$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1953c03d-af80-3b4d-b5a3-404240ef1bed.roa File: 1953c03d-af80-3b4d-b5a3-404240ef1bed.roa (raw, json) Hash identifier: 2RXY5g8OKHAqEhLiprTEfd97MTe6fdj/Mj0I9ZmCvWU= Subject key identifier: AA:BB:D3:50:6E:20:00:17:1C:42:11:33:C3:B4:DB:57:34:E3:C9:83 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161E02A7F48AC8EF5925D00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1953c03d-af80-3b4d-b5a3-404240ef1bed.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 24.205.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:e0:2a:7f:48:ac:8e:f5:92:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=e8cde9f2-13fd-4436-aff5-9dd5c73e4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:30:e5:f3:f6:73:ee:a3:8d:ad:98:4d:ce: 39:30:22:8d:6a:1a:67:32:18:9a:06:47:88:b7:eb: f9:e5:7f:b6:d3:a3:e8:81:0b:d5:68:c8:1c:d9:2e: fd:97:a2:fe:97:33:d7:54:a5:6b:31:0d:20:1c:41: 85:e4:6e:1b:53:a2:44:10:f5:83:7e:9d:00:32:2e: fa:59:5e:65:14:53:ca:7c:a5:54:40:fc:be:07:2c: ff:8f:bf:a8:e8:bf:2a:98:dc:a8:16:ba:2a:5f:5d: 5b:40:cd:1c:1b:5b:41:a9:7e:db:bf:21:ff:1c:3f: 67:55:b1:e2:37:cc:26:c7:05:e5:ba:24:3f:c3:17: 10:be:c1:29:41:3e:5c:74:25:16:80:2c:0b:aa:24: 1a:03:87:6a:95:24:0e:d9:c8:a7:2b:fe:26:3f:95: 02:16:9a:e6:82:be:74:c8:f8:57:c5:82:10:ca:05: 80:83:34:28:33:be:da:79:88:0b:3c:79:85:c5:01: 54:51:ec:f9:99:04:d7:0c:d0:da:13:52:eb:0c:3f: b9:06:df:97:0d:31:1a:24:44:b4:40:ef:f5:71:51: 08:26:e9:7d:93:41:01:de:86:24:7a:6a:44:ab:1e: b2:28:aa:13:0c:29:e3:9a:28:70:a0:ff:fe:1a:cd: 2b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:D3:50:6E:20:00:17:1C:42:11:33:C3:B4:DB:57:34:E3:C9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1953c03d-af80-3b4d-b5a3-404240ef1bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.205.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:0a:f4:cd:19:68:36:36:6d:74:42:0e:4b:c3:c0:9c:ef:90: fc:aa:0a:bc:57:da:8d:cb:72:7f:5a:6d:45:c0:84:b8:5f:d6: 15:5a:a1:b4:b4:a5:0a:ee:b6:e1:4c:61:11:2d:49:9e:38:8c: 3f:48:60:3b:88:8b:68:30:5e:20:0b:a9:6a:1e:75:f4:9f:e7: 10:fe:20:16:cb:13:8b:82:06:49:0c:25:41:ff:f0:c2:92:be: 5b:e7:85:2d:5f:bd:fe:6a:73:41:86:95:3e:55:9e:d5:92:f0: 2e:5e:0d:30:72:85:04:cf:69:e1:cf:1c:4a:74:a5:15:69:82: 6e:23:86:2c:73:54:89:37:f1:3d:49:b3:b8:a8:5c:eb:42:fa: b2:ad:af:97:d5:ae:61:d4:db:ac:7e:52:bf:c3:1c:4d:1c:85: d6:08:16:88:97:7f:0b:38:ae:2d:cb:2d:f1:14:2d:69:26:79: e2:0d:31:50:a3:83:ba:89:2e:ae:a6:c5:18:b5:90:c0:78:19: f6:da:94:c6:30:c3:1b:4f:22:3a:4a:13:e4:1d:6a:b6:2c:1c: 76:ff:31:84:be:c2:31:f4:15:33:0d:55:24:81:3c:49:67:c2: da:b3:db:3b:b8:f5:af:cf:82:cf:91:f6:e0:56:8f:02:16:de: ef:f6:85:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYeAqf0isjvWSXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZThjZGU5ZjItMTNmZC00NDM2LWFmZjUtOWRkNWM3M2U0ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Uw5fP2c+6jja2YTc45MCKNahpnMhiaBkeI t+v55X+206PogQvVaMgc2S79l6L+lzPXVKVrMQ0gHEGF5G4bU6JEEPWDfp0AMi76 WV5lFFPKfKVUQPy+Byz/j7+o6L8qmNyoFroqX11bQM0cG1tBqX7bvyH/HD9nVbHi N8wmxwXluiQ/wxcQvsEpQT5cdCUWgCwLqiQaA4dqlSQO2cinK/4mP5UCFprmgr50 yPhXxYIQygWAgzQoM77aeYgLPHmFxQFUUez5mQTXDNDaE1LrDD+5Bt+XDTEaJES0 QO/1cVEIJul9k0EB3oYkempEqx6yKKoTDCnjmihwoP/+Gs0rjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq701BuIAAXHEIRM8O021c048mDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTk1M2MwM2QtYWY4MC0z YjRkLWI1YTMtNDA0MjQwZWYxYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGM2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkK9M0ZaDY2bXRCDkvDwJzvkPyqCrxX2o3Lcn9abUXAhLhf1hVaobS0 pQrutuFMYREtSZ44jD9IYDuIi2gwXiALqWoedfSf5xD+IBbLE4uCBkkMJUH/8MKS vlvnhS1fvf5qc0GGlT5VntWS8C5eDTByhQTPaeHPHEp0pRVpgm4jhixzVIk38T1J s7ioXOtC+rKtr5fVrmHU26x+Ur/DHE0chdYIFoiXfws4ri3LLfEULWkmeeINMVCj g7qJLq6mxRi1kMB4GfbalMYwwxtPIjpKE+QdarYsHHb/MYS+wjH0FTMNVSSBPEln wtqz2zu49a/Pgs+R9uBWjwIW3u/2hbk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:47 2025 by rpki-client