$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aeab5643-3477-3a9e-8630-37e02ce71727.roa File: aeab5643-3477-3a9e-8630-37e02ce71727.roa (raw, json) Hash identifier: k6QBbjvijdC6f4/Uy+KKtCsl2RlyQ12NDgP9Ij+Yf0k= Subject key identifier: 3D:7B:C3:98:B0:CF:BB:A2:FE:8D:C1:9F:01:01:E5:6D:B7:3F:CF:D4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F0D6CE2841EF442B5327407C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aeab5643-3477-3a9e-8630-37e02ce71727.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 20115 IP address blocks: 192.61.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e2:84:1e:f4:42:b5:32:74:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=b2fad83a-6e45-42be-9ae9-8143197fccb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:38:bd:2f:4d:b3:c9:22:f6:15:69:82:54: c6:53:42:d8:9c:78:91:ce:7b:26:30:0d:84:66:8d: 71:d2:cb:e0:da:34:57:a1:7f:59:ca:a8:85:a8:f4: 17:a6:f4:b6:b2:2c:7c:2c:81:ba:43:7e:d2:64:2e: 2e:03:16:ca:5a:a9:03:9d:d0:cd:87:f4:c9:48:ad: 6f:7d:bc:73:51:3e:2b:f0:ce:6f:c5:dc:20:56:8e: 71:51:89:33:e5:e6:4e:84:5d:3a:c5:0f:d2:11:12: 17:9b:85:cc:19:4a:35:3e:61:fb:0e:be:b6:82:45: 69:4d:96:de:eb:2d:00:3e:70:8c:00:99:d7:ac:e1: 5b:7d:a7:ec:ad:ec:d6:bd:4c:90:2f:60:18:06:66: 3a:a1:c0:dc:e0:87:63:88:04:a6:77:dd:27:c9:9b: 52:af:02:9e:34:bb:16:3c:78:6b:6f:d0:de:0f:3f: 8e:19:b6:2f:36:12:89:0a:0b:66:bf:bc:99:3a:e6: 7d:ea:9d:e4:55:5f:4e:e3:95:cd:7f:e4:ae:c7:63: e1:33:5c:35:5c:25:63:bb:f9:c3:1d:4c:86:b2:2a: 38:26:0b:88:0e:fe:5f:0a:1c:42:59:47:17:b6:c8: 0f:c9:bc:62:07:7f:b5:3c:07:f6:e2:c2:20:ea:6d: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7B:C3:98:B0:CF:BB:A2:FE:8D:C1:9F:01:01:E5:6D:B7:3F:CF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aeab5643-3477-3a9e-8630-37e02ce71727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.61.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:50:f6:00:9b:02:b6:69:0f:d8:ad:42:5e:1f:dc:0e:80:d2: 2b:f3:15:04:6c:1a:29:46:43:f1:b6:1f:18:38:8d:62:3b:fd: 81:50:7f:88:e8:5a:be:29:57:74:a5:ba:3f:1a:2c:14:ed:3f: 36:a0:fb:89:28:b7:10:98:a8:64:31:b4:1a:11:dd:8f:1e:46: 9f:76:c2:ee:a3:aa:f2:f7:1e:6f:fd:19:9a:37:9f:65:8c:6e: 72:69:da:b5:00:ba:34:3e:27:4b:ac:59:cd:fc:18:db:11:0b: c7:51:e8:16:72:5b:b1:36:ca:4f:37:d9:fd:af:9b:4e:7b:43: 7e:87:88:05:9b:ce:b5:27:af:b2:ce:94:21:03:39:a9:13:df: 6d:b1:6f:08:c2:ba:f9:a6:00:51:4c:b8:79:46:43:8d:cd:30: da:cc:c9:95:68:d1:86:9c:12:13:d0:ff:3a:a1:3b:ac:07:03: 28:0a:33:95:66:2a:af:8f:16:42:77:18:6e:ba:70:93:e3:3b: e3:7a:72:3d:2b:3c:d8:52:b8:5e:37:de:e6:7f:5a:1a:6e:ad: 72:f6:da:bd:43:da:46:d2:79:69:f8:37:8a:b1:7a:83:d1:2b: dd:eb:4a:c8:cc:05:1c:70:13:53:4f:14:20:8c:cd:c0:4a:a8: 65:9d:ca:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOKEHvRCtTJ0B8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YjJmYWQ4M2EtNmU0NS00MmJlLTlhZTktODE0MzE5N2ZjY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljs4vS9Ns8ki9hVpglTGU0LYnHiRznsmMA2E Zo1x0svg2jRXoX9ZyqiFqPQXpvS2six8LIG6Q37SZC4uAxbKWqkDndDNh/TJSK1v fbxzUT4r8M5vxdwgVo5xUYkz5eZOhF06xQ/SERIXm4XMGUo1PmH7Dr62gkVpTZbe 6y0APnCMAJnXrOFbfafsrezWvUyQL2AYBmY6ocDc4IdjiASmd90nyZtSrwKeNLsW PHhrb9DeDz+OGbYvNhKJCgtmv7yZOuZ96p3kVV9O45XNf+Sux2PhM1w1XCVju/nD HUyGsio4JguIDv5fChxCWUcXtsgPybxiB3+1PAf24sIg6m0RcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD17w5iwz7ui/o3BnwEB5W23P8/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWVhYjU2NDMtMzQ3Ny0z YTllLTg2MzAtMzdlMDJjZTcxNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwD1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5Q9gCbArZpD9itQl4f3A6A0ivzFQRsGilGQ/G2Hxg4jWI7/YFQf4jo Wr4pV3Sluj8aLBTtPzag+4kotxCYqGQxtBoR3Y8eRp92wu6jqvL3Hm/9GZo3n2WM bnJp2rUAujQ+J0usWc38GNsRC8dR6BZyW7E2yk832f2vm057Q36HiAWbzrUnr7LO lCEDOakT322xbwjCuvmmAFFMuHlGQ43NMNrMyZVo0YacEhPQ/zqhO6wHAygKM5Vm Kq+PFkJ3GG66cJPjO+N6cj0rPNhSuF433uZ/WhpurXL22r1D2kbSeWn4N4qxeoPR K93rSsjMBRxwE1NPFCCMzcBKqGWdyr4= -----END CERTIFICATE-----Generated at Tue Sep 29 20:01:50 2026 by rpki-client