$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa File: 04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa (raw, json) Hash identifier: +XTj8a6d3qf4iRbTBI6xRDNXVZcaoaHLF29D9+VYIVg= Subject key identifier: 8C:D6:EC:D6:06:CE:C4:0B:2D:B4:73:1D:75:0F:9B:A2:6F:58:24:D3 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16138E5E71EF255420A5B00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 71.89.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:38:e5:e7:1e:f2:55:42:0a:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=6d2c4f3c-b92d-4dd2-aacf-fb46907c5a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:9a:70:60:be:a7:bd:71:ef:41:25:76:89: 74:24:eb:b0:67:d6:cc:7f:2a:1a:a6:bf:54:b2:1c: a8:a4:35:5e:6e:0f:a5:d4:bb:d3:6d:7a:5e:48:a8: f8:cc:77:f4:3a:de:79:92:49:8e:3d:72:d9:32:d5: 6c:a4:78:0d:1e:9a:ab:a7:e2:ad:0f:c8:1e:92:4c: 54:5d:e8:6c:e5:c6:74:83:d2:4c:02:0e:c5:30:48: 47:12:30:4b:05:87:f9:19:41:cf:e4:ba:82:14:5b: 84:52:ac:49:1c:38:70:ea:ce:61:45:7f:d4:75:35: a4:df:88:2a:81:67:64:c3:93:cc:93:87:ce:a9:d2: fa:85:a0:57:5f:90:ab:02:59:7b:c1:cd:67:d1:52: 4b:e6:21:34:7d:a6:04:77:9a:95:81:85:87:ca:10: 06:a3:28:41:ba:e3:49:d5:21:07:ab:00:de:46:3a: 37:67:f9:f3:df:a6:81:16:68:9f:49:b2:ff:c7:10: 4b:b9:d8:3a:c8:3e:2a:a0:a8:91:32:c9:f2:68:e0: 3e:f7:4e:32:f9:86:fd:d8:72:bf:cf:86:23:1d:91: 74:53:cd:fb:08:ac:63:d2:3c:90:40:f8:36:95:55: 31:c9:9f:56:5e:b1:33:b5:a4:61:00:33:d5:87:85: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D6:EC:D6:06:CE:C4:0B:2D:B4:73:1D:75:0F:9B:A2:6F:58:24:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.89.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bd:68:cf:25:61:c7:69:c9:a3:69:c3:66:9d:e0:83:e2:2f: c9:df:b3:27:af:40:7f:13:49:f0:2e:07:3e:7b:6d:a6:cf:a0: dd:ce:f9:dc:b9:5a:10:29:85:2b:d9:87:d4:a0:e0:48:95:8f: c7:c2:77:28:ba:f8:b6:30:f3:62:06:94:7b:40:7b:54:aa:6e: 7b:2b:9c:04:90:7e:33:ff:d7:3e:2b:12:26:89:2c:16:f0:a4: 5b:11:0c:e5:86:4d:8e:47:32:9f:93:a5:7f:d2:13:1c:da:00: 63:32:18:d5:28:31:c4:7b:fa:e3:c8:05:77:44:30:36:e4:94: e1:f4:8f:9c:b0:36:a2:19:08:5d:25:69:07:4c:df:4b:f1:81: 6a:bd:2a:67:36:55:94:27:15:35:20:80:67:2d:be:70:d4:5d: d5:8c:84:82:84:c8:1c:9f:85:9f:c7:44:90:74:f4:3b:1a:4e: 12:01:d0:d8:9d:f5:c7:59:c4:8f:fe:2f:63:f5:5f:c2:de:5a: 05:53:b9:76:13:b6:0f:1a:65:12:7f:68:cf:20:ea:63:ed:90: 22:4b:a6:13:96:bd:f2:9c:48:50:33:40:37:9e:66:9e:33:eb: 40:4c:61:b7:e8:ef:c1:93:9a:1d:c1:ca:63:59:30:32:b1:0e: d8:0e:68:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYTjl5x7yVUIKWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NmQyYzRmM2MtYjkyZC00ZGQyLWFhY2YtZmI0NjkwN2M1YTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd6acGC+p71x70Eldol0JOuwZ9bMfyoapr9U shyopDVebg+l1LvTbXpeSKj4zHf0Ot55kkmOPXLZMtVspHgNHpqrp+KtD8gekkxU Xehs5cZ0g9JMAg7FMEhHEjBLBYf5GUHP5LqCFFuEUqxJHDhw6s5hRX/UdTWk34gq gWdkw5PMk4fOqdL6haBXX5CrAll7wc1n0VJL5iE0faYEd5qVgYWHyhAGoyhBuuNJ 1SEHqwDeRjo3Z/nz36aBFmifSbL/xxBLudg6yD4qoKiRMsnyaOA+904y+Yb92HK/ z4YjHZF0U837CKxj0jyQQPg2lVUxyZ9WXrEztaRhADPVh4WNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzW7NYGzsQLLbRzHXUPm6JvWCTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDRiMmIxY2UtMmIyZi0z OTU4LWI0NGQtOWI1NDFmZGY5NDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm9aM8lYcdpyaNpw2ad4IPiL8nfsyevQH8TSfAuBz57babPoN3O+dy5 WhAphSvZh9Sg4EiVj8fCdyi6+LYw82IGlHtAe1SqbnsrnASQfjP/1z4rEiaJLBbw pFsRDOWGTY5HMp+TpX/SExzaAGMyGNUoMcR7+uPIBXdEMDbklOH0j5ywNqIZCF0l aQdM30vxgWq9Kmc2VZQnFTUggGctvnDUXdWMhIKEyByfhZ/HRJB09DsaThIB0Nid 9cdZxI/+L2P1X8LeWgVTuXYTtg8aZRJ/aM8g6mPtkCJLphOWvfKcSFAzQDeeZp4z 60BMYbfo78GTmh3BymNZMDKxDtgOaEo= -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:05 2025 by rpki-client