$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/225c0a7d-edcb-3657-be2e-b0a2ea95d7fa.roa File: 225c0a7d-edcb-3657-be2e-b0a2ea95d7fa.roa (raw, json) Hash identifier: 4+x8dUu4aJg6vUUay6lGGgyFOCiF8yxtNhwa7J+EWfI= Subject key identifier: 0E:58:9D:58:95:DF:A4:92:BC:27:55:53:72:82:61:EB:0D:33:B3:69 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161598AF4103ADC917F6F40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/225c0a7d-edcb-3657-be2e-b0a2ea95d7fa.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.187.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:59:8a:f4:10:3a:dc:91:7f:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8aaf76db-15f0-4276-92a2-c5e1cbcfc268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:8c:38:30:5e:12:ca:b5:7f:81:26:50:05: d3:5b:ef:86:f0:a0:a4:bc:7a:2c:88:9c:9d:99:55: af:ab:a5:70:65:0c:fa:a9:74:f7:e6:10:cf:ad:a8: b8:ea:25:33:99:50:a0:ba:54:f8:b9:df:38:69:22: 7e:c1:ce:15:ab:6b:71:f4:fe:e4:af:ca:de:32:9c: d4:8a:a7:d6:72:ec:78:f1:48:4e:3f:16:d0:32:db: 75:9a:39:28:31:12:62:c1:83:20:67:cc:a4:e5:e1: 0b:1b:40:6e:d5:4d:c0:5d:85:96:44:10:c3:b8:c6: f8:c0:cd:0a:eb:80:06:7d:f6:33:a8:79:25:f1:62: 0f:b6:d4:6b:db:62:5d:45:cf:f5:68:d2:31:76:3a: 05:4a:0f:4b:04:b6:12:3f:cc:9d:68:15:5f:ea:1a: cd:19:ad:e2:4e:17:b8:37:f6:69:93:7f:06:8e:7d: 6d:cb:f8:d3:98:28:e7:f1:59:a4:b5:88:99:8d:87: 14:3d:81:1c:f7:2f:6e:0a:a4:8f:b6:e8:96:8c:94: d8:d1:17:45:91:94:66:89:90:a2:1d:7a:42:80:75: 76:15:ba:da:7e:4e:66:76:60:81:dc:29:a6:c4:dc: ac:6c:34:e4:b2:06:cd:3a:87:d8:99:96:ff:d0:b0: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:58:9D:58:95:DF:A4:92:BC:27:55:53:72:82:61:EB:0D:33:B3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/225c0a7d-edcb-3657-be2e-b0a2ea95d7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.187.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ae:0e:ba:49:35:af:2a:e9:f7:16:16:92:b9:fc:15:9d:97: 71:d2:b1:a1:3a:9a:9a:b8:13:59:d1:80:24:07:8e:10:66:71: 5d:dd:30:0e:1a:5c:66:82:a4:b8:29:97:17:07:62:6e:66:01: 23:e0:f7:d9:7a:87:ea:58:fb:67:9b:94:78:c3:69:5a:c1:ab: 66:f1:6a:6d:df:d4:af:88:f1:12:10:d7:d5:47:2b:4e:1e:13: ad:ee:63:2b:90:93:f9:38:a8:b9:87:d2:ef:d3:ca:d4:71:ee: 1d:9a:16:de:cb:1b:d8:07:89:89:f3:45:0e:2e:0d:cc:32:23: e6:27:92:ae:d3:96:d1:8c:eb:29:c5:9e:50:48:81:17:f1:46: 01:a3:ad:33:65:2c:0e:06:d6:bf:a6:28:8e:fc:36:dc:3a:0d: e9:a2:fc:b4:bc:83:9b:ff:97:54:2b:5c:b8:a5:64:22:c0:55: 92:4e:e0:81:de:98:af:c3:ca:7a:01:2b:8d:87:b0:65:ac:2a: f3:6f:70:3b:2a:22:b5:5f:67:05:f8:76:0d:68:a5:3a:4d:c1: 3f:30:4d:e9:89:b2:f1:97:62:b3:4b:d2:0e:09:89:3f:2a:d4: 9a:d5:8a:87:9a:b3:f3:89:b0:37:31:dd:30:1e:3f:c7:5c:5f: aa:e3:f2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVmK9BA63JF/b0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OGFhZjc2ZGItMTVmMC00Mjc2LTkyYTItYzVlMWNiY2ZjMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGMODBeEsq1f4EmUAXTW++G8KCkvHosiJyd mVWvq6VwZQz6qXT35hDPrai46iUzmVCgulT4ud84aSJ+wc4Vq2tx9P7kr8reMpzU iqfWcux48UhOPxbQMtt1mjkoMRJiwYMgZ8yk5eELG0Bu1U3AXYWWRBDDuMb4wM0K 64AGffYzqHkl8WIPttRr22JdRc/1aNIxdjoFSg9LBLYSP8ydaBVf6hrNGa3iThe4 N/Zpk38Gjn1ty/jTmCjn8VmktYiZjYcUPYEc9y9uCqSPtuiWjJTY0RdFkZRmiZCi HXpCgHV2Fbrafk5mdmCB3CmmxNysbDTksgbNOofYmZb/0LDIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5YnViV36SSvCdVU3KCYesNM7NpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjI1YzBhN2QtZWRjYi0z NjU3LWJlMmUtYjBhMmVhOTVkN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGquDrpJNa8q6fcWFpK5/BWdl3HSsaE6mpq4E1nRgCQHjhBmcV3dMA4a XGaCpLgplxcHYm5mASPg99l6h+pY+2eblHjDaVrBq2bxam3f1K+I8RIQ19VHK04e E63uYyuQk/k4qLmH0u/TytRx7h2aFt7LG9gHiYnzRQ4uDcwyI+Ynkq7TltGM6ynF nlBIgRfxRgGjrTNlLA4G1r+mKI78Ntw6Demi/LS8g5v/l1QrXLilZCLAVZJO4IHe mK/DynoBK42HsGWsKvNvcDsqIrVfZwX4dg1opTpNwT8wTemJsvGXYrNL0g4JiT8q 1JrVioeas/OJsDcx3TAeP8dcX6rj8lQ= -----END CERTIFICATE-----Generated at Wed Aug 6 16:08:33 2025 by rpki-client