$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a67347a-344c-3d80-9919-0549eb26a2e1.roa File: 1a67347a-344c-3d80-9919-0549eb26a2e1.roa (raw, json) Hash identifier: WlWxa/EJyGmUFG7X7QnhUYZvua0GVmFRy/6jNn/x2WQ= Subject key identifier: D2:41:62:66:1A:66:11:5C:86:7B:CB:16:3D:C2:B5:53:87:DA:CB:1A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F4B66C9AC8AD18AFD8F386800 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a67347a-344c-3d80-9919-0549eb26a2e1.roa Signing time: Fri 25 Sep 2026 17:48:11 +0000 ROA not before: Fri 25 Sep 2026 17:48:11 +0000 ROA not after: Thu 24 Dec 2026 18:48:11 +0000 asID: 23200 IP address blocks: 16.98.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:66:c9:ac:8a:d1:8a:fd:8f:38:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 25 17:48:11 2026 GMT Not After : Dec 24 18:48:11 2026 GMT Subject: CN=344c3376-dec7-4ff3-9833-7eb89dfe679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:89:35:25:bb:f9:2e:9c:1d:71:9f:8c:66: 58:20:4e:29:b0:f8:7a:32:0c:32:fd:a0:e0:7e:59: ec:9c:af:b6:aa:60:cf:7e:7a:fb:51:0e:14:d0:7e: c0:ca:34:b2:ce:4f:b8:36:47:88:dd:7b:05:92:32: 44:27:df:2e:37:87:8b:1f:d1:d3:21:18:37:b7:49: a9:e8:9a:27:28:f7:a5:b5:63:16:18:fb:42:ae:40: 0b:0e:8e:41:43:4d:7f:57:94:10:cd:4e:df:9b:51: f2:5a:49:4f:47:a5:6d:ca:24:28:ac:38:47:32:f5: ca:36:22:75:1d:f2:ab:16:71:40:7e:82:6a:fd:50: 64:12:7b:b7:ab:18:e1:15:b5:5f:5f:01:66:08:8c: 9e:73:a3:0b:a5:47:ea:b7:39:1c:4b:db:68:18:c1: 03:14:71:11:4a:be:de:bc:62:82:70:f8:2b:5c:64: 4d:66:5e:11:2d:03:2c:e0:53:e2:df:e2:fa:04:2f: ea:5d:65:7c:83:81:a5:cd:5c:b6:5c:c1:8e:6f:1e: 96:ae:e5:4c:58:ca:b2:c5:00:5c:99:27:31:7f:18: 96:2a:6c:f8:15:32:0c:3d:2b:ae:ea:cd:0c:91:e4: 20:4e:3b:44:43:94:b8:66:4c:7a:4d:ad:2e:a3:ae: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:62:66:1A:66:11:5C:86:7B:CB:16:3D:C2:B5:53:87:DA:CB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a67347a-344c-3d80-9919-0549eb26a2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 16.98.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:69:04:43:46:78:f9:e3:cb:12:f6:05:61:4b:a8:ae:54:e4: 9a:c0:12:75:cf:2d:6f:e5:11:0f:7a:d4:84:77:19:1e:af:1e: ff:00:5c:ba:5b:86:0b:bc:ce:a7:2c:24:36:45:c7:6b:b0:11: 4a:e8:05:18:2c:11:3d:61:60:7b:1f:3d:a0:b8:bc:9a:76:22: 23:38:41:88:5c:5a:7a:71:f2:e0:90:6d:85:90:da:46:da:c9: 54:ac:af:e1:c4:0c:b2:44:5e:2d:fe:10:b0:74:98:1e:d0:a1: c4:55:fa:d0:0e:89:49:0a:10:ce:bc:dc:46:ae:7c:59:a3:b5: 49:2a:18:d2:7a:c3:30:a3:32:60:43:e1:f3:c1:bc:3c:d2:d3: 42:8c:93:53:5a:ab:75:1c:1c:7b:09:15:f8:65:c2:31:e4:c0: 17:1a:20:a7:6a:22:09:e6:dd:f9:4e:c4:05:33:45:e0:44:e3: 37:0e:3c:e5:53:ff:ad:a5:05:6e:2c:88:65:69:49:ef:db:70: 44:65:8d:a6:32:26:1c:78:ce:44:14:82:ef:2a:2f:a6:91:e8: b0:5e:d1:86:f5:ba:f3:fa:8d:69:d6:49:94:51:83:44:7c:91: ad:6b:f6:63:df:42:fc:52:f8:0c:d0:f6:28:42:b3:1f:14:2e: ff:3c:6f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LZsmsitGK/Y84aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDkyNTE3NDgxMVoXDTI2MTIyNDE4NDgxMVowLzEtMCsGA1UEAxMk MzQ0YzMzNzYtZGVjNy00ZmYzLTk4MzMtN2ViODlkZmU2NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+CJNSW7+S6cHXGfjGZYIE4psPh6Mgwy/aDg flnsnK+2qmDPfnr7UQ4U0H7AyjSyzk+4NkeI3XsFkjJEJ98uN4eLH9HTIRg3t0mp 6JonKPeltWMWGPtCrkALDo5BQ01/V5QQzU7fm1HyWklPR6VtyiQorDhHMvXKNiJ1 HfKrFnFAfoJq/VBkEnu3qxjhFbVfXwFmCIyec6MLpUfqtzkcS9toGMEDFHERSr7e vGKCcPgrXGRNZl4RLQMs4FPi3+L6BC/qXWV8g4GlzVy2XMGObx6WruVMWMqyxQBc mScxfxiWKmz4FTIMPSuu6s0MkeQgTjtEQ5S4Zkx6Ta0uo67phwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJBYmYaZhFchnvLFj3CtVOH2ssaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWE2NzM0N2EtMzQ0Yy0z ZDgwLTk5MTktMDU0OWViMjZhMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDEGJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9pBENGePnjyxL2BWFLqK5U5JrAEnXPLW/lEQ961IR3GR6vHv8AXLpb hgu8zqcsJDZFx2uwEUroBRgsET1hYHsfPaC4vJp2IiM4QYhcWnpx8uCQbYWQ2kba yVSsr+HEDLJEXi3+ELB0mB7QocRV+tAOiUkKEM683EaufFmjtUkqGNJ6wzCjMmBD 4fPBvDzS00KMk1Naq3UcHHsJFfhlwjHkwBcaIKdqIgnm3flOxAUzReBE4zcOPOVT /62lBW4siGVpSe/bcERljaYyJhx4zkQUgu8qL6aR6LBe0Yb1uvP6jWnWSZRRg0R8 ka1r9mPfQvxS+AzQ9ihCsx8ULv88b+Q= -----END CERTIFICATE-----Generated at Wed Sep 30 19:31:18 2026 by rpki-client