$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/306d0fcc-ba86-3043-8ef9-99700117b5d5.roa File: 306d0fcc-ba86-3043-8ef9-99700117b5d5.roa (raw, json) Hash identifier: JvMmTqIBLBHBaGpo30U3C6uAPOacknGRpitnIikfwxE= Subject key identifier: B6:55:D6:42:B9:D4:10:53:D9:4F:D5:9A:71:58:59:EE:22:35:89:BE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DD04DE9593DBDE5D1BC20 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/306d0fcc-ba86-3043-8ef9-99700117b5d5.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 71.8.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:d0:4d:e9:59:3d:bd:e5:d1:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=98f84ce8-421a-4ca9-bc73-42999f496a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:56:5c:b3:dc:94:49:39:b5:c8:b6:91:84: 95:46:08:89:49:f0:64:0e:b9:5c:36:ad:d1:44:77: 6a:37:bc:46:d7:8a:cc:99:62:b1:76:b5:be:ed:98: cc:8d:7b:38:ac:20:28:2b:a2:a4:db:4e:0c:7e:0d: 1c:a4:71:49:61:39:ee:e8:82:61:fd:74:63:76:73: ce:9f:5b:aa:62:9a:5f:55:37:82:58:df:30:2a:10: b3:de:86:74:5a:d2:9d:57:71:a1:25:9d:fe:8d:e5: 99:44:45:9f:77:7e:4f:0f:9f:b9:67:19:dc:14:e8: 37:eb:16:cf:2d:e6:60:d8:aa:23:f9:0d:65:78:21: 7b:dc:f2:bf:98:e6:02:1e:73:e4:09:b5:05:2c:b6: 46:44:7e:c0:a0:09:34:98:1c:0d:90:21:b6:5f:ae: 68:61:6a:3f:d5:bb:15:b4:03:01:19:f7:1e:a5:56: 87:74:36:0d:f7:da:7b:21:ef:83:dc:cb:b4:18:46: 2b:07:15:8d:a5:c6:ed:ad:9d:51:06:a4:26:76:85: 2a:05:f3:2b:fe:3b:7d:03:68:c4:e0:40:50:05:71: c9:1a:96:e2:8b:38:c8:34:9c:b2:e7:77:90:ff:7f: fa:0d:6e:88:8f:41:34:8f:63:67:9c:c1:bb:26:f5: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:55:D6:42:B9:D4:10:53:D9:4F:D5:9A:71:58:59:EE:22:35:89:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/306d0fcc-ba86-3043-8ef9-99700117b5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.8.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7e:a2:84:7f:90:08:3e:b6:35:87:a0:a7:1e:f9:fb:38:3d: 81:6f:42:a9:36:e4:81:81:4f:df:b3:8e:cf:17:ff:8e:90:fc: 09:58:cb:85:61:11:23:8e:f9:f0:da:8d:42:a7:f2:64:36:7a: 3c:9e:eb:c9:84:fc:b6:f8:8d:13:7c:7d:36:82:3d:60:4a:8a: 64:16:12:14:ec:61:7a:08:fa:07:41:7b:bf:ef:20:57:44:69: 21:d4:c3:1a:46:f3:07:7f:62:3e:23:a6:34:c1:4a:ba:fc:f6: 74:a4:53:23:f7:ae:a1:43:f4:eb:dc:fe:4a:24:84:36:c5:7c: f9:dd:18:f3:01:8e:e7:32:f4:ac:64:64:cc:0c:3f:20:80:d2: e6:e0:27:21:84:7d:02:bd:d0:8c:e4:04:bb:97:3c:41:90:39: 27:5e:55:2d:17:24:6a:a8:00:78:9f:dc:01:0d:b6:45:9a:40: 8a:d3:a5:f3:d8:9f:19:4d:72:7d:20:d2:2f:cc:47:03:cb:77: 9e:36:e4:f9:36:fd:fb:54:cc:ba:d0:91:28:fc:03:cf:92:25: d3:08:41:70:ba:27:6c:e1:0b:7a:c1:93:c0:09:71:44:00:23: d2:8c:ef:ef:22:87:b9:90:4a:05:24:f3:98:8b:f1:51:af:57: e5:7f:a1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdBN6Vk9veXRvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OThmODRjZTgtNDIxYS00Y2E5LWJjNzMtNDI5OTlmNDk2YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOdWXLPclEk5tci2kYSVRgiJSfBkDrlcNq3R RHdqN7xG14rMmWKxdrW+7ZjMjXs4rCAoK6Kk204Mfg0cpHFJYTnu6IJh/XRjdnPO n1uqYppfVTeCWN8wKhCz3oZ0WtKdV3GhJZ3+jeWZREWfd35PD5+5ZxncFOg36xbP LeZg2Koj+Q1leCF73PK/mOYCHnPkCbUFLLZGRH7AoAk0mBwNkCG2X65oYWo/1bsV tAMBGfcepVaHdDYN99p7Ie+D3Mu0GEYrBxWNpcbtrZ1RBqQmdoUqBfMr/jt9A2jE 4EBQBXHJGpbiizjINJyy53eQ/3/6DW6Ij0E0j2NnnMG7JvUr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZV1kK51BBT2U/VmnFYWe4iNYm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzA2ZDBmY2MtYmE4Ni0z MDQzLThlZjktOTk3MDAxMTdiNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh+ooR/kAg+tjWHoKce+fs4PYFvQqk25IGBT9+zjs8X/46Q/AlYy4Vh ESOO+fDajUKn8mQ2ejye68mE/Lb4jRN8fTaCPWBKimQWEhTsYXoI+gdBe7/vIFdE aSHUwxpG8wd/Yj4jpjTBSrr89nSkUyP3rqFD9Ovc/kokhDbFfPndGPMBjucy9Kxk ZMwMPyCA0ubgJyGEfQK90IzkBLuXPEGQOSdeVS0XJGqoAHif3AENtkWaQIrTpfPY nxlNcn0g0i/MRwPLd5425Pk2/ftUzLrQkSj8A8+SJdMIQXC6J2zhC3rBk8AJcUQA I9KM7+8ih7mQSgUk85iL8VGvV+V/oQk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:00 2025 by rpki-client