$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4642d9d9-2f96-3880-a93e-6e10f83351ab.roa File: 4642d9d9-2f96-3880-a93e-6e10f83351ab.roa (raw, json) Hash identifier: Fv+Trc7O10m5K4Vp6+eUkbkl9xTzmjRynuZRtM6XDlg= Subject key identifier: 9D:94:71:C1:8C:99:52:81:31:C9:4B:EE:1C:34:52:D9:A0:B5:75:0F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161F62C8CBEBC6F417FDB00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4642d9d9-2f96-3880-a93e-6e10f83351ab.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.191.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:f6:2c:8c:be:bc:6f:41:7f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=1a7c648f-298d-4e4d-942e-a487da83e44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:cd:a7:9a:63:12:72:33:b3:71:63:72:da: 96:c7:9b:a4:1b:e7:1a:70:73:f7:3c:93:d2:61:4c: 07:6e:dd:d2:7e:97:04:0b:03:28:71:ea:17:f8:82: c8:58:0b:02:aa:63:ec:a0:d4:69:89:97:e5:62:6e: c4:fd:c6:a1:91:24:0d:56:1e:6d:b3:9d:61:85:eb: 99:ff:29:b1:66:3f:28:27:35:08:df:13:6e:03:61: a2:f1:2a:9f:d1:75:79:4f:6b:b0:05:45:b1:42:38: a6:ad:71:7c:17:60:b4:5e:f3:4e:7f:a7:6c:8c:0e: 29:9c:0d:f5:c8:f6:82:1f:ea:34:22:36:6a:3c:54: 6d:66:c9:88:36:a5:d1:76:83:9b:28:97:24:d7:62: 21:8d:07:95:74:90:e5:19:cd:19:2f:c6:6a:c5:57: e5:55:50:40:45:be:ee:f0:d1:ec:af:40:b1:df:9b: f2:4e:31:e9:85:6b:88:0c:c1:0b:20:c2:cb:68:99: 36:95:54:59:0e:3a:60:b3:97:e9:86:08:e4:1f:27: 17:40:0e:d2:98:73:8a:84:3e:62:9c:9b:2d:a5:49: 53:98:b4:f1:df:90:c2:b2:81:34:1d:74:27:d3:d8: 66:01:42:cf:3c:c0:a7:54:d2:69:f7:48:c2:af:49: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:71:C1:8C:99:52:81:31:C9:4B:EE:1C:34:52:D9:A0:B5:75:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4642d9d9-2f96-3880-a93e-6e10f83351ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a8:54:f9:8e:30:ff:a7:34:4b:64:84:18:ec:a5:59:ad:33: c3:19:67:03:63:f7:81:ab:b6:6a:a0:f1:bc:2f:cb:5b:d2:0a: 29:b8:dc:2b:ad:c3:15:db:df:3b:ac:79:cf:9e:43:15:93:07: 7a:07:2c:1c:e9:33:dd:ca:0a:b5:ce:74:fb:8b:66:16:89:8d: d0:56:b9:55:61:f3:78:8d:39:15:1c:80:c0:0a:6e:10:8e:f5: 87:93:46:9e:c3:c1:ae:f5:71:74:77:ec:01:1a:31:d0:92:fc: 0f:d7:fc:c1:44:d4:62:1c:f4:a2:fa:00:a3:42:8e:83:6a:57: 5e:34:ee:a9:3c:fb:94:1c:ec:f7:51:20:ab:72:69:06:c3:ee: 10:f2:70:9d:7b:64:ff:dc:95:f8:59:c0:61:75:8a:92:59:e8: 8d:45:24:d4:7d:d4:f1:36:0f:1e:0a:8e:69:68:3d:f4:98:17: 60:97:b5:b8:21:fa:46:1e:cc:fb:f1:33:fa:24:2d:59:2b:d9: b5:12:56:74:83:0b:77:9e:ba:ed:72:71:83:c0:49:5f:45:df: 17:92:25:1c:92:d1:f3:38:d3:c8:1c:11:0f:a5:72:49:77:bc: 6a:27:f8:e8:3e:b8:6c:8c:56:8f:f2:e5:ff:9d:ea:cf:1d:bf: 16:7e:38:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYfYsjL68b0F/2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MWE3YzY0OGYtMjk4ZC00ZTRkLTk0MmUtYTQ4N2RhODNlNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE7Np5pjEnIzs3FjctqWx5ukG+cacHP3PJPS YUwHbt3SfpcECwMoceoX+ILIWAsCqmPsoNRpiZflYm7E/cahkSQNVh5ts51hheuZ /ymxZj8oJzUI3xNuA2Gi8Sqf0XV5T2uwBUWxQjimrXF8F2C0XvNOf6dsjA4pnA31 yPaCH+o0IjZqPFRtZsmINqXRdoObKJck12IhjQeVdJDlGc0ZL8ZqxVflVVBARb7u 8NHsr0Cx35vyTjHphWuIDMELIMLLaJk2lVRZDjpgs5fphgjkHycXQA7SmHOKhD5i nJstpUlTmLTx35DCsoE0HXQn09hmAULPPMCnVNJp90jCr0kYVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2UccGMmVKBMclL7hw0UtmgtXUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDY0MmQ5ZDktMmY5Ni0z ODgwLWE5M2UtNmUxMGY4MzM1MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImoVPmOMP+nNEtkhBjspVmtM8MZZwNj94Grtmqg8bwvy1vSCim43Cut wxXb3zusec+eQxWTB3oHLBzpM93KCrXOdPuLZhaJjdBWuVVh83iNORUcgMAKbhCO 9YeTRp7Dwa71cXR37AEaMdCS/A/X/MFE1GIc9KL6AKNCjoNqV1407qk8+5Qc7PdR IKtyaQbD7hDycJ17ZP/clfhZwGF1ipJZ6I1FJNR91PE2Dx4KjmloPfSYF2CXtbgh +kYezPvxM/okLVkr2bUSVnSDC3eeuu1ycYPASV9F3xeSJRyS0fM408gcEQ+lckl3 vGon+Og+uGyMVo/y5f+d6s8dvxZ+OAM= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:56 2025 by rpki-client