$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa File: 9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa (raw, json) Hash identifier: Wd6VwBpHkaeJhhVMynx9Z2gi6Ic+tIRE8qEf21nDkwc= Subject key identifier: 08:0F:EF:F9:35:39:65:F1:04:BA:26:8F:35:47:28:4D:1E:E2:BD:C6 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA1615A0B6ED8E6BB6A04BE80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.189.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:5a:0b:6e:d8:e6:bb:6a:04:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8195c8d7-e964-4ae8-a47c-6f976ce7fb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:c2:88:4e:d3:5f:21:53:36:6a:ab:52:7c: dc:39:e9:46:8b:40:53:0e:84:87:ab:0c:ca:9c:3e: 4c:ea:63:39:e5:13:07:e9:1d:83:e8:0d:c5:6b:06: 45:08:9c:2b:2a:ac:14:b4:85:18:40:a9:df:a5:a1: 51:37:c4:f8:97:92:a7:22:33:1a:bf:32:b0:82:ae: 4b:b3:a6:be:69:ed:bc:72:4b:c0:3c:83:e0:11:93: 36:8b:ce:97:8b:12:93:9a:9f:13:5f:5a:41:fc:85: 90:7e:30:89:08:f8:61:4b:21:83:4d:89:6e:16:04: 4f:e0:20:a2:a0:6b:70:c8:ad:a0:53:eb:6b:6c:1f: 34:41:2b:54:a7:61:a3:70:67:ad:0c:a6:51:b6:ba: a2:6e:0e:d3:5e:e7:6d:b2:74:c4:12:ea:96:0d:29: e7:84:d6:c0:1f:d6:4d:07:48:c8:24:32:37:29:d7: 4b:ea:46:ab:c5:20:51:6f:7d:06:2d:52:e7:15:ac: 9f:e0:48:47:6e:76:22:bf:85:ce:b5:17:0f:a5:50: 73:14:74:37:87:60:35:7d:47:ad:35:db:66:f2:f2: 11:91:30:16:14:1b:f8:92:8c:32:46:71:4d:83:6f: 39:9a:b1:59:95:e7:f7:d4:14:83:9d:11:83:06:38: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:EF:F9:35:39:65:F1:04:BA:26:8F:35:47:28:4D:1E:E2:BD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c6:0b:cd:ce:03:5c:3d:3c:f6:db:c7:f1:e0:8f:de:18:e6: db:61:5e:37:13:f5:06:dc:04:23:46:5f:d3:ba:ed:46:4b:74: a5:99:4f:52:ae:e5:eb:6b:01:78:13:97:15:44:14:cc:3a:eb: 67:bc:7a:f8:c6:a9:af:b5:ba:e6:2f:d2:12:1b:7e:db:dd:1f: 33:f0:08:f2:c8:55:29:55:25:5e:9f:4d:72:40:39:94:bf:2a: 2d:c0:d8:ff:02:7c:28:50:21:c9:5e:00:bf:a2:15:3b:35:21: 65:cf:f2:9b:c7:18:cb:fd:eb:7c:68:d1:c4:be:69:1d:e2:8e: 47:42:b1:56:d5:6a:26:48:fc:30:41:56:a0:a3:c9:ee:4f:3b: 2a:c1:7f:f9:37:90:88:5b:f1:05:92:3a:51:e5:75:1f:ed:0f: 4e:40:a4:ca:38:f1:38:83:80:61:b9:97:1b:e4:6b:61:82:0c: 3d:fe:81:c4:73:83:48:f1:4a:e2:3d:e2:ad:11:80:ed:e2:c8: cc:1c:9e:5c:6d:77:ce:17:cb:88:f0:ff:c2:cc:39:a3:28:25: 93:24:a7:5a:3a:fc:42:fc:dd:09:19:bf:ba:3b:87:eb:76:4c: 0d:31:8a:45:f1:e4:d0:e6:af:7f:77:bd:c1:5a:21:fa:62:47: d9:67:04:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVoLbtjmu2oEvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ODE5NWM4ZDctZTk2NC00YWU4LWE0N2MtNmY5NzZjZTdmYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU3CiE7TXyFTNmqrUnzcOelGi0BTDoSHqwzK nD5M6mM55RMH6R2D6A3FawZFCJwrKqwUtIUYQKnfpaFRN8T4l5KnIjMavzKwgq5L s6a+ae28ckvAPIPgEZM2i86XixKTmp8TX1pB/IWQfjCJCPhhSyGDTYluFgRP4CCi oGtwyK2gU+trbB80QStUp2GjcGetDKZRtrqibg7TXudtsnTEEuqWDSnnhNbAH9ZN B0jIJDI3KddL6karxSBRb30GLVLnFayf4EhHbnYiv4XOtRcPpVBzFHQ3h2A1fUet Ndtm8vIRkTAWFBv4kowyRnFNg285mrFZlef31BSDnRGDBjiLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgP7/k1OWXxBLomjzVHKE0e4r3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWNhYTdhYTMtYjI1NS0z OTc0LWI4YmUtNjE2YTljZjdiOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/GC83OA1w9PPbbx/Hgj94Y5tthXjcT9QbcBCNGX9O67UZLdKWZT1Ku 5etrAXgTlxVEFMw662e8evjGqa+1uuYv0hIbftvdHzPwCPLIVSlVJV6fTXJAOZS/ Ki3A2P8CfChQIcleAL+iFTs1IWXP8pvHGMv963xo0cS+aR3ijkdCsVbVaiZI/DBB VqCjye5POyrBf/k3kIhb8QWSOlHldR/tD05ApMo48TiDgGG5lxvka2GCDD3+gcRz g0jxSuI94q0RgO3iyMwcnlxtd84Xy4jw/8LMOaMoJZMkp1o6/EL83QkZv7o7h+t2 TA0xikXx5NDmr393vcFaIfpiR9lnBK4= -----END CERTIFICATE-----Generated at Wed Aug 6 06:02:18 2025 by rpki-client