$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa File: 749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa (raw, json) Hash identifier: jAt+C5L6m98AoSNS0Qj4k3tIgmCO7xGuPXi772ipwEQ= Subject key identifier: 75:ED:21:FB:D0:2D:D3:75:10:A9:8F:D1:BF:C1:59:A1:94:D9:B8:DB Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584A814658A4A46034E8D0B95180 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 6079 IP address blocks: 24.42.229.0/24 maxlen: 24 24.42.230.0/23 maxlen: 24 24.42.232.0/21 maxlen: 24 24.42.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:58:a4:a4:60:34:e8:d0:b9:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b3ba39c7-d0c0-40a2-ba54-208a039af5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5d:1b:cc:fd:52:33:a5:f3:19:27:f4:52:c1: df:d9:70:5b:7b:fc:d9:d6:4a:22:71:e9:c4:87:46: 17:67:23:06:6f:2b:04:9c:28:7a:85:a5:a4:51:9e: ff:6b:16:69:4e:04:85:04:fe:c7:53:f4:1b:33:ec: 9c:95:2f:dc:c6:60:ff:ca:e2:24:f3:f9:31:c8:86: 68:71:ef:58:fa:13:c1:ce:40:7b:e0:7d:4f:76:e7: 5e:a0:ce:92:e6:b9:6f:cc:2c:d6:bc:f0:bc:78:8b: 7b:a4:63:43:80:5d:c9:f8:8a:3e:e9:5d:b0:cb:d0: 87:ae:3f:90:96:00:af:49:9a:4a:c5:8d:9b:0e:15: 92:5f:f0:b9:32:d9:89:64:de:ab:3b:bc:3b:29:e3: 2c:40:18:a9:11:1c:4e:3b:1a:28:87:c8:80:8d:de: 7f:e8:9c:6c:87:36:53:80:eb:9b:ce:e0:a3:e0:28: 22:96:19:b5:1e:32:21:c9:45:63:d2:a3:1c:79:3d: 0b:81:ee:64:69:6b:a5:76:63:d6:c3:1b:5f:f7:e4: 7d:3f:ad:7c:b3:4b:e2:82:26:c8:3f:bf:f4:e0:7f: 49:32:c7:3f:6c:62:0b:da:2f:78:bf:b2:4c:00:1b: 51:b0:e7:61:21:ec:9c:94:e7:c3:6f:09:1b:27:7d: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:ED:21:FB:D0:2D:D3:75:10:A9:8F:D1:BF:C1:59:A1:94:D9:B8:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/749fd44a-c8a8-393d-a36d-8e8da9d8468b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 24.42.229.0-24.42.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:93:ff:9b:a1:7f:cf:96:09:53:1d:4e:db:59:87:4e:d1: 2f:e9:8d:42:89:79:35:35:ae:ed:b0:de:c1:53:95:e0:f4:5c: ea:f6:49:f2:a6:32:53:95:32:eb:b7:37:56:78:06:be:54:d9: 88:16:33:67:94:4d:1b:9e:5d:3a:e8:bb:d3:39:ed:14:da:44: 54:d0:7e:e6:c3:7e:7e:28:7a:65:da:11:a7:f7:50:a5:bb:10: 23:bb:38:cb:f2:45:a0:f2:a2:6f:57:ee:79:63:51:09:4d:ca: 53:1e:00:46:d3:70:6c:ad:c0:a0:9b:16:81:a4:2c:82:05:ba: e2:69:26:91:b1:a0:35:9f:43:c3:c0:2f:0d:9d:11:63:e3:d5: a0:56:25:f2:b5:74:6e:37:b6:0a:d9:44:16:96:59:45:52:0e: 65:5f:ec:68:30:fa:41:25:c7:b2:58:35:dd:8a:ec:6e:44:1d: 05:7c:af:08:1c:d1:3d:98:9f:17:e4:70:0c:7e:88:c2:7a:02: 7d:34:ed:43:36:89:07:dd:17:d3:f9:67:d0:cd:39:08:2b:9d: 8f:f3:84:ac:8c:c5:50:82:75:da:76:7c:2b:88:53:63:e1:05: cd:30:c7:80:cd:c8:dc:87:a5:69:a8:97:92:5e:c8:9c:7e:7b: ed:c6:41:e6 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEqBRlikpGA06NC5UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjNiYTM5YzctZDBjMC00MGEyLWJhNTQtMjA4YTAzOWFmNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl0bzP1SM6XzGSf0UsHf2XBbe/zZ1koicenE h0YXZyMGbysEnCh6haWkUZ7/axZpTgSFBP7HU/QbM+yclS/cxmD/yuIk8/kxyIZo ce9Y+hPBzkB74H1PdudeoM6S5rlvzCzWvPC8eIt7pGNDgF3J+Io+6V2wy9CHrj+Q lgCvSZpKxY2bDhWSX/C5MtmJZN6rO7w7KeMsQBipERxOOxooh8iAjd5/6JxshzZT gOubzuCj4Cgilhm1HjIhyUVj0qMceT0Lge5kaWuldmPWwxtf9+R9P618s0vigibI P7/04H9JMsc/bGIL2i94v7JMABtRsOdhIeyclOfDbwkbJ31FXwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFHXtIfvQLdN1EKmP0b/BWaGU2bjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNzQ5ZmQ0NGEtYzhhOC0z OTNkLWEzNmQtOGU4ZGE5ZDg0NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAAYKuUD AwAYKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA5IJP/m6F/z5YJUx1O21mHTtEv6Y1CiXk1Na7tsN7BU5Xg 9Fzq9knypjJTlTLrtzdWeAa+VNmIFjNnlE0bnl066LvTOe0U2kRU0H7mw35+KHpl 2hGn91CluxAjuzjL8kWg8qJvV+55Y1EJTcpTHgBG03BsrcCgmxaBpCyCBbriaSaR saA1n0PDwC8NnRFj49WgViXytXRuN7YK2UQWlllFUg5lX+xoMPpBJceyWDXdiuxu RB0FfK8IHNE9mJ8X5HAMfojCegJ9NO1DNokH3RfT+WfQzTkIK52P84SsjMVQgnXa dnwriFNj4QXNMMeAzcjch6VpqJeSXsicfnvtxkHm -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:04 2025 by rpki-client