587d-c3d8-3633-9cbb-85cd5dcd1e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 168.148.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:50:90:08:1c:8e:bb:b1:a2:57:3e:f1:ef:0f:49:9b:c2:69: 88:27:57:51:39:3d:a5:11:f0:74:43:86:9f:58:66:64:1c:23: d3:e3:3c:c9:d1:bc:a6:4f:f1:83:0f:eb:92:73:cd:76:7a:64: 40:50:4a:5a:d5:30:b8:0b:6e:18:2d:b1:47:23:63:cd:b8:07: c1:62:52:67:e7:66:c6:d2:2c:65:c5:b4:78:25:26:4a:36:e2: dd:b8:42:1a:f4:2a:89:7b:58:21:d6:a5:62:fd:9b:ba:7d:96: 0d:76:5a:57:bf:e6:bf:ab:3e:7d:2b:7a:d7:2c:38:d3:e7:26: f0:f5:64:a6:37:56:38:d4:42:01:e0:d0:e7:a5:4c:3e:a0:f4: e8:f4:92:d8:49:73:81:43:65:22:b1:fe:48:03:73:42:70:39: 8a:e0:5e:c3:cf:73:c6:6d:18:fd:89:9d:d8:fb:3a:c8:77:35: 59:a5:55:76:f6:34:7d:34:2f:d3:46:37:e7:c8:cd:59:21:76: 8c:6f:53:40:eb:d8:f4:ed:30:e7:5b:4c:82:90:8d:3e:1e:29: 1d:ab:62:13:22:43:49:8d:4e:c0:ed:8e:aa:90:4f:58:eb:4d: dd:22:26:4c:e9:93:03:cb:de:00:1b:26:e7:0b:41:0a:85:31: a6:70:2c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8fZYzwVoyumJgmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ0MmFhYTUtNmNiMi00NjliLThhZmYtYjIyYTJmZGRmMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji2eReSr0KHlrYBW9dfioI3QpWL/9VE+CnP4 0k+lb2jvqzpzGLmzqbpum2PIJwwmYYKLtIzixq+2cUeXJjAK7lfvXD6lHPeHKT47 sQ4Cixkcxaxg5rzhUhevdjuY3Dt85t37EFLKimmPPwhxB854hToYWsH6L3+aU6Nf HkQidhC1SuFRGRZbFo/WJDF7jt5X1DxXmc+uX6cQwBiYqzAnCYLihVtI+MRj1+br mSgi4EPuamx2KL6yG9Y0gM6SOpPxC3B7Hfb5jsqvQ4mSswEX3b7pVQUM0qJFtLwE NaeYWbu0pEq4e9fkFOLxZhvUDsRPouuJ49e51HX2Uzzslm8ZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZWzsoC6GEgtHBamEm2lCzp90P5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTJjZTU4N2QtYzNkOC0z NjMzLTljYmItODVjZDVkY2QxZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlQkAgcjruxolc+8e8PSZvCaYgnV1E5PaUR8HRDhp9YZmQcI9PjPMnR vKZP8YMP65JzzXZ6ZEBQSlrVMLgLbhgtsUcjY824B8FiUmfnZsbSLGXFtHglJko2 4t24Qhr0Kol7WCHWpWL9m7p9lg12Wle/5r+rPn0retcsONPnJvD1ZKY3VjjUQgHg 0OelTD6g9Oj0kthJc4FDZSKx/kgDc0JwOYrgXsPPc8ZtGP2Jndj7Osh3NVmlVXb2 NH00L9NGN+fIzVkhdoxvU0Dr2PTtMOdbTIKQjT4eKR2rYhMiQ0mNTsDtjqqQT1jr Td0iJkzpkwPL3gAbJucLQQqFMaZwLPI= -----END CERTIFICATE-----Generated at Tue Sep 22 02:04:19 2026 by rpki-client