$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa File: 857c88c7-6202-315f-a120-c9da40381623.roa (raw, json) Hash identifier: 1tf18nVPYP8wktr203cjAczqzrSzQxOKKTEpKi+wdU0= Subject key identifier: 91:F5:6A:C8:1D:CB:59:12:A2:73:06:25:0D:A0:D0:90:7F:D4:3D:DE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD5D9701FCA20855D5680 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 68.188.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d5:d9:70:1f:ca:20:85:5d:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=b18a8112-dede-4bb4-8c31-3b3de86757f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8c:68:fa:1f:3d:de:f1:33:19:b0:dd:f0:df: 9f:b9:5d:f6:c4:6e:51:15:45:57:26:cc:ca:ed:10: 72:92:98:1e:f3:42:78:e8:b6:f6:c1:08:45:28:87: 7a:d2:f5:13:87:28:1d:50:a6:9e:d0:f7:4d:20:f6: 44:ab:71:95:38:4b:8c:e8:14:58:8c:04:f2:8b:d4: d0:d7:3b:ce:99:f9:77:cb:e3:f9:6b:d8:58:d7:4f: f5:8e:06:5f:59:8e:ec:78:7f:28:42:1a:b2:b0:ec: d1:df:1a:88:c6:2e:39:0e:c1:57:ef:d9:70:78:0f: 01:bc:bb:3d:63:ba:2f:a2:3e:54:39:89:4f:1d:2e: 0e:22:ca:ae:d4:a0:f3:8d:90:08:c5:e5:9d:45:75: 2f:a2:42:11:6c:95:61:53:a7:8b:c3:25:3b:d9:d3: 71:79:a8:de:9e:d3:b8:f8:1f:97:49:77:4d:78:75: 15:39:ac:7c:e6:4c:b6:dc:ef:2f:5b:f2:b4:e0:af: 91:d0:fe:77:94:ad:8a:2f:bf:3c:ff:43:fd:40:22: 33:12:ab:c9:94:e5:e9:8d:da:e0:32:ff:e5:58:b6: 0a:73:74:bf:71:68:a3:76:fb:0a:8c:09:f8:25:3d: 00:fd:7d:dd:1f:ae:43:e3:06:63:ce:fa:26:15:61: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:6A:C8:1D:CB:59:12:A2:73:06:25:0D:A0:D0:90:7F:D4:3D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.188.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:75:05:48:f5:1b:9e:5a:26:3f:f5:6e:f5:3a:d4:b0:49:a5: 85:c8:ef:28:be:13:90:30:e0:89:97:42:0b:8c:34:62:70:bb: 75:bf:37:90:56:1b:d5:fe:2c:45:fe:81:aa:97:e3:d2:74:d3: 1f:15:d0:dc:69:c4:4e:2a:cd:2b:06:06:a4:87:6c:ea:34:c7: f7:7e:88:94:ea:c3:79:d7:34:e9:70:52:d4:a4:e6:cd:27:04: 6a:8e:c8:22:21:a1:f9:c9:d7:63:8d:6d:6e:ef:cf:1c:22:8c: 76:a2:28:90:8f:c9:b8:8d:c8:30:e9:06:7b:32:9c:65:e6:44: d4:ab:d6:d6:d9:14:d6:bb:a2:d0:8f:50:ba:25:ba:d1:d5:31: a1:3e:36:42:ba:62:dd:61:26:b8:b9:f1:e7:14:1c:8a:20:35: bc:ac:21:96:5d:21:97:76:a7:b2:90:c9:8b:66:02:d0:76:87: cc:0c:36:14:78:84:fe:0e:2d:0a:39:2a:7f:62:9f:31:e0:39: a5:88:d3:67:c7:39:d0:be:33:37:b7:f4:ef:9e:59:ca:d7:67: ec:89:fd:92:d3:43:c2:4c:d1:9b:d8:26:2b:84:12:a8:90:cc: a1:a5:16:8c:bd:5a:9f:d0:da:f3:e4:e3:ab:7e:45:8c:7a:8f: 16:55:42:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdXZcB/KIIVdVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YjE4YTgxMTItZGVkZS00YmI0LThjMzEtM2IzZGU4Njc1N2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ixo+h893vEzGbDd8N+fuV32xG5RFUVXJszK 7RBykpge80J46Lb2wQhFKId60vUThygdUKae0PdNIPZEq3GVOEuM6BRYjATyi9TQ 1zvOmfl3y+P5a9hY10/1jgZfWY7seH8oQhqysOzR3xqIxi45DsFX79lweA8BvLs9 Y7ovoj5UOYlPHS4OIsqu1KDzjZAIxeWdRXUvokIRbJVhU6eLwyU72dNxeajentO4 +B+XSXdNeHUVOax85ky23O8vW/K04K+R0P53lK2KL788/0P9QCIzEqvJlOXpjdrg Mv/lWLYKc3S/cWijdvsKjAn4JT0A/X3dH65D4wZjzvomFWEvWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH1asgdy1kSonMGJQ2g0JB/1D3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODU3Yzg4YzctNjIwMi0z MTVmLWExMjAtYzlkYTQwMzgxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLx6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANl1BUj1G55aJj/1bvU61LBJpYXI7yi+E5Aw4ImXQguMNGJwu3W/N5BW G9X+LEX+gaqX49J00x8V0NxpxE4qzSsGBqSHbOo0x/d+iJTqw3nXNOlwUtSk5s0n BGqOyCIhofnJ12ONbW7vzxwijHaiKJCPybiNyDDpBnsynGXmRNSr1tbZFNa7otCP ULolutHVMaE+NkK6Yt1hJri58ecUHIogNbysIZZdIZd2p7KQyYtmAtB2h8wMNhR4 hP4OLQo5Kn9inzHgOaWI02fHOdC+Mze39O+eWcrXZ+yJ/ZLTQ8JM0ZvYJiuEEqiQ zKGlFoy9Wp/Q2vPk46t+RYx6jxZVQo4= -----END CERTIFICATE-----Generated at Fri Oct 9 22:42:07 2026 by rpki-client