$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20a0ed1f-d762-3a47-a210-cd840d14d142.roa File: 20a0ed1f-d762-3a47-a210-cd840d14d142.roa (raw, json) Hash identifier: NAZnBX199U33izSR5oTn+Alp7C6tSDjU0trEDARORyk= Subject key identifier: D8:7F:86:C1:DC:49:C6:01:E4:35:C5:57:D3:EF:7F:1A:16:22:59:81 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA1614FD930F2D1D118532FA0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20a0ed1f-d762-3a47-a210-cd840d14d142.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 66.168.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:4f:d9:30:f2:d1:d1:18:53:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=6bfadec8-36b4-48d9-b113-3a859ea5b28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:4b:32:df:12:c2:4b:43:a3:0d:10:e5:e3: 2b:a5:8e:1b:94:a8:f1:4c:d0:5b:f6:f7:cb:27:22: 31:b6:38:3f:a7:bb:1b:40:ae:29:44:11:05:ba:1e: 88:46:a2:74:f8:8b:c7:b3:fa:68:b6:3f:15:a7:ce: 3d:ba:50:4c:27:5c:3e:23:60:e8:31:2f:34:d6:04: 4a:8a:f5:fd:80:44:23:c3:57:f0:ca:0e:75:f5:b0: 28:7b:62:32:0c:0f:74:f1:8e:dc:e0:b2:9d:52:4f: 5d:2e:ad:7f:71:db:1b:d4:20:ac:35:a9:8b:f2:33: 7a:4a:ff:89:51:3f:06:a0:ec:b1:db:ba:38:5b:ca: 05:59:2e:db:62:d5:9c:9b:25:a3:23:98:29:27:f2: 19:55:7e:0d:b8:dd:59:3d:5e:2f:f0:f1:38:db:6a: 75:08:b4:f4:92:c1:50:11:a9:8e:da:e9:a2:c1:a4: 1c:aa:6f:fa:62:bc:60:08:ae:ab:78:57:37:22:f9: 1d:2c:3c:29:8f:36:9f:cb:43:d0:f1:c6:f8:53:96: 6b:ae:ce:21:d7:b7:ca:aa:7e:26:be:cb:db:82:34: b8:53:64:50:ac:77:60:8e:35:97:4d:cf:10:f8:12: be:42:05:2b:55:28:a5:61:c4:17:4a:df:48:0c:70: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7F:86:C1:DC:49:C6:01:E4:35:C5:57:D3:EF:7F:1A:16:22:59:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20a0ed1f-d762-3a47-a210-cd840d14d142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5f:25:de:28:de:3c:e3:8d:97:74:b3:fe:74:6f:27:65:a3: b5:68:5d:10:40:8c:94:5b:1a:ec:55:6f:59:1a:c8:2b:9f:bb: 19:27:b0:71:7b:7a:74:6c:12:0b:71:1e:76:95:26:5f:34:01: 8a:b6:25:52:87:0a:4e:2f:2a:53:f6:3d:3e:b1:dd:dd:70:c2: 7d:92:0a:f4:58:71:d3:c7:37:4a:76:3d:93:78:87:fa:4d:5d: d7:60:63:ee:a2:86:88:af:47:93:fa:41:48:45:19:64:c5:24: 77:32:b3:2b:9e:39:f7:60:53:b3:e4:3b:52:60:82:e6:dc:17: df:e0:f2:83:55:5c:a0:ec:3b:07:f2:05:b0:e2:9d:01:44:14: bb:95:b9:6c:44:a4:8d:26:b8:b6:00:09:05:b1:76:5d:cb:78: 3e:db:87:0f:47:5f:7a:c5:2f:a7:0e:69:95:cf:73:3e:d1:5d: c0:8e:5b:a4:d6:ac:8b:71:d9:b3:04:94:3f:23:00:0e:04:02: 6f:0a:f2:01:b9:4c:b2:3f:81:ac:b0:44:2a:90:17:12:80:c7: 64:a8:d4:ea:e1:01:19:65:16:57:8e:0c:e0:2b:f7:6f:fc:34: 7d:f8:27:75:37:7f:cc:a4:dd:c2:35:b2:aa:a2:a8:d3:39:9a: a7:06:f0:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYU/ZMPLR0RhTL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NmJmYWRlYzgtMzZiNC00OGQ5LWIxMTMtM2E4NTllYTViMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhJLMt8SwktDow0Q5eMrpY4blKjxTNBb9vfL JyIxtjg/p7sbQK4pRBEFuh6IRqJ0+IvHs/potj8Vp849ulBMJ1w+I2DoMS801gRK ivX9gEQjw1fwyg519bAoe2IyDA908Y7c4LKdUk9dLq1/cdsb1CCsNamL8jN6Sv+J UT8GoOyx27o4W8oFWS7bYtWcmyWjI5gpJ/IZVX4NuN1ZPV4v8PE422p1CLT0ksFQ EamO2umiwaQcqm/6YrxgCK6reFc3IvkdLDwpjzafy0PQ8cb4U5Zrrs4h17fKqn4m vsvbgjS4U2RQrHdgjjWXTc8Q+BK+QgUrVSilYcQXSt9IDHB83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh/hsHcScYB5DXFV9PvfxoWIlmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjBhMGVkMWYtZDc2Mi0z YTQ3LWEyMTAtY2Q4NDBkMTRkMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpfJd4o3jzjjZd0s/50bydlo7VoXRBAjJRbGuxVb1kayCufuxknsHF7 enRsEgtxHnaVJl80AYq2JVKHCk4vKlP2PT6x3d1wwn2SCvRYcdPHN0p2PZN4h/pN XddgY+6ihoivR5P6QUhFGWTFJHcysyueOfdgU7PkO1JggubcF9/g8oNVXKDsOwfy BbDinQFEFLuVuWxEpI0muLYACQWxdl3LeD7bhw9HX3rFL6cOaZXPcz7RXcCOW6TW rItx2bMElD8jAA4EAm8K8gG5TLI/gaywRCqQFxKAx2So1OrhARllFleODOAr92/8 NH34J3U3f8yk3cI1sqqiqNM5mqcG8Ig= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:30 2025 by rpki-client