$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42c1eb2e-8ca1-3966-9718-df31971bd229.roa File: 42c1eb2e-8ca1-3966-9718-df31971bd229.roa (raw, json) Hash identifier: TdlYQizfI+EZLTdJB5Sk/qXSjaO3oJMrnn6uup9sB/U= Subject key identifier: 08:96:F8:E6:2F:1C:9F:7C:92:2C:90:48:BC:97:A4:28:98:7A:D9:2C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161EC9E944EE37A92433B80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42c1eb2e-8ca1-3966-9718-df31971bd229.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.114.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:ec:9e:94:4e:e3:7a:92:43:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=5b857739-8bcc-4b6e-a75d-1d4dd9ae9126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:e5:ec:fc:88:de:26:54:98:c3:6c:aa:d5: fd:af:22:1d:e3:39:a6:01:f3:21:83:c9:da:92:fe: 89:29:55:49:e0:da:50:ba:90:bc:d8:50:f7:e1:52: 52:4a:7a:fc:67:b1:54:1b:22:ce:28:c0:79:2d:71: 4e:93:cc:44:28:89:d5:74:9f:83:d0:42:f5:f1:23: 6b:79:6d:da:3e:ef:bd:44:1c:da:ed:8d:73:59:fe: 79:1f:97:3a:53:2b:ae:f5:4f:ba:4b:4f:bd:4e:83: ce:b8:9b:5e:7f:ab:90:7b:51:81:9d:5e:f5:4f:79: ad:7f:d9:9f:20:81:b6:72:bb:a4:1c:a1:b2:5c:2f: c1:d7:c1:44:fc:bc:7d:f9:06:85:f7:01:72:56:10: b5:31:57:80:e0:e9:c2:58:02:56:b8:3d:1b:92:7b: 75:b5:c0:c9:bd:07:01:68:c2:45:22:b9:0a:52:f3: 48:42:16:ea:34:dc:91:ff:50:e7:f5:36:9d:05:a1: 5d:90:ed:45:29:8f:72:9b:ac:5a:92:82:43:73:4c: 04:64:b6:33:ae:af:f9:47:e6:a4:52:aa:2f:78:a1: 09:4c:c0:fe:fa:9d:e5:df:1f:24:3c:bb:88:c4:a3: 42:76:8c:12:7a:76:fe:0a:4f:27:a4:42:50:02:5e: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:F8:E6:2F:1C:9F:7C:92:2C:90:48:BC:97:A4:28:98:7A:D9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42c1eb2e-8ca1-3966-9718-df31971bd229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8b:11:34:77:bf:3c:3c:d9:21:2a:7c:56:52:27:9e:55:d0: c5:90:53:b0:3d:b2:f0:7a:41:ad:19:d7:f0:75:21:ae:35:b1: 58:bb:6e:4f:4a:37:79:fa:20:ff:95:74:e7:b2:f2:14:c5:28: 45:be:35:71:cc:38:79:ce:b7:5d:2b:3f:49:c7:96:02:52:77: ec:c2:5c:aa:da:bc:ac:7e:3b:0b:2e:51:6b:f0:87:5b:26:3d: 0c:41:75:3f:83:6d:d8:71:66:02:28:16:59:0a:57:6f:ad:9f: 67:18:e1:c0:13:59:ed:ac:84:40:1e:42:f5:a9:ac:1f:11:c3: 8d:fa:2b:6f:90:c7:9e:e4:41:83:49:87:67:81:ce:63:fb:1e: 04:a4:21:5c:6a:63:18:3b:ca:79:a4:b7:62:81:f7:41:57:35: 39:c8:e4:18:57:22:cf:fb:c8:85:63:8b:c7:f1:79:01:f6:35: 1b:b0:cf:70:c8:51:1f:14:40:3c:04:8a:72:f2:27:4b:9d:ba: 34:1d:39:9d:1e:97:ae:b9:00:8e:7f:da:08:d7:22:1d:25:2a: 77:d7:94:f6:fc:4c:d1:8e:f1:d1:88:9f:e4:1c:cb:b6:25:1e: 66:6d:0d:82:fb:84:8e:d5:9e:21:27:33:3c:84:c8:24:3f:fd: a6:4c:c1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYeyelE7jepJDO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NWI4NTc3MzktOGJjYy00YjZlLWE3NWQtMWQ0ZGQ5YWU5MTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB/l7PyI3iZUmMNsqtX9ryId4zmmAfMhg8na kv6JKVVJ4NpQupC82FD34VJSSnr8Z7FUGyLOKMB5LXFOk8xEKInVdJ+D0EL18SNr eW3aPu+9RBza7Y1zWf55H5c6Uyuu9U+6S0+9ToPOuJtef6uQe1GBnV71T3mtf9mf IIG2crukHKGyXC/B18FE/Lx9+QaF9wFyVhC1MVeA4OnCWAJWuD0bknt1tcDJvQcB aMJFIrkKUvNIQhbqNNyR/1Dn9TadBaFdkO1FKY9ym6xakoJDc0wEZLYzrq/5R+ak UqoveKEJTMD++p3l3x8kPLuIxKNCdowSenb+Ck8npEJQAl67eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiW+OYvHJ98kiyQSLyXpCiYetksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDJjMWViMmUtOGNhMS0z OTY2LTk3MTgtZGYzMTk3MWJkMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARHIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCLETR3vzw82SEqfFZSJ55V0MWQU7A9svB6Qa0Z1/B1Ia41sVi7bk9K N3n6IP+VdOey8hTFKEW+NXHMOHnOt10rP0nHlgJSd+zCXKravKx+OwsuUWvwh1sm PQxBdT+DbdhxZgIoFlkKV2+tn2cY4cATWe2shEAeQvWprB8Rw436K2+Qx57kQYNJ h2eBzmP7HgSkIVxqYxg7ynmkt2KB90FXNTnI5BhXIs/7yIVji8fxeQH2NRuwz3DI UR8UQDwEinLyJ0udujQdOZ0el665AI5/2gjXIh0lKnfXlPb8TNGO8dGIn+Qcy7Yl HmZtDYL7hI7VniEnMzyEyCQ//aZMwUQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:16 2025 by rpki-client