$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/40704f8e-1efa-3d6b-abeb-3d9e02acad37.roa File: 40704f8e-1efa-3d6b-abeb-3d9e02acad37.roa (raw, json) Hash identifier: TYvcQg/D9ys54tb1Cv3Sz9LOsPNIAuYOqwl1q/JPzuw= Subject key identifier: DF:D3:6E:91:95:FE:BF:8A:15:B5:7D:19:E7:F4:4D:FE:A8:83:09:D4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA1614EFFCE2148477F140B18 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/40704f8e-1efa-3d6b-abeb-3d9e02acad37.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 66.168.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:4e:ff:ce:21:48:47:7f:14:0b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d30af6b4-74c3-4d39-ac69-f4a97d3ac7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:fb:08:a6:c6:16:f6:6e:f2:df:6c:08:5a: 01:6a:52:6f:f2:d0:cf:3f:d8:a5:aa:1b:66:4e:99: 95:24:f3:9f:bf:e9:50:b1:ea:57:bc:37:2c:a5:64: 78:d4:9a:1c:49:1d:bf:ab:58:77:03:1b:c2:95:8d: 68:db:f9:db:23:1e:38:4e:bc:14:a0:c8:ef:63:bd: 64:75:df:c5:33:27:e7:4d:85:64:8a:11:36:73:6b: 28:8d:99:92:fc:72:ac:2d:d1:1f:39:66:96:28:bd: 7a:5f:c4:c1:b7:d3:4d:b2:12:24:4a:f2:3c:35:9d: a2:a7:70:eb:9e:9f:1f:eb:c3:62:d8:d2:77:9e:0b: 2f:96:88:e6:0b:c2:55:1e:8e:f4:ab:e0:5d:e7:db: 36:7b:06:8f:fa:6e:97:57:5d:68:3b:02:a6:41:fc: ca:47:dd:79:8c:9f:e7:06:d9:fd:54:c4:a3:a4:e3: b4:ca:af:2e:7b:6f:cd:ce:3b:fd:c7:b2:b2:77:96: fd:77:05:91:8d:a0:2f:93:3f:44:29:d0:27:7b:ec: 78:b5:e0:18:f3:d5:4e:51:60:b8:ae:60:28:24:fc: cf:f8:5b:10:26:af:20:a4:ac:40:2c:70:51:06:eb: 71:a4:d8:c8:66:d0:16:68:5a:c8:5d:a8:86:cd:fd: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D3:6E:91:95:FE:BF:8A:15:B5:7D:19:E7:F4:4D:FE:A8:83:09:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/40704f8e-1efa-3d6b-abeb-3d9e02acad37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:20:13:5d:3d:69:4f:2b:0a:b1:49:28:cf:d2:b5:12:b3:e7: 85:91:4f:ae:c1:38:da:cf:46:bc:47:63:02:e9:ed:a9:ad:ca: 72:47:74:a5:e3:e0:06:35:e1:80:fd:22:64:7e:e2:72:49:8c: ad:4a:3c:ea:4b:c1:8e:cc:31:dd:8b:b0:4f:7a:06:d8:7e:45: d9:82:88:73:ba:73:b4:6a:6a:62:15:4f:78:83:25:1b:ae:38: 1b:84:1a:70:56:bc:90:24:53:f7:da:e6:3d:c4:b8:ee:c4:9c: 8e:9a:c2:45:35:18:d3:22:02:aa:ca:f1:07:27:16:91:90:2c: a4:df:77:95:30:25:fe:ac:6c:a4:86:0f:b4:49:bb:5d:20:ce: eb:74:d1:c3:9b:ea:9b:ca:7b:dd:22:ab:2a:05:9e:90:a8:f7: 13:cf:fa:63:e4:7b:1b:69:c7:80:83:4b:56:34:75:07:e6:75: 96:77:b6:30:38:99:c8:15:3e:ca:f1:59:1f:48:dc:94:34:db: 78:68:22:0e:df:b4:e3:b6:d9:b9:93:63:d9:af:48:c4:57:1b: 21:57:ac:1e:67:34:46:04:71:cf:b5:1d:6a:c2:99:80:75:44: ec:5c:bf:0c:f0:70:ea:40:b2:ab:1f:77:ca:de:60:81:66:ca: 43:ca:4e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYU7/ziFIR38UCxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDMwYWY2YjQtNzRjMy00ZDM5LWFjNjktZjRhOTdkM2FjN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBf7CKbGFvZu8t9sCFoBalJv8tDPP9ilqhtm TpmVJPOfv+lQsepXvDcspWR41JocSR2/q1h3AxvClY1o2/nbIx44TrwUoMjvY71k dd/FMyfnTYVkihE2c2sojZmS/HKsLdEfOWaWKL16X8TBt9NNshIkSvI8NZ2ip3Dr np8f68Ni2NJ3ngsvlojmC8JVHo70q+Bd59s2ewaP+m6XV11oOwKmQfzKR915jJ/n Btn9VMSjpOO0yq8ue2/Nzjv9x7Kyd5b9dwWRjaAvkz9EKdAne+x4teAY89VOUWC4 rmAoJPzP+FsQJq8gpKxALHBRButxpNjIZtAWaFrIXaiGzf2NcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/TbpGV/r+KFbV9Gef0Tf6ogwnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDA3MDRmOGUtMWVmYS0z ZDZiLWFiZWItM2Q5ZTAyYWNhZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAgE109aU8rCrFJKM/StRKz54WRT67BONrPRrxHYwLp7amtynJHdKXj 4AY14YD9ImR+4nJJjK1KPOpLwY7MMd2LsE96Bth+RdmCiHO6c7RqamIVT3iDJRuu OBuEGnBWvJAkU/fa5j3EuO7EnI6awkU1GNMiAqrK8QcnFpGQLKTfd5UwJf6sbKSG D7RJu10gzut00cOb6pvKe90iqyoFnpCo9xPP+mPkextpx4CDS1Y0dQfmdZZ3tjA4 mcgVPsrxWR9I3JQ023hoIg7ftOO22bmTY9mvSMRXGyFXrB5nNEYEcc+1HWrCmYB1 ROxcvwzwcOpAsqsfd8reYIFmykPKTnI= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:05 2025 by rpki-client