$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16f97a42-3892-371a-bfe2-5796b086b3c4.roa File: 16f97a42-3892-371a-bfe2-5796b086b3c4.roa (raw, json) Hash identifier: E9/L0nkMzMql3IDW0pb8NHFAq5jsw8Lz5riONw8kr2U= Subject key identifier: 2A:B5:A2:50:BC:0B:89:66:DE:38:BB:DE:80:D5:76:82:58:82:55:C1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161EDA2396A0A9DF2C8B830 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16f97a42-3892-371a-bfe2-5796b086b3c4.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.191.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:ed:a2:39:6a:0a:9d:f2:c8:b8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=a7f9d538-8ac0-4de5-8028-fccf7edda5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:fb:db:5d:d7:9a:ad:57:ac:6a:36:d4:6a: 6e:aa:43:50:0d:ff:b8:33:c4:67:55:f5:4c:16:48: 2b:77:92:40:c6:59:07:19:00:28:b6:3e:12:0e:04: 6b:58:e4:ae:6d:e0:c9:6d:98:f7:b5:7e:40:a7:b8: 80:4d:b6:56:90:e4:9a:cd:8a:e0:ad:fc:2c:78:27: 82:92:0e:4d:88:48:f3:9e:9d:08:96:c4:59:2b:69: b3:7a:03:60:2b:4a:9e:e2:1f:f8:94:5a:22:2f:8c: 18:57:25:0e:92:50:ae:30:c9:37:15:5c:0f:1a:c2: 6c:e3:00:d2:d1:fc:a2:23:e6:1c:7d:05:b4:01:91: 3c:64:5b:60:8c:bf:77:1a:81:d4:8a:d3:b4:f7:96: cf:ac:a9:eb:5c:54:c5:f9:70:96:da:18:aa:3e:93: a9:fa:ba:1c:be:1b:a2:ce:20:38:bf:9b:4f:03:2a: 57:6b:cd:d4:f3:8e:6e:ee:f0:84:2d:71:b6:eb:68: a3:64:e1:c0:e6:d0:f0:20:bc:ef:26:9f:30:86:21: 5c:2d:d3:48:97:b5:73:a0:9a:0a:08:8b:0e:a8:9d: 9a:69:7b:10:5a:f1:2b:62:00:3d:99:75:d4:c5:73: 1b:0a:dc:5c:51:91:23:d7:e1:77:5f:e1:0c:70:e6: 8b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B5:A2:50:BC:0B:89:66:DE:38:BB:DE:80:D5:76:82:58:82:55:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16f97a42-3892-371a-bfe2-5796b086b3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8b:c4:56:2d:ff:aa:f6:c5:64:cd:10:6e:b8:5e:8d:cb:c4: f7:b7:0c:7b:9b:e9:38:45:11:03:da:9a:be:b2:9b:fd:48:99: 62:de:7c:72:67:29:06:a3:5f:e6:b9:9e:f2:ca:db:a6:a3:75: 22:c4:be:db:a7:0f:bd:34:da:ce:b3:da:38:c4:e3:eb:c3:fc: 07:5f:99:87:ce:f1:5f:ed:2d:6b:bd:4a:d9:33:40:08:67:75: 8e:31:3e:3a:be:65:55:94:91:20:c2:b5:51:30:f2:c0:66:3e: e7:a3:92:ac:f7:58:50:41:4b:63:f4:1a:24:03:11:5c:47:4f: 42:d7:e4:d5:96:fb:ea:19:6b:13:23:27:8a:6d:b5:84:a1:3e: 79:e8:f6:25:9b:31:cc:b8:e6:79:c8:0f:c9:44:10:24:42:15: 2b:08:c5:68:fe:a3:e0:e4:03:75:14:a4:6e:28:63:c2:0b:59: 0e:9a:4e:0d:b8:29:cb:e9:c4:db:4c:29:1e:e9:04:c7:86:a6: 85:2b:09:d5:1f:c7:2b:e1:b0:7d:f1:f7:4a:6a:59:5e:77:d4: 7b:3b:4b:c7:8a:52:37:27:5c:2b:ff:a0:4c:51:e1:43:d7:16: 4f:ea:81:19:ab:c4:b3:d5:49:f4:97:78:9a:ff:a4:08:65:b0: db:08:b7:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYe2iOWoKnfLIuDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YTdmOWQ1MzgtOGFjMC00ZGU1LTgwMjgtZmNjZjdlZGRhNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy77213Xmq1XrGo21GpuqkNQDf+4M8RnVfVM Fkgrd5JAxlkHGQAotj4SDgRrWOSubeDJbZj3tX5Ap7iATbZWkOSazYrgrfwseCeC kg5NiEjznp0IlsRZK2mzegNgK0qe4h/4lFoiL4wYVyUOklCuMMk3FVwPGsJs4wDS 0fyiI+YcfQW0AZE8ZFtgjL93GoHUitO095bPrKnrXFTF+XCW2hiqPpOp+rocvhui ziA4v5tPAypXa83U845u7vCELXG262ijZOHA5tDwILzvJp8whiFcLdNIl7VzoJoK CIsOqJ2aaXsQWvErYgA9mXXUxXMbCtxcUZEj1+F3X+EMcOaLVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq1olC8C4lm3ji73oDVdoJYglXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTZmOTdhNDItMzg5Mi0z NzFhLWJmZTItNTc5NmIwODZiM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARL/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACLxFYt/6r2xWTNEG64Xo3LxPe3DHub6ThFEQPamr6ym/1ImWLefHJn KQajX+a5nvLK26ajdSLEvtunD7002s6z2jjE4+vD/AdfmYfO8V/tLWu9StkzQAhn dY4xPjq+ZVWUkSDCtVEw8sBmPuejkqz3WFBBS2P0GiQDEVxHT0LX5NWW++oZaxMj J4pttYShPnno9iWbMcy45nnID8lEECRCFSsIxWj+o+DkA3UUpG4oY8ILWQ6aTg24 KcvpxNtMKR7pBMeGpoUrCdUfxyvhsH3x90pqWV531Hs7S8eKUjcnXCv/oExR4UPX Fk/qgRmrxLPVSfSXeJr/pAhlsNsIt+w= -----END CERTIFICATE-----Generated at Wed Aug 6 11:10:34 2025 by rpki-client