$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e78d65a-7d43-3d45-92f1-a879cc10fd6b.roa File: 8e78d65a-7d43-3d45-92f1-a879cc10fd6b.roa (raw, json) Hash identifier: 0j4RTMBz8KDFC5I4WJ0yPdbH1kLc2zYF6mpxO7cIZjY= Subject key identifier: AE:27:B3:55:1A:1B:7B:FC:C7:E5:5B:5C:8C:7B:E6:9E:FD:81:F7:B0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161E94500FEFC7E6ADB8500 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e78d65a-7d43-3d45-92f1-a879cc10fd6b.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.191.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:e9:45:00:fe:fc:7e:6a:db:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=9a72fc92-444a-44f4-b4cd-bc60d054c781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:18:fe:aa:22:d1:07:41:7e:05:38:b7:dc: 67:00:52:38:27:26:7d:d4:08:33:5e:71:d7:cb:fd: 8d:51:4d:80:94:76:6f:3c:02:22:84:5b:ca:b0:5e: 59:32:a6:c6:2e:10:0c:97:54:34:88:c3:c1:cf:79: 9d:12:92:00:69:a5:03:ba:24:81:c7:73:d0:d3:d0: 88:5f:22:53:ec:e0:32:18:b7:4a:ed:ae:c0:fb:5d: bc:eb:61:98:62:b9:1a:33:d6:57:7c:46:93:5f:b8: b8:99:1a:ec:d6:dc:0f:7c:8f:06:81:bb:be:90:87: 4f:ac:cb:a8:6a:2d:ed:11:08:e2:51:54:2c:23:40: f0:29:80:b0:93:65:c6:d1:1a:8a:9e:2e:0c:71:97: 6f:ab:4f:38:2e:a3:a7:27:46:a3:72:b3:fb:e2:bd: be:b9:85:8b:72:19:8f:76:d2:d0:04:8e:d2:2b:7e: 74:8d:ab:cb:48:b9:74:48:72:1d:23:c2:2d:e7:74: 34:f4:5f:4b:08:6d:a8:4d:99:f3:3e:f1:ab:67:ea: fc:2d:02:5b:ad:59:a5:03:07:f6:c3:3e:69:ee:e5: 11:92:6c:4f:70:5e:72:e8:e3:f8:64:1c:64:16:5f: af:26:5e:2d:76:56:b9:91:e8:84:e0:06:3c:4b:35: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:27:B3:55:1A:1B:7B:FC:C7:E5:5B:5C:8C:7B:E6:9E:FD:81:F7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e78d65a-7d43-3d45-92f1-a879cc10fd6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:9c:55:0e:c6:90:fd:a4:3c:6b:bf:77:1b:94:e3:d8:39: fd:9c:7f:e8:c0:90:26:14:47:f1:9f:32:c9:23:95:9c:2d:fc: 96:0d:9b:e0:07:77:7f:80:ee:de:13:09:de:d5:f4:96:37:de: 9e:71:53:29:d2:fb:13:74:ae:d8:2b:cf:32:88:b1:b3:91:9c: ee:23:6b:03:9c:4f:ae:63:fc:1c:50:88:1c:6a:3d:3e:91:de: 4b:db:b2:20:92:ba:93:8c:aa:66:d5:c1:cf:32:d0:ce:2d:c5: 0a:23:8e:55:d6:0e:33:82:9a:4b:ae:2c:ad:8e:7f:4b:95:4d: c1:e6:1d:f6:26:6c:fa:18:42:d5:8b:3d:1a:59:4c:ff:8a:a1: 29:ed:a4:57:c4:a2:b5:d4:a3:30:90:85:69:33:24:e9:c9:c4: 39:b5:85:75:be:ee:fd:a4:4b:e1:f7:f6:4e:93:7c:22:c1:48: ad:dc:47:67:2d:71:e5:13:a6:90:fa:a3:e5:cd:d1:44:17:3c: 86:79:22:de:d5:e3:d1:28:87:77:41:ff:99:9c:d5:83:71:b2: 35:d9:fe:d8:69:8e:ac:82:4a:44:81:c6:46:35:3f:7e:f2:e3: df:d0:95:ca:4b:64:87:dd:ed:1d:95:fc:40:02:81:96:34:70: ea:bb:55:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYelFAP78fmrbhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OWE3MmZjOTItNDQ0YS00NGY0LWI0Y2QtYmM2MGQwNTRjNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCMY/qoi0QdBfgU4t9xnAFI4JyZ91AgzXnHX y/2NUU2AlHZvPAIihFvKsF5ZMqbGLhAMl1Q0iMPBz3mdEpIAaaUDuiSBx3PQ09CI XyJT7OAyGLdK7a7A+12862GYYrkaM9ZXfEaTX7i4mRrs1twPfI8Ggbu+kIdPrMuo ai3tEQjiUVQsI0DwKYCwk2XG0RqKni4McZdvq084LqOnJ0ajcrP74r2+uYWLchmP dtLQBI7SK350javLSLl0SHIdI8It53Q09F9LCG2oTZnzPvGrZ+r8LQJbrVmlAwf2 wz5p7uURkmxPcF5y6OP4ZBxkFl+vJl4tdla5keiE4AY8SzVh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4ns1UaG3v8x+VbXIx75p79gfewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGU3OGQ2NWEtN2Q0My0z ZDQ1LTkyZjEtYTg3OWNjMTBmZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy2nFUOxpD9pDxrv3cblOPYOf2cf+jAkCYUR/GfMskjlZwt/JYNm+AH d3+A7t4TCd7V9JY33p5xUynS+xN0rtgrzzKIsbORnO4jawOcT65j/BxQiBxqPT6R 3kvbsiCSupOMqmbVwc8y0M4txQojjlXWDjOCmkuuLK2Of0uVTcHmHfYmbPoYQtWL PRpZTP+KoSntpFfEorXUozCQhWkzJOnJxDm1hXW+7v2kS+H39k6TfCLBSK3cR2ct ceUTppD6o+XN0UQXPIZ5It7V49Eoh3dB/5mc1YNxsjXZ/thpjqyCSkSBxkY1P37y 49/QlcpLZIfd7R2V/EACgZY0cOq7VRk= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:43 2025 by rpki-client