$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa File: a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa (raw, json) Hash identifier: 8iURr8B4DceTMQN4DnhN1G93cm2oBCBABNMOEu5uSg4= Subject key identifier: CE:70:52:FA:B9:D7:B5:30:F8:3F:D1:B1:FA:EC:B4:5A:4A:42:A2:0A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D5C4EB0CDC86071F472F8 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 71.9.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:5c:4e:b0:cd:c8:60:71:f4:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c312d8e5-f015-4b45-98ab-15e4598feebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:9e:d9:a2:45:1e:33:c8:d2:4a:5a:3f:2b: e9:f9:34:f8:cd:10:4c:e3:e2:21:a2:99:57:43:aa: 2d:4e:03:29:73:3f:ba:69:e1:5d:c2:82:cb:3c:26: d9:03:73:18:fd:63:f3:d7:94:49:2b:af:d6:11:1f: b2:44:9a:af:96:01:b2:dc:80:64:70:88:fb:1c:fc: 9c:76:55:ab:7b:6f:83:2b:94:3b:71:c1:23:5d:b7: 04:e4:d9:4c:9e:23:48:22:0e:70:f7:d9:29:d3:cf: f9:69:d1:aa:76:4a:2c:72:d7:4e:c1:7c:c4:57:08: 85:2b:f2:e1:44:2a:79:0b:7b:ff:38:fe:8c:44:38: 25:ce:09:6f:54:b0:88:05:9e:5e:f8:64:39:fb:7f: 4f:1e:7b:c8:a5:a8:59:82:6b:ed:2b:35:58:bd:fb: f4:b6:a8:b2:ce:d1:23:7d:91:c7:69:36:7b:49:38: 87:95:b7:6f:c0:8a:c4:ae:86:cb:d2:8b:4a:d7:02: c0:94:71:30:79:ec:25:5b:30:fe:e4:12:2e:91:e0: 80:a9:0e:3f:5c:b9:1c:b7:d7:e6:23:57:f9:14:95: b2:88:22:76:a0:7b:e4:52:4f:1c:2d:9a:0c:c1:59: 49:ab:31:1c:4c:71:1f:b7:79:5f:c9:82:42:7a:55: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:52:FA:B9:D7:B5:30:F8:3F:D1:B1:FA:EC:B4:5A:4A:42:A2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a02dc7a2-9086-3cfb-a5cd-b7e4752b1f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.9.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:30:59:b7:9b:d4:0e:7f:80:cf:be:4f:e3:ac:41:f1:23:71: 10:5c:79:9b:e5:1e:33:3f:d0:36:e9:1c:9e:25:d0:84:a9:5b: 66:7b:c2:cf:68:14:54:95:b5:75:48:04:f4:ad:e2:8a:a4:78: b9:39:19:ff:70:49:93:30:f2:e1:54:c7:00:67:13:c5:37:ef: 44:f8:73:55:4d:c4:9e:94:28:1e:a1:41:98:f0:da:c2:48:43: ae:41:b9:6a:a8:54:a0:69:78:0f:61:82:01:8f:5d:2a:22:d6: c1:11:8f:16:1e:39:7d:40:70:0d:35:3f:55:f9:fc:6c:f5:2a: 8d:cb:b4:8e:0c:9a:43:55:14:02:7b:f1:75:88:27:83:d0:dd: 5b:0b:c9:f0:89:25:a2:d9:c4:d5:88:9a:24:94:d0:c0:4b:5b: 11:54:ba:26:46:9c:8b:4d:1d:6d:f2:c4:da:e8:a7:26:38:2b: cb:62:fd:dd:c7:44:18:6b:9c:81:81:89:31:a0:44:f9:42:09: 7f:25:5d:8e:62:64:d2:cd:1e:e9:b8:42:b2:a9:be:ff:59:c1: d5:fd:ff:40:d0:c8:10:4c:1a:62:2a:41:5d:d1:62:b9:ca:cc: e3:e2:c2:b6:aa:32:ac:36:1d:db:59:e9:de:46:3e:88:6e:2d: 9d:59:1b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVxOsM3IYHH0cvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzMxMmQ4ZTUtZjAxNS00YjQ1LTk4YWItMTVlNDU5OGZlZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWye2aJFHjPI0kpaPyvp+TT4zRBM4+IhoplX Q6otTgMpcz+6aeFdwoLLPCbZA3MY/WPz15RJK6/WER+yRJqvlgGy3IBkcIj7HPyc dlWre2+DK5Q7ccEjXbcE5NlMniNIIg5w99kp08/5adGqdkosctdOwXzEVwiFK/Lh RCp5C3v/OP6MRDglzglvVLCIBZ5e+GQ5+39PHnvIpahZgmvtKzVYvfv0tqiyztEj fZHHaTZ7STiHlbdvwIrErobL0otK1wLAlHEweewlWzD+5BIukeCAqQ4/XLkct9fm I1f5FJWyiCJ2oHvkUk8cLZoMwVlJqzEcTHEft3lfyYJCelX7fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5wUvq517Uw+D/RsfrstFpKQqIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTAyZGM3YTItOTA4Ni0z Y2ZiLWE1Y2QtYjdlNDc1MmIxZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgwWbeb1A5/gM++T+OsQfEjcRBceZvlHjM/0DbpHJ4l0ISpW2Z7ws9o FFSVtXVIBPSt4oqkeLk5Gf9wSZMw8uFUxwBnE8U370T4c1VNxJ6UKB6hQZjw2sJI Q65BuWqoVKBpeA9hggGPXSoi1sERjxYeOX1AcA01P1X5/Gz1Ko3LtI4MmkNVFAJ7 8XWIJ4PQ3VsLyfCJJaLZxNWImiSU0MBLWxFUuiZGnItNHW3yxNropyY4K8ti/d3H RBhrnIGBiTGgRPlCCX8lXY5iZNLNHum4QrKpvv9ZwdX9/0DQyBBMGmIqQV3RYrnK zOPiwraqMqw2HdtZ6d5GPohuLZ1ZG/c= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:03 2025 by rpki-client