$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa File: 3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa (raw, json) Hash identifier: 0y6gDD/OI3beYyCqXgh5qPLOUQBL45lKQUQA7r3V4XU= Subject key identifier: 97:EE:8A:86:FB:41:3F:29:9D:61:21:BB:C7:D3:A9:0E:F3:6D:F9:F4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D3134CD5DDA4D433F7180 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.216.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:31:34:cd:5d:da:4d:43:3f:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=33aa40bc-bb4e-4229-a5a3-ec5c9e97ec2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:f8:50:9d:e3:39:ac:8d:29:16:f4:69:dc: aa:d5:e1:73:33:b5:3e:2e:2e:c5:f9:c4:55:2f:8d: e1:a8:db:33:fc:29:31:b8:73:ae:d5:bc:70:be:cf: cf:30:58:99:d8:46:bd:69:f2:4d:ec:30:c4:b5:00: 34:8b:e8:25:e4:a2:73:a1:31:74:34:44:11:be:d3: 38:6a:1d:b7:d0:f5:72:71:cc:c7:7e:a5:b3:8e:00: 44:42:97:57:7a:96:1b:d3:56:18:59:47:c1:0c:8c: 1c:f1:2e:82:5a:52:93:4f:a9:6a:7f:5f:45:24:b1: 5e:a8:99:d8:2b:a5:df:95:1f:30:cc:bc:86:3b:1f: 78:b1:a0:dc:a0:12:cc:64:bf:c7:a2:ff:4a:f7:81: dc:5b:5e:b1:6b:97:d6:20:81:a5:10:8b:f9:98:e5: ec:57:8c:73:c5:f3:f6:00:c7:cd:2b:76:81:78:0b: ba:96:65:e5:55:3e:da:16:ac:53:6f:43:f6:fb:9b: e9:ee:03:12:49:9f:98:23:fe:bf:a6:b5:f8:58:79: e9:48:fe:de:28:31:99:72:c8:43:e6:e8:32:a9:b0: 5b:67:0b:89:e1:02:17:71:61:6f:6a:0f:05:8e:b8: bb:09:f1:97:23:d5:a1:72:85:6b:df:da:91:48:a5: 0f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:8A:86:FB:41:3F:29:9D:61:21:BB:C7:D3:A9:0E:F3:6D:F9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3236e884-9d88-3e42-b8f1-7033cbbc5e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.216.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:81:79:95:98:e9:59:f1:dd:37:23:8f:45:63:58:57:88:82: c6:19:a3:cb:1f:fa:94:dc:08:de:7f:83:d5:29:1f:b1:29:a5: 08:06:73:87:90:1e:4d:a1:65:6b:3e:05:b3:9c:a7:83:00:c8: 9c:0a:ed:8f:20:55:1a:fa:1b:73:26:09:6d:1d:56:e7:ed:e6: 98:6a:24:13:1e:00:4e:af:01:aa:2a:29:5e:72:70:6b:68:b3: 0a:f0:87:1f:d2:fe:ce:58:7d:9c:78:6e:1e:d6:e0:c0:b9:05: c0:fe:0d:63:58:88:e4:f4:33:be:be:20:9e:a9:24:8f:95:ae: 24:35:7c:56:3f:f0:d8:3a:33:81:f0:47:cd:5e:1e:8e:16:48: 21:99:3a:7b:70:9c:e2:64:14:8c:9d:e4:29:c9:5c:d6:df:cd: d3:60:ed:e5:b8:ea:1b:6a:47:9a:91:17:00:18:9c:2d:a7:b8: 19:3d:02:0e:e3:b9:38:c2:28:fc:c2:83:88:30:64:5d:e3:25: 33:5a:71:85:c4:2c:e9:ed:b1:2d:9a:6a:33:b5:96:50:de:36: 8a:50:a3:08:ae:a7:fa:6e:11:ef:70:b8:54:df:e8:fb:24:c7: 53:6d:66:7b:b0:ef:14:c1:44:57:2c:0a:0c:16:98:63:ad:70: 1c:1e:01:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHTE0zV3aTUM/cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MzNhYTQwYmMtYmI0ZS00MjI5LWE1YTMtZWM1YzllOTdlYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU/4UJ3jOayNKRb0adyq1eFzM7U+Li7F+cRV L43hqNsz/CkxuHOu1bxwvs/PMFiZ2Ea9afJN7DDEtQA0i+gl5KJzoTF0NEQRvtM4 ah230PVycczHfqWzjgBEQpdXepYb01YYWUfBDIwc8S6CWlKTT6lqf19FJLFeqJnY K6XflR8wzLyGOx94saDcoBLMZL/Hov9K94HcW16xa5fWIIGlEIv5mOXsV4xzxfP2 AMfNK3aBeAu6lmXlVT7aFqxTb0P2+5vp7gMSSZ+YI/6/prX4WHnpSP7eKDGZcshD 5ugyqbBbZwuJ4QIXcWFvag8Fjri7CfGXI9WhcoVr39qRSKUPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfuiob7QT8pnWEhu8fTqQ7zbfn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzIzNmU4ODQtOWQ4OC0z ZTQyLWI4ZjEtNzAzM2NiYmM1ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGNggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeBeZWY6Vnx3Tcjj0VjWFeIgsYZo8sf+pTcCN5/g9UpH7EppQgGc4eQ Hk2hZWs+BbOcp4MAyJwK7Y8gVRr6G3MmCW0dVuft5phqJBMeAE6vAaoqKV5ycGto swrwhx/S/s5YfZx4bh7W4MC5BcD+DWNYiOT0M76+IJ6pJI+VriQ1fFY/8Ng6M4Hw R81eHo4WSCGZOntwnOJkFIyd5CnJXNbfzdNg7eW46htqR5qRFwAYnC2nuBk9Ag7j uTjCKPzCg4gwZF3jJTNacYXELOntsS2aajO1llDeNopQowiup/puEe9wuFTf6Psk x1NtZnuw7xTBRFcsCgwWmGOtcBweATo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:53 2025 by rpki-client