$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87d8d56a-4f4a-3e4c-964c-8dd805b9f0c4.roa File: 87d8d56a-4f4a-3e4c-964c-8dd805b9f0c4.roa (raw, json) Hash identifier: LcjRaORmi2dYFKWIu/LodvDxdd+tVoEo3qbuV0OJwu4= Subject key identifier: 2F:D1:42:43:8F:83:CA:06:77:F8:8F:DA:AC:76:0F:43:75:4F:8E:B0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DD6DE721F248AC9329600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87d8d56a-4f4a-3e4c-964c-8dd805b9f0c4.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 71.81.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:d6:de:72:1f:24:8a:c9:32:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f63c4a0e-c281-413a-969e-a4beec9faa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:8c:09:54:c0:0d:46:04:94:5c:92:cf:09: 23:7c:01:67:ae:88:88:da:d1:56:5a:b6:f0:04:ce: 20:d8:ba:ab:c9:db:43:2f:4c:fd:93:68:5d:3b:1a: 90:16:b0:7a:56:d8:53:6a:b3:cf:99:f1:70:fc:0e: 82:be:20:cb:90:1e:ac:ab:ed:8d:1f:6d:8d:eb:fc: 4a:59:1e:73:e5:1a:4a:22:4a:26:33:e6:e8:cf:74: ea:a8:c7:5a:88:cd:e0:4b:ab:5c:44:96:57:86:4f: 4c:3b:ec:5e:f4:e8:64:c3:5a:34:18:ff:a2:4c:c4: 25:a5:f3:8e:b8:81:3b:9a:15:09:f6:ab:9c:0b:7a: ae:e1:8b:14:60:a9:a1:05:f9:de:25:42:35:f9:e7: fb:91:39:c4:47:85:b3:51:8a:49:ec:91:67:ea:dd: b6:c5:b4:e2:5b:bd:45:60:11:b2:62:5e:69:42:87: 02:71:db:1b:27:f5:e1:fd:46:6a:b7:fc:79:ea:2b: c9:35:29:a9:a3:bb:57:1f:eb:c7:92:e9:af:d5:8c: 75:4e:f0:e2:c2:6b:43:15:2b:12:37:d4:35:a8:97: 50:ad:79:d3:de:a5:66:85:87:18:2f:ff:9c:11:ae: 44:08:8a:39:5b:e6:c7:49:57:11:54:f8:82:10:78: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:42:43:8F:83:CA:06:77:F8:8F:DA:AC:76:0F:43:75:4F:8E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87d8d56a-4f4a-3e4c-964c-8dd805b9f0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.81.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:86:3d:9c:d6:85:b4:2e:06:29:ae:9c:75:16:60:a1:7f:15: 84:24:f9:03:ae:9c:c5:83:15:bd:0c:21:47:00:70:14:21:09: 99:d3:42:a1:a5:b7:7c:37:d5:1e:d2:49:ef:ae:16:c9:27:b2: e4:5b:7e:e1:4b:fd:00:99:8c:be:07:eb:66:6f:24:b2:dd:e5: ea:9b:bc:c7:4f:18:4e:0e:c9:8c:a9:b7:c7:4d:50:d2:5a:bf: 23:f1:3a:56:a0:c4:18:82:fa:0c:8b:43:fc:e6:b1:df:fb:c7: 99:ae:43:ae:6d:5a:e3:cb:13:19:ac:73:e9:4b:cc:90:73:00: 66:90:d9:5d:3f:02:6d:b8:70:1a:30:37:82:61:5e:db:78:33: ff:7f:72:42:da:14:6f:24:27:b1:01:b1:87:5d:ad:8d:1e:06: 26:4a:9d:ff:f3:e8:85:ad:13:64:d3:c4:bb:89:e3:01:68:64: b6:9e:df:4b:b9:c4:fb:c3:f5:92:b8:33:2b:42:4b:d5:16:a8: 8e:e4:a4:38:a5:b0:b5:ce:5e:f0:0f:73:b1:66:1b:60:88:80: 8d:70:f5:38:94:3d:eb:ec:e9:83:f2:ea:33:4a:61:f6:94:a2: ee:6e:f4:97:56:08:a6:a0:c2:37:28:11:0a:17:3c:8c:3a:e9: 36:c8:a4:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdbech8kiskylgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjYzYzRhMGUtYzI4MS00MTNhLTk2OWUtYTRiZWVjOWZhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcCMCVTADUYElFySzwkjfAFnroiI2tFWWrbw BM4g2LqrydtDL0z9k2hdOxqQFrB6VthTarPPmfFw/A6CviDLkB6sq+2NH22N6/xK WR5z5RpKIkomM+boz3TqqMdaiM3gS6tcRJZXhk9MO+xe9Ohkw1o0GP+iTMQlpfOO uIE7mhUJ9qucC3qu4YsUYKmhBfneJUI1+ef7kTnER4WzUYpJ7JFn6t22xbTiW71F YBGyYl5pQocCcdsbJ/Xh/UZqt/x56ivJNSmpo7tXH+vHkumv1Yx1TvDiwmtDFSsS N9Q1qJdQrXnT3qVmhYcYL/+cEa5ECIo5W+bHSVcRVPiCEHjY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/RQkOPg8oGd/iP2qx2D0N1T46wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODdkOGQ1NmEtNGY0YS0z ZTRjLTk2NGMtOGRkODA1YjlmMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyGPZzWhbQuBimunHUWYKF/FYQk+QOunMWDFb0MIUcAcBQhCZnTQqGl t3w31R7SSe+uFsknsuRbfuFL/QCZjL4H62ZvJLLd5eqbvMdPGE4OyYypt8dNUNJa vyPxOlagxBiC+gyLQ/zmsd/7x5muQ65tWuPLExmsc+lLzJBzAGaQ2V0/Am24cBow N4JhXtt4M/9/ckLaFG8kJ7EBsYddrY0eBiZKnf/z6IWtE2TTxLuJ4wFoZLae30u5 xPvD9ZK4MytCS9UWqI7kpDilsLXOXvAPc7FmG2CIgI1w9TiUPevs6YPy6jNKYfaU ou5u9JdWCKagwjcoEQoXPIw66TbIpLI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:22 2025 by rpki-client