$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa File: 86dd6601-3722-3e53-99be-3f9149517813.roa (raw, json) Hash identifier: D81PxVdF+J65Aih7qeJ0ZZhc4lIWEKgqsk3WDqFGlAY= Subject key identifier: 50:BF:EE:68:5C:ED:31:3F:C6:FC:C0:B3:F8:D7:BF:24:9F:76:91:B9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD7CCAFAB6E62971AF578 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 68.191.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d7:cc:af:ab:6e:62:97:1a:f5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=9dfd979d-5136-41aa-bef9-a316fb23cdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:29:cf:9c:01:65:d4:c2:f9:8e:9f:47:30: 28:6f:55:54:5c:cd:fd:97:22:33:94:d5:77:0d:db: 19:1c:a1:a8:99:65:20:23:e1:9d:6a:a1:71:bf:ea: 96:d7:21:9b:15:c3:1d:d9:88:cf:d7:ec:a7:7b:9b: 6e:18:58:2b:cb:ba:56:d6:5e:a8:5d:f2:45:79:3b: 10:0c:a4:89:7f:bd:3e:59:a4:d4:49:01:66:b6:fc: 9d:99:68:79:fd:f7:20:07:2b:a0:88:81:3e:b0:dd: 23:3b:f8:c0:b5:0c:b1:0e:9d:cb:dd:a8:82:b2:1d: ea:e9:b8:03:3c:b6:4f:18:85:f3:6a:6d:df:2f:7d: 03:10:2d:1d:51:76:cd:9a:e1:1a:54:ef:33:71:18: 8b:6a:2d:61:95:4c:be:bc:f1:5f:8e:56:b9:a6:95: 59:9e:60:c5:f1:c7:50:b4:98:94:9f:ce:fe:9d:2b: 34:0d:84:c8:18:a9:dc:70:f7:e3:23:c4:8d:da:e7: 73:77:2a:56:50:d6:d6:c4:10:91:24:1f:e0:83:b3: 3a:dc:32:49:ba:f7:be:15:26:e0:5c:26:7d:93:c9: 76:0d:b7:18:5a:74:9b:61:fb:c7:d4:c9:72:80:89: 6e:91:1c:17:c4:24:b3:7a:14:99:b4:7f:68:03:dd: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BF:EE:68:5C:ED:31:3F:C6:FC:C0:B3:F8:D7:BF:24:9F:76:91:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:fe:a8:4d:72:3a:49:2b:4d:c1:88:e9:d2:51:95:22:03:f0: 12:b6:65:a3:40:35:d7:f0:0a:1c:08:39:ee:34:35:2f:c0:24: d1:7e:1d:a1:94:ce:35:d6:61:e1:92:de:1c:85:63:f7:9c:06: 94:f5:22:dc:98:c3:74:28:92:de:fd:ec:ef:a6:3f:2d:f4:39: fb:6c:7e:d1:66:c7:a1:98:54:6c:61:d7:f8:cc:4a:d0:85:48: af:68:19:3f:a0:ff:b1:a4:b2:fc:95:db:f4:ed:ba:52:52:94: 0a:5b:c4:39:1c:7b:fa:17:df:2c:28:a1:4f:1a:8f:75:e6:23: 92:7a:15:28:5e:bb:a8:f7:60:92:10:f1:4e:a5:5c:fa:95:0a: ea:34:0d:8d:e8:45:54:22:f1:be:17:54:ba:9a:08:92:8e:5d: 19:69:52:c4:c7:b5:5e:80:ef:30:cc:75:21:64:d5:df:66:e9: 84:5a:7a:4a:fa:13:c2:64:25:d3:dc:79:f4:4a:6e:d4:2b:01: 98:9b:1a:24:42:dd:cb:67:f7:df:e8:e1:9b:99:d2:15:8c:27: 5a:b0:b8:35:96:18:b9:25:c9:7f:17:8b:54:4c:14:30:a6:ae: 14:eb:ce:45:22:1e:f5:22:8b:31:89:ea:8c:85:40:de:0a:d0: 41:19:61:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdfMr6tuYpca9XgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OWRmZDk3OWQtNTEzNi00MWFhLWJlZjktYTMxNmZiMjNjZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqMpz5wBZdTC+Y6fRzAob1VUXM39lyIzlNV3 DdsZHKGomWUgI+GdaqFxv+qW1yGbFcMd2YjP1+yne5tuGFgry7pW1l6oXfJFeTsQ DKSJf70+WaTUSQFmtvydmWh5/fcgByugiIE+sN0jO/jAtQyxDp3L3aiCsh3q6bgD PLZPGIXzam3fL30DEC0dUXbNmuEaVO8zcRiLai1hlUy+vPFfjla5ppVZnmDF8cdQ tJiUn87+nSs0DYTIGKnccPfjI8SN2udzdypWUNbWxBCRJB/gg7M63DJJuve+FSbg XCZ9k8l2DbcYWnSbYfvH1MlygIlukRwXxCSzehSZtH9oA91ufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC/7mhc7TE/xvzAs/jXvySfdpG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODZkZDY2MDEtMzcyMi0z ZTUzLTk5YmUtM2Y5MTQ5NTE3ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX+qE1yOkkrTcGI6dJRlSID8BK2ZaNANdfwChwIOe40NS/AJNF+HaGU zjXWYeGS3hyFY/ecBpT1ItyYw3Qokt797O+mPy30OftsftFmx6GYVGxh1/jMStCF SK9oGT+g/7GksvyV2/TtulJSlApbxDkce/oX3ywooU8aj3XmI5J6FSheu6j3YJIQ 8U6lXPqVCuo0DY3oRVQi8b4XVLqaCJKOXRlpUsTHtV6A7zDMdSFk1d9m6YRaekr6 E8JkJdPcefRKbtQrAZibGiRC3ctn99/o4ZuZ0hWMJ1qwuDWWGLklyX8Xi1RMFDCm rhTrzkUiHvUiizGJ6oyFQN4K0EEZYWk= -----END CERTIFICATE-----Generated at Sun Oct 11 07:57:59 2026 by rpki-client