$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412d55e1-2ad2-3d50-90da-518d53ca746a.roa File: 412d55e1-2ad2-3d50-90da-518d53ca746a.roa (raw, json) Hash identifier: Dc6ZM3dqkou4f2vhzLs/4Rt9GhvHUzym1DdfLLGpqy4= Subject key identifier: 79:65:B8:EF:D6:65:FB:66:AA:40:7D:E9:D4:03:4A:5B:29:41:91:1F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DD91097F3B7423D2CCB40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412d55e1-2ad2-3d50-90da-518d53ca746a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.216.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:d9:10:97:f3:b7:42:3d:2c:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=4759d4e5-0943-4d64-9044-d55cb1cd4636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:68:d5:c0:78:15:67:c3:a7:a5:31:a4:ab:50: c5:57:0b:a2:42:98:39:fb:69:13:bf:c0:11:2e:7b: 78:46:69:55:8e:18:06:3b:df:39:3c:b7:34:b2:e4: d0:df:fc:18:a5:b1:ca:81:f4:41:cb:d6:b7:5f:79: 36:78:79:94:ae:f4:f4:d7:ac:43:e9:d8:83:86:85: ce:79:fc:3f:80:fb:61:40:d7:aa:26:e6:2e:f6:6f: 8a:e0:7e:d4:3b:41:e2:12:43:88:1b:d3:de:65:03: bc:7d:e1:63:25:7b:4d:ac:10:c8:e5:b0:3f:13:58: a6:9d:64:16:f1:24:3e:c1:d8:59:7e:24:56:fd:9d: 8c:bc:1f:7d:33:66:fe:d9:e4:e9:14:fc:8c:17:02: be:67:f2:75:80:86:ec:ce:9f:e2:2a:5b:39:2a:19: 47:5d:3a:85:2a:f3:67:6a:bf:96:25:fc:da:83:6e: 12:cb:69:e7:15:9c:26:3d:ac:14:b8:9d:32:f7:de: 7d:fb:7f:bd:bc:80:2e:0d:43:0f:7a:cd:75:11:08: 28:18:49:9c:35:e8:b0:c6:28:9f:c3:a5:1d:01:1e: c9:0d:48:14:1e:a8:7e:61:66:80:7b:e4:6e:12:c4: f5:47:00:68:e1:1d:f2:2f:c7:58:54:49:62:d0:ef: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:B8:EF:D6:65:FB:66:AA:40:7D:E9:D4:03:4A:5B:29:41:91:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412d55e1-2ad2-3d50-90da-518d53ca746a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.216.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:58:c7:70:2c:50:97:3b:49:a2:cc:ef:5d:3e:0c:10:49:21: 91:f2:6c:ae:c1:aa:6e:7c:62:15:72:dc:39:13:e3:aa:f3:d8: bb:bf:be:7f:c4:86:4d:15:af:48:89:1d:a9:54:ed:8a:e7:0a: 15:88:d8:22:11:4e:9d:2f:7f:f6:43:10:e6:f2:50:fa:72:03: 1c:ae:f9:7b:70:9a:f3:63:bd:5b:7c:47:3d:00:f1:22:98:f1: 2f:70:58:2d:76:3b:aa:ed:9a:3c:ac:f3:58:7b:6f:4e:2e:46: e7:58:7b:6e:5a:98:c9:1f:aa:b2:44:d3:7d:61:bf:c5:40:a9: c9:0d:94:0e:6b:2f:ae:87:96:b0:51:ba:55:ce:83:68:4a:5a: a2:f2:35:d3:04:3b:f0:ef:8d:67:7f:f9:38:ec:c7:81:cb:63: 26:0e:aa:30:24:cc:e4:76:20:1e:ac:96:c2:11:93:34:cf:39: e5:49:8c:ed:2a:d4:c7:77:95:11:03:66:1d:c8:8f:67:27:44: 7c:3a:35:28:79:1a:ac:b6:95:df:ed:3c:2c:d7:c8:20:49:70: c9:5b:a0:d0:22:0c:d6:fe:64:d8:4b:df:7f:4e:24:61:9f:96: a2:0c:29:a7:85:fc:bb:ed:75:67:f9:c3:1c:39:5c:87:ff:38: ae:43:21:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdkQl/O3Qj0sy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDc1OWQ0ZTUtMDk0My00ZDY0LTkwNDQtZDU1Y2IxY2Q0NjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWjVwHgVZ8OnpTGkq1DFVwuiQpg5+2kTv8AR Lnt4RmlVjhgGO985PLc0suTQ3/wYpbHKgfRBy9a3X3k2eHmUrvT016xD6diDhoXO efw/gPthQNeqJuYu9m+K4H7UO0HiEkOIG9PeZQO8feFjJXtNrBDI5bA/E1imnWQW 8SQ+wdhZfiRW/Z2MvB99M2b+2eTpFPyMFwK+Z/J1gIbszp/iKls5KhlHXTqFKvNn ar+WJfzag24Sy2nnFZwmPawUuJ0y9959+3+9vIAuDUMPes11EQgoGEmcNeiwxiif w6UdAR7JDUgUHqh+YWaAe+RuEsT1RwBo4R3yL8dYVEli0O8t1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlluO/WZftmqkB96dQDSlspQZEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDEyZDU1ZTEtMmFkMi0z ZDUwLTkwZGEtNTE4ZDUzY2E3NDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGNgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlYx3AsUJc7SaLM710+DBBJIZHybK7Bqm58YhVy3DkT46rz2Lu/vn/E hk0Vr0iJHalU7YrnChWI2CIRTp0vf/ZDEObyUPpyAxyu+XtwmvNjvVt8Rz0A8SKY 8S9wWC12O6rtmjys81h7b04uRudYe25amMkfqrJE031hv8VAqckNlA5rL66HlrBR ulXOg2hKWqLyNdMEO/DvjWd/+Tjsx4HLYyYOqjAkzOR2IB6slsIRkzTPOeVJjO0q 1Md3lREDZh3Ij2cnRHw6NSh5Gqy2ld/tPCzXyCBJcMlboNAiDNb+ZNhL339OJGGf lqIMKaeF/LvtdWf5wxw5XIf/OK5DIbM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:52 2025 by rpki-client