$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42b26c83-85de-3b6b-a563-31681e4b99d8.roa File: 42b26c83-85de-3b6b-a563-31681e4b99d8.roa (raw, json) Hash identifier: GV7tT7v17ZXwN82Lz+kUzK5SMwrFf4RNemYciO8MYkc= Subject key identifier: 2C:4D:99:4E:A5:93:DA:5E:6D:4D:D2:DA:F8:8B:D7:A7:6E:A7:F2:3C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161D9832D994664D4B134F4 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42b26c83-85de-3b6b-a563-31681e4b99d8.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.113.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:d9:83:2d:99:46:64:d4:b1:34:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=40f67e20-f9a8-45c9-82a2-1a4c9ba23f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:bc:6b:e3:5f:90:8d:31:76:9b:21:2e:8a: 0d:b8:80:49:00:01:89:d8:c0:6e:ed:8f:6d:04:37: 8c:11:61:83:7e:a8:f9:cd:3f:be:a3:f0:8d:e8:1a: 8b:05:54:2d:43:89:f1:f5:ae:d9:8f:1b:b3:e7:32: b7:cb:e2:01:3f:c7:05:ad:a0:38:bc:03:54:ed:d7: 05:cb:2e:16:f3:95:d0:1a:f2:83:0a:e5:9b:bc:17: de:0f:0e:5c:4b:8f:2c:a6:36:02:8a:e2:6c:76:8e: a1:f8:24:ee:35:a5:f3:00:43:62:83:43:bc:94:91: 21:90:f2:ed:ae:a9:4e:7f:ec:ae:5a:95:57:1e:3a: e2:9b:72:c5:ea:8f:a3:52:66:4e:34:15:6e:fc:fa: 23:b6:77:95:e9:a1:35:22:a8:96:ff:de:08:88:cc: fa:b3:73:ad:d4:98:00:b5:ca:46:32:31:34:87:e1: 45:6e:c2:8a:c5:c9:ee:12:39:6a:95:47:e2:40:9c: 7e:52:27:a0:3b:f2:3c:05:57:27:4a:d4:34:fa:69: 5c:41:7d:b6:a6:79:e9:f7:39:5d:87:64:6a:94:ae: f4:55:f6:56:a5:82:5e:da:17:be:58:05:ec:03:b4: 9d:0e:b9:6a:4a:4b:1c:1c:59:46:f9:2a:72:71:9d: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:99:4E:A5:93:DA:5E:6D:4D:D2:DA:F8:8B:D7:A7:6E:A7:F2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42b26c83-85de-3b6b-a563-31681e4b99d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.113.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:d1:b0:61:d8:43:51:5c:f7:30:88:e8:c9:93:c7:ba:74:4a: c0:2a:57:69:b2:a4:07:eb:d5:01:a2:ad:60:30:0e:e9:23:ac: 0e:9e:65:03:39:42:53:2f:31:4b:4d:e8:6e:31:21:67:1b:57: 7d:e4:e4:34:c0:f3:c6:5a:e9:e3:38:ca:4a:34:5e:91:bd:97: 84:0c:64:58:9c:38:fe:5f:60:7f:06:d5:80:6a:0d:d3:c0:cb: 22:eb:b2:23:a8:10:b9:56:78:da:a5:0c:be:cb:d3:ef:34:7a: 33:2f:f3:e8:ad:d8:8e:41:5f:14:34:d1:cf:81:c3:9a:25:e6: 81:7a:20:ce:c6:e7:fc:b7:46:de:e7:fb:64:d2:19:1d:2b:06: c1:27:0d:7d:60:7c:b6:4f:5f:52:ec:19:a2:f7:58:2a:79:a3: cc:4c:40:74:17:eb:70:8f:eb:a1:42:a5:b3:7c:4c:b3:b5:84: 13:fd:0f:79:83:0d:33:03:dc:d3:93:1b:04:f6:64:82:72:e3: f9:8c:55:8d:0c:d8:a0:96:64:e7:13:96:a2:52:fe:1c:e8:4b: a5:cf:df:70:f7:b2:b7:0b:8e:60:36:8f:b3:e0:53:5d:fb:70: bc:e2:a3:5c:55:f8:33:a6:65:5e:4b:a9:b1:d5:4d:a7:13:41: af:c6:02:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYdmDLZlGZNSxNPQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NDBmNjdlMjAtZjlhOC00NWM5LTgyYTItMWE0YzliYTIzZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNK8a+NfkI0xdpshLooNuIBJAAGJ2MBu7Y9t BDeMEWGDfqj5zT++o/CN6BqLBVQtQ4nx9a7Zjxuz5zK3y+IBP8cFraA4vANU7dcF yy4W85XQGvKDCuWbvBfeDw5cS48spjYCiuJsdo6h+CTuNaXzAENig0O8lJEhkPLt rqlOf+yuWpVXHjrim3LF6o+jUmZONBVu/PojtneV6aE1IqiW/94IiMz6s3Ot1JgA tcpGMjE0h+FFbsKKxcnuEjlqlUfiQJx+UiegO/I8BVcnStQ0+mlcQX22pnnp9zld h2RqlK70VfZWpYJe2he+WAXsA7SdDrlqSkscHFlG+SpycZ2MPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxNmU6lk9pebU3S2viL16dup/I8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDJiMjZjODMtODVkZS0z YjZiLWE1NjMtMzE2ODFlNGI5OWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbRsGHYQ1Fc9zCI6MmTx7p0SsAqV2mypAfr1QGirWAwDukjrA6eZQM5 QlMvMUtN6G4xIWcbV33k5DTA88Za6eM4yko0XpG9l4QMZFicOP5fYH8G1YBqDdPA yyLrsiOoELlWeNqlDL7L0+80ejMv8+it2I5BXxQ00c+Bw5ol5oF6IM7G5/y3Rt7n +2TSGR0rBsEnDX1gfLZPX1LsGaL3WCp5o8xMQHQX63CP66FCpbN8TLO1hBP9D3mD DTMD3NOTGwT2ZIJy4/mMVY0M2KCWZOcTlqJS/hzoS6XP33D3srcLjmA2j7PgU137 cLzio1xV+DOmZV5LqbHVTacTQa/GAnc= -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:11 2025 by rpki-client