$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/647de118-a30c-3df9-8a36-1fa586805780.roa File: 647de118-a30c-3df9-8a36-1fa586805780.roa (raw, json) Hash identifier: wdbW7P/k79qFHzxWjtutUrk+u5cI9JkPrhMZz+pWiYc= Subject key identifier: F3:2E:CB:80:44:3E:62:7C:C3:C9:4E:32:C6:EF:07:77:33:0F:B7:C0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161C272A52B3EB5F47E3180 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/647de118-a30c-3df9-8a36-1fa586805780.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 24.236.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:c2:72:a5:2b:3e:b5:f4:7e:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=7ac99332-50be-493d-ad1b-ba577e5fc1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:b6:ce:04:8f:b6:bd:a0:0e:44:75:41:c3: 9d:a9:f9:47:fd:8b:98:8d:b0:e3:78:65:f4:89:a3: 8e:17:fc:ea:e7:a3:91:90:73:2f:51:3c:0b:c1:dc: d2:1c:93:75:06:57:9b:2d:65:90:6f:66:a6:f6:59: 8c:24:23:c0:cf:22:c9:f8:5b:b1:21:0e:2d:b3:7a: f4:5b:cc:75:6e:28:47:01:2d:56:5c:ad:31:36:22: c3:96:fa:30:dc:59:35:f5:cd:be:96:54:45:7d:41: 84:81:ba:53:40:1a:5c:02:d9:0d:3f:ce:2a:67:63: 26:5c:17:e6:b6:36:10:b0:da:bb:55:57:ba:e9:ab: a1:51:9f:7f:34:b8:b9:2e:e4:6c:0c:f1:03:3c:21: d9:29:b5:fb:6c:a3:cb:bb:fd:ba:02:9f:f2:e0:5d: 4b:4b:c0:cb:f0:cd:1c:8c:b0:fb:e0:9c:c2:ab:e5: f5:11:80:4e:70:3f:77:24:6f:de:d6:72:39:a4:1a: dc:85:29:82:a4:b8:d8:d4:79:24:5c:67:8b:91:7d: 50:8a:12:20:d3:7e:55:55:9c:07:83:47:27:8a:87: a8:7c:24:e1:a5:4a:df:f1:e1:96:d2:1b:8b:33:f1: 89:0e:66:32:e4:1a:c2:29:cd:c5:07:d7:23:bf:ae: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:CB:80:44:3E:62:7C:C3:C9:4E:32:C6:EF:07:77:33:0F:B7:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/647de118-a30c-3df9-8a36-1fa586805780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.236.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:13:a4:26:f5:3e:1b:2e:96:a1:8a:ae:dd:07:11:48:1f:e9: 37:64:64:79:6c:d8:fd:47:70:3b:bd:34:42:6a:a0:d5:5a:e7: 84:b7:87:0c:e9:6c:5c:ab:45:69:96:81:0e:8c:36:43:ee:5c: 05:ab:fb:4a:a1:e6:ac:41:70:3b:9d:52:a3:8a:83:9c:16:f1: a5:21:e8:b2:8e:aa:ec:d4:5d:c1:1c:d8:e6:df:d8:78:20:8f: 85:a9:c2:9c:87:55:e1:9d:7a:5f:bf:6a:0a:7b:d4:57:23:c1: 03:6a:95:c8:61:f1:31:0b:9b:a1:53:c8:04:ed:d2:59:27:cc: a0:6b:11:59:51:3b:20:ae:d3:c6:a4:2a:45:40:9e:72:fb:2e: 66:05:5d:cb:1d:67:05:54:1e:0b:6b:b7:d4:03:5d:00:73:35: fe:b2:de:c8:35:a8:b1:91:a6:26:21:86:54:09:0f:03:f5:19: 7b:31:6e:a5:07:9e:f9:ef:2f:ad:2b:26:9f:fa:37:58:6d:5f: 8a:6e:71:80:8f:d6:72:62:59:e0:49:35:e5:e8:c9:54:95:eb: 4b:4a:11:a6:4e:06:ba:b1:ea:8f:69:72:cf:cd:86:b9:4c:5c: 51:99:56:f7:86:c8:03:52:9c:1c:4d:66:8e:cc:5e:7d:3a:de: 87:e5:f8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYcJypSs+tfR+MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk N2FjOTkzMzItNTBiZS00OTNkLWFkMWItYmE1NzdlNWZjMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTW2zgSPtr2gDkR1QcOdqflH/YuYjbDjeGX0 iaOOF/zq56ORkHMvUTwLwdzSHJN1BlebLWWQb2am9lmMJCPAzyLJ+FuxIQ4ts3r0 W8x1bihHAS1WXK0xNiLDlvow3Fk19c2+llRFfUGEgbpTQBpcAtkNP84qZ2MmXBfm tjYQsNq7VVe66auhUZ9/NLi5LuRsDPEDPCHZKbX7bKPLu/26Ap/y4F1LS8DL8M0c jLD74JzCq+X1EYBOcD93JG/e1nI5pBrchSmCpLjY1HkkXGeLkX1QihIg035VVZwH g0cnioeofCThpUrf8eGW0huLM/GJDmYy5BrCKc3FB9cjv65BqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMuy4BEPmJ8w8lOMsbvB3czD7fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjQ3ZGUxMTgtYTMwYy0z ZGY5LThhMzYtMWZhNTg2ODA1NzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADITpCb1PhsulqGKrt0HEUgf6TdkZHls2P1HcDu9NEJqoNVa54S3hwzp bFyrRWmWgQ6MNkPuXAWr+0qh5qxBcDudUqOKg5wW8aUh6LKOquzUXcEc2Obf2Hgg j4WpwpyHVeGdel+/agp71FcjwQNqlchh8TELm6FTyATt0lknzKBrEVlROyCu08ak KkVAnnL7LmYFXcsdZwVUHgtrt9QDXQBzNf6y3sg1qLGRpiYhhlQJDwP1GXsxbqUH nvnvL60rJp/6N1htX4pucYCP1nJiWeBJNeXoyVSV60tKEaZOBrqx6o9pcs/NhrlM XFGZVveGyANSnBxNZo7MXn063ofl+HI= -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:12 2025 by rpki-client