$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a8cc575-169d-3d36-aef6-ebf9b79524b3.roa File: 8a8cc575-169d-3d36-aef6-ebf9b79524b3.roa (raw, json) Hash identifier: KDqdJq/3fZj7oEXFhV2s9u4yKLh9wIYtj1GnSlPa9AU= Subject key identifier: 95:B9:12:D2:93:ED:D6:1B:5C:09:DC:8C:00:F5:2A:70:85:A8:3C:61 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16157F82F7E1959F8AB9A80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a8cc575-169d-3d36-aef6-ebf9b79524b3.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.117.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:57:f8:2f:7e:19:59:f8:ab:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=2a5ee05f-4f54-412c-b8e9-b706590ff396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:19:c1:d5:f2:04:b7:91:a2:0e:96:fa:14: 09:b7:8f:b9:9e:fe:a0:7c:5e:89:b7:54:8e:e8:b3: 2a:92:69:72:48:9f:0f:df:75:06:1b:35:fe:a5:ac: 2a:c6:ac:f7:c3:a8:6d:a8:9d:5c:1f:1a:51:f2:a3: f1:80:db:2f:d3:73:3f:da:fa:9e:c4:4b:83:8d:87: f7:81:61:f7:88:cc:d4:70:8b:46:1d:8b:67:ec:64: b9:8b:2c:1b:99:50:50:ec:fc:c4:8a:29:15:e6:a3: 22:c0:66:90:69:2d:d4:38:d8:68:34:c9:60:eb:3d: 42:95:9f:e9:37:09:b9:91:c0:33:e8:bc:a1:74:8a: 3d:e6:63:08:88:c7:f2:a0:c7:f1:f3:7f:01:8d:f0: 8b:d3:73:a6:6a:23:6b:c5:30:f5:c6:a3:98:7e:3a: f4:f7:13:e2:13:74:e4:1b:90:f7:be:ce:ad:50:28: 50:c5:2f:71:2d:65:ac:30:cc:e5:e2:e6:0c:51:9f: 81:fd:f7:c3:a4:39:c7:59:f7:98:e0:d8:88:6d:b8: 97:a2:9f:6a:48:e3:1a:0a:44:ef:d3:11:2d:29:2b: 41:07:87:32:e3:25:66:8d:fa:a9:28:90:79:af:b6: 4c:9a:79:1c:0b:80:a6:da:8b:f7:82:f5:34:a9:0a: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:12:D2:93:ED:D6:1B:5C:09:DC:8C:00:F5:2A:70:85:A8:3C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a8cc575-169d-3d36-aef6-ebf9b79524b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.117.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f0:67:4d:c4:cd:1d:9b:89:66:6a:01:51:37:02:ec:b5:a8: 48:c0:4f:e6:bc:23:1b:fd:e5:ce:cb:de:10:75:a6:47:74:76: f6:c5:85:c8:48:cd:da:1b:f4:f7:9d:e9:de:40:08:e1:ba:02: 53:a8:aa:3e:76:be:81:74:f7:4a:94:df:75:78:cf:ad:ad:95: 31:67:39:34:81:05:31:a4:50:cf:24:48:87:4d:bb:cb:ec:67: 48:3c:72:e5:c6:a9:1a:6c:5d:e6:a9:57:cb:af:ea:b1:5e:4c: 54:10:69:a4:40:f7:40:ca:1c:a7:07:b0:9b:00:41:34:bb:c2: 51:67:40:ad:85:8f:de:1a:e5:eb:ad:3c:29:08:3c:0a:21:4f: 02:65:25:62:4f:97:fc:1a:a6:0f:c6:89:68:9f:73:cc:e0:08: 28:e0:a6:95:99:34:01:04:fe:7b:c9:ae:7f:b7:8e:86:aa:53: 9e:59:48:d0:34:dc:9f:37:90:e7:0e:e5:3d:38:35:0c:90:25: be:03:96:60:6c:91:74:9d:17:18:79:92:30:21:3a:35:85:a0: 05:41:2f:eb:49:ff:6e:6e:ab:17:0a:b6:95:a2:5a:01:a5:70: fb:98:f1:63:5c:72:7a:8e:eb:43:92:b6:3b:ea:6c:fe:6a:82: 42:e3:30:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVf4L34ZWfirmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MmE1ZWUwNWYtNGY1NC00MTJjLWI4ZTktYjcwNjU5MGZmMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIMZwdXyBLeRog6W+hQJt4+5nv6gfF6Jt1SO 6LMqkmlySJ8P33UGGzX+pawqxqz3w6htqJ1cHxpR8qPxgNsv03M/2vqexEuDjYf3 gWH3iMzUcItGHYtn7GS5iywbmVBQ7PzEiikV5qMiwGaQaS3UONhoNMlg6z1ClZ/p Nwm5kcAz6LyhdIo95mMIiMfyoMfx838BjfCL03OmaiNrxTD1xqOYfjr09xPiE3Tk G5D3vs6tUChQxS9xLWWsMMzl4uYMUZ+B/ffDpDnHWfeY4NiIbbiXop9qSOMaCkTv 0xEtKStBB4cy4yVmjfqpKJB5r7ZMmnkcC4Cm2ov3gvU0qQr1FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW5EtKT7dYbXAncjAD1KnCFqDxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGE4Y2M1NzUtMTY5ZC0z ZDM2LWFlZjYtZWJmOWI3OTUyNGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDwZ03EzR2biWZqAVE3Auy1qEjAT+a8Ixv95c7L3hB1pkd0dvbFhchI zdob9Ped6d5ACOG6AlOoqj52voF090qU33V4z62tlTFnOTSBBTGkUM8kSIdNu8vs Z0g8cuXGqRpsXeapV8uv6rFeTFQQaaRA90DKHKcHsJsAQTS7wlFnQK2Fj94a5eut PCkIPAohTwJlJWJPl/wapg/GiWifc8zgCCjgppWZNAEE/nvJrn+3joaqU55ZSNA0 3J83kOcO5T04NQyQJb4DlmBskXSdFxh5kjAhOjWFoAVBL+tJ/25uqxcKtpWiWgGl cPuY8WNccnqO60OStjvqbP5qgkLjMN4= -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:06 2025 by rpki-client