$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa File: 89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa (raw, json) Hash identifier: zb7bvuQlCVITPAlUIjJv4zdAxPE5sXiBMtmks+sU9U8= Subject key identifier: 8B:D5:FB:25:D1:57:21:95:B4:C3:EA:7C:8D:4A:18:CE:31:6C:45:41 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA1615A6BE9E3C758EC6B4780 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.191.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:5a:6b:e9:e3:c7:58:ec:6b:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=1b2e9f3f-04de-47cf-93f7-b2be7fbc2b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:10:7c:5c:84:f7:21:8a:e4:4c:d8:ea:42: 2f:fa:c8:60:83:b6:08:29:7f:6a:ca:22:87:52:87: 9f:46:7b:e9:50:5d:3c:c7:87:03:7b:f4:76:62:df: 73:f6:c0:a0:fa:47:6c:78:47:9d:33:1f:45:26:a1: f4:82:26:2b:bc:43:ae:82:24:ae:64:e0:1a:24:ee: 34:ea:6a:12:34:8b:0a:61:c2:80:ce:6c:e2:58:3b: 39:c2:09:6a:cd:b5:fe:c7:5e:32:e7:f0:6f:cc:b3: 45:55:53:ac:80:62:6e:d0:42:7b:fc:21:bd:c8:0d: f5:ee:33:49:09:a0:4a:cc:d1:e1:84:32:50:38:49: c8:e0:96:25:ef:4b:f1:d9:4f:17:a4:93:b9:1c:f6: 0b:51:9e:44:e0:bb:3a:af:d7:20:6e:45:5b:3c:2a: b3:3c:7e:8f:ab:84:b4:62:68:3f:22:17:fe:a6:b5: 6a:4e:56:35:56:84:9e:f2:02:ee:e1:09:e4:33:09: 15:9d:a9:ad:bd:16:33:39:38:28:e5:37:ad:99:38: 9b:a6:15:89:75:e6:6c:22:87:c5:97:61:33:d5:db: 16:37:a3:4a:e8:90:a6:09:45:ec:fd:3d:56:91:8f: fb:8a:1a:22:09:3f:b8:a4:de:ca:db:ac:c3:9e:ff: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D5:FB:25:D1:57:21:95:B4:C3:EA:7C:8D:4A:18:CE:31:6C:45:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cd:5a:b6:fa:6a:83:7e:36:d8:2b:f1:4e:0f:04:c3:03:f6: fc:a4:db:0e:56:d3:a4:89:ee:c4:75:13:11:1e:3c:9e:97:5e: d0:71:8d:f2:fc:95:5d:fc:cc:60:cc:63:9c:b4:8f:88:7c:c0: 2f:ae:22:9d:cb:36:be:1c:d7:af:43:34:75:77:f1:99:9c:4a: ea:fc:db:03:ce:c0:02:e8:8d:34:37:b3:73:fa:f6:fe:52:72: 37:1e:ff:12:b3:8e:65:73:7f:3b:f4:48:82:fe:4f:ac:22:52: 60:63:ac:5f:c4:3c:34:17:2f:ac:c5:26:df:85:70:bc:7b:55: 66:a1:bb:1f:2b:fa:9b:bc:f5:d0:d6:34:e9:a6:94:a3:7d:76: cb:1e:91:4e:82:19:07:f9:60:74:4d:ab:b1:ca:42:82:cb:07: e7:a5:ef:57:86:67:7f:e4:a0:09:fb:b6:9c:24:88:46:f3:15: 6e:c5:3f:a3:04:a7:d0:c9:e5:d1:ba:c7:d4:17:70:7a:d9:eb: ca:4e:c7:77:99:5c:b9:be:cb:66:fd:c1:af:7a:04:4e:0e:53: 40:53:ff:d9:b6:72:c9:06:04:4c:8d:87:ca:ed:79:41:d7:07: e3:b7:b2:ab:9c:a8:3a:2e:c8:39:71:1b:aa:d0:56:b5:20:2b: 0d:92:5c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVpr6ePHWOxrR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MWIyZTlmM2YtMDRkZS00N2NmLTkzZjctYjJiZTdmYmMyYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4QfFyE9yGK5EzY6kIv+shgg7YIKX9qyiKH UoefRnvpUF08x4cDe/R2Yt9z9sCg+kdseEedMx9FJqH0giYrvEOugiSuZOAaJO40 6moSNIsKYcKAzmziWDs5wglqzbX+x14y5/BvzLNFVVOsgGJu0EJ7/CG9yA317jNJ CaBKzNHhhDJQOEnI4JYl70vx2U8XpJO5HPYLUZ5E4Ls6r9cgbkVbPCqzPH6Pq4S0 Ymg/Ihf+prVqTlY1VoSe8gLu4QnkMwkVnamtvRYzOTgo5TetmTibphWJdeZsIofF l2Ez1dsWN6NK6JCmCUXs/T1WkY/7ihoiCT+4pN7K26zDnv+U2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvV+yXRVyGVtMPqfI1KGM4xbEVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODliNGI1ZmItZjBmNS0z OWExLWI3YTAtNTViNzA1N2RiNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDNWrb6aoN+Ntgr8U4PBMMD9vyk2w5W06SJ7sR1ExEePJ6XXtBxjfL8 lV38zGDMY5y0j4h8wC+uIp3LNr4c169DNHV38ZmcSur82wPOwALojTQ3s3P69v5S cjce/xKzjmVzfzv0SIL+T6wiUmBjrF/EPDQXL6zFJt+FcLx7VWahux8r+pu89dDW NOmmlKN9dssekU6CGQf5YHRNq7HKQoLLB+el71eGZ3/koAn7tpwkiEbzFW7FP6ME p9DJ5dG6x9QXcHrZ68pOx3eZXLm+y2b9wa96BE4OU0BT/9m2cskGBEyNh8rteUHX B+O3squcqDouyDlxG6rQVrUgKw2SXGo= -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:07 2025 by rpki-client