$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa File: 2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa (raw, json) Hash identifier: 7/eQhhSm74H+SlVd15S1Q2MAFyUTqa7kMnq5z2JnglM= Subject key identifier: 6D:88:ED:CF:A7:65:65:C3:F6:C6:45:E3:E8:03:6F:2E:EA:EE:92:20 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161DF5FB6FFF857C0A7BF98 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.113.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:df:5f:b6:ff:f8:57:c0:a7:bf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=952eff8c-ea3a-40b9-8a8e-b4e29306e7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:4d:e6:c6:49:b1:b9:60:ff:4b:49:26:e3: 0c:73:ba:b9:b0:c0:6e:1c:c1:35:2e:26:c6:87:11: b1:51:8a:42:f0:5e:bc:d4:6b:fe:17:6f:2b:9d:ae: 55:7f:e0:c7:b5:5c:1b:21:df:79:15:d2:96:ca:c9: 0d:56:4a:31:31:16:ee:46:e9:02:29:c4:bb:bd:cd: ca:35:b7:f0:01:05:7f:d1:33:16:09:5a:20:7c:af: 21:65:a3:31:1c:94:f9:c5:80:31:de:86:03:31:67: 88:3e:d0:ba:37:b6:b7:98:ed:b9:08:18:5a:82:3f: 56:ba:1c:6c:b0:2e:c0:a6:73:46:a6:84:4f:d0:fe: 6e:97:61:25:9f:2d:1b:dc:36:d2:b7:eb:5a:09:d1: 2f:39:2b:be:b1:48:69:1f:e8:06:c8:48:ec:3d:c9: 66:fb:75:d7:97:41:65:fb:f2:4d:0b:48:ca:51:a5: 35:d0:c6:d4:7a:81:0f:e6:26:8d:9e:40:0a:9e:26: 84:10:c3:82:75:d1:08:fc:1c:cf:e9:7b:bf:0e:99: f4:43:b4:3b:2a:2e:21:2a:3e:40:78:e0:1f:1f:3c: 44:df:0a:84:ce:1b:23:fc:f4:8c:93:ba:a1:b8:fc: 1b:6f:6e:6d:81:e2:0e:55:37:ce:da:24:6d:e3:f0: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:88:ED:CF:A7:65:65:C3:F6:C6:45:E3:E8:03:6F:2E:EA:EE:92:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.113.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:14:66:6d:2c:fe:60:d6:23:4b:d1:20:2c:79:4f:d9:5b:cc: be:90:b9:9e:15:29:99:9f:42:c2:3b:35:20:eb:7a:48:37:84: 01:07:b4:23:7e:5b:d0:6c:3b:ff:ae:66:7e:30:95:25:82:e0: 64:10:c2:a5:92:0a:04:48:6d:96:c7:3f:f1:70:d4:cf:29:71: d0:5f:18:9a:c7:87:2d:20:65:ca:9e:6d:61:b4:34:d2:bf:44: 47:2c:31:c9:bd:6b:76:6b:47:6e:54:15:38:bb:03:c1:5c:a3: 70:2d:5e:c3:c6:a1:44:b0:03:28:e3:9e:e3:18:24:03:f2:aa: 58:e0:b4:0b:5d:53:83:63:cf:ac:1c:24:2d:60:68:c0:7e:9c: 3f:57:84:ef:49:7e:35:13:c7:2c:5e:73:a1:56:97:3c:7f:05: df:11:8a:1e:cd:52:22:a7:93:39:d1:fe:bd:b1:72:be:fd:4a: ca:ba:67:a2:d2:c3:83:f0:11:82:cc:59:30:f9:f2:50:7f:95: 7b:ec:e6:c5:c3:14:d7:3c:1d:85:fe:9b:12:34:eb:69:d6:40: 36:92:8c:57:aa:86:b2:d2:7f:35:fe:85:56:bc:86:f4:b5:cf: 04:22:16:1c:39:64:de:0c:33:04:47:53:62:03:e5:7a:ba:90: 66:a8:9b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYd9ftv/4V8Cnv5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OTUyZWZmOGMtZWEzYS00MGI5LThhOGUtYjRlMjkzMDZlN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHxN5sZJsblg/0tJJuMMc7q5sMBuHME1LibG hxGxUYpC8F681Gv+F28rna5Vf+DHtVwbId95FdKWyskNVkoxMRbuRukCKcS7vc3K NbfwAQV/0TMWCVogfK8hZaMxHJT5xYAx3oYDMWeIPtC6N7a3mO25CBhagj9Wuhxs sC7ApnNGpoRP0P5ul2Elny0b3DbSt+taCdEvOSu+sUhpH+gGyEjsPclm+3XXl0Fl +/JNC0jKUaU10MbUeoEP5iaNnkAKniaEEMOCddEI/BzP6Xu/Dpn0Q7Q7Ki4hKj5A eOAfHzxE3wqEzhsj/PSMk7qhuPwbb25tgeIOVTfO2iRt4/DxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2I7c+nZWXD9sZF4+gDby7q7pIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmRiOWZlMTYtMDY4Mi0z MTBiLWE3YWItNGI4MjlkZGIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEUZm0s/mDWI0vRICx5T9lbzL6QuZ4VKZmfQsI7NSDrekg3hAEHtCN+ W9BsO/+uZn4wlSWC4GQQwqWSCgRIbZbHP/Fw1M8pcdBfGJrHhy0gZcqebWG0NNK/ REcsMcm9a3ZrR25UFTi7A8Fco3AtXsPGoUSwAyjjnuMYJAPyqljgtAtdU4Njz6wc JC1gaMB+nD9XhO9JfjUTxyxec6FWlzx/Bd8Rih7NUiKnkznR/r2xcr79Ssq6Z6LS w4PwEYLMWTD58lB/lXvs5sXDFNc8HYX+mxI062nWQDaSjFeqhrLSfzX+hVa8hvS1 zwQiFhw5ZN4MMwRHU2ID5Xq6kGaom0Y= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:58 2025 by rpki-client