$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8f02552-44e5-3d95-84cd-b1613d4b35ab.roa File: a8f02552-44e5-3d95-84cd-b1613d4b35ab.roa (raw, json) Hash identifier: wzx/g/ZoWJA13UCNhxXSagvYDY0Ce4y1DPKTLHWsINg= Subject key identifier: 02:B2:B3:32:C9:87:5B:8B:F7:33:08:A9:FC:D9:45:A8:8B:7C:2D:E3 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16175C411C9BA17607E3D00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8f02552-44e5-3d95-84cd-b1613d4b35ab.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 144.129.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:75:c4:11:c9:ba:17:60:7e:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=1f185394-0001-4b74-83f6-3f1d725f5d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:60:57:50:06:21:73:6b:2f:30:ca:e6:af: a9:e0:4e:97:f0:4e:60:72:9b:be:2f:71:d9:7d:c3: a1:5f:4b:b9:1f:80:fd:97:04:0f:c6:20:a5:d7:7b: 7c:04:68:4b:e3:44:b1:6d:1e:f8:65:b3:04:7c:c3: 29:79:e4:ef:f2:bd:0a:97:b3:19:29:3f:81:6c:e0: d6:6b:12:e7:1f:c3:a3:a6:8c:c1:bd:42:ca:8d:7f: 2f:21:74:1c:9e:a7:75:3a:90:aa:12:e1:b0:e6:70: 96:9d:e8:f0:02:e3:1b:0c:87:d3:cd:c4:59:27:bc: d5:f8:c4:6c:fb:14:db:26:e4:59:df:2e:4a:19:2e: e4:17:2d:be:c0:77:50:6c:34:11:e8:09:fa:c6:24: 75:bc:ca:63:c1:e0:cc:74:9c:e2:c1:09:35:f5:8e: 98:88:15:f0:bb:bf:e4:e7:e1:1a:c8:d5:39:ed:9b: e9:ce:db:68:87:59:2f:c0:73:86:55:0c:98:b5:93: 14:2c:36:a1:d3:5a:c6:5a:ee:6a:ef:f0:f5:7d:39: a1:84:a3:8b:65:4c:1e:2b:b1:93:d7:42:fe:f8:30: 1a:33:72:1a:33:87:c1:be:a8:dc:8f:01:c7:d4:05: 08:92:e5:e8:5d:a8:8e:6f:69:43:08:60:9b:8e:06: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B2:B3:32:C9:87:5B:8B:F7:33:08:A9:FC:D9:45:A8:8B:7C:2D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8f02552-44e5-3d95-84cd-b1613d4b35ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 144.129.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b1:5a:28:fa:c9:f1:f0:ad:bc:65:82:5f:5f:c7:3a:42:aa: e2:ef:99:b9:cc:6e:ac:df:d1:9d:3e:5b:84:2f:08:98:df:8e: 51:b7:20:c6:18:02:e3:02:ff:7e:e1:73:a9:b4:fd:21:84:b4: dd:0e:8c:36:43:84:22:e8:6f:2b:64:12:a0:dd:d2:13:20:d8: 3d:ca:0f:cc:90:82:b8:65:84:26:2d:5a:37:6c:9c:89:64:00: ae:89:27:4f:b6:ed:9b:38:ce:50:69:2e:a7:b7:39:cf:56:fc: 54:af:27:23:6f:af:a2:57:30:15:b3:8f:c9:e0:41:aa:a9:40: a1:f3:af:5a:c7:7a:7d:6c:4a:c1:9e:1e:19:64:bc:68:ed:1c: 7b:fc:80:81:3a:82:11:8f:93:60:dd:29:a7:c4:e5:4b:5f:66: 82:be:50:d1:bb:35:66:fe:f0:4f:18:66:c3:c1:0e:5d:43:fe: 4f:3b:91:7a:80:84:4b:ac:8b:8a:f0:3b:49:bf:d1:7a:ca:58: c0:08:61:53:ad:9d:30:46:29:ad:f5:23:6a:f3:a2:e5:fb:ff: bc:3b:b5:1d:37:c0:18:13:88:ee:94:c4:8d:8c:8f:f0:b1:4b: f9:bb:21:c0:87:25:86:ca:f1:20:2f:53:16:1b:0b:8e:e8:bf: 7b:ca:a7:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXXEEcm6F2B+PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MWYxODUzOTQtMDAwMS00Yjc0LTgzZjYtM2YxZDcyNWY1ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixNgV1AGIXNrLzDK5q+p4E6X8E5gcpu+L3HZ fcOhX0u5H4D9lwQPxiCl13t8BGhL40SxbR74ZbMEfMMpeeTv8r0Kl7MZKT+BbODW axLnH8OjpozBvULKjX8vIXQcnqd1OpCqEuGw5nCWnejwAuMbDIfTzcRZJ7zV+MRs +xTbJuRZ3y5KGS7kFy2+wHdQbDQR6An6xiR1vMpjweDMdJziwQk19Y6YiBXwu7/k 5+EayNU57Zvpzttoh1kvwHOGVQyYtZMULDah01rGWu5q7/D1fTmhhKOLZUweK7GT 10L++DAaM3IaM4fBvqjcjwHH1AUIkuXoXaiOb2lDCGCbjgagmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKyszLJh1uL9zMIqfzZRaiLfC3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYThmMDI1NTItNDRlNS0z ZDk1LTg0Y2QtYjE2MTNkNGIzNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkIEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSxWij6yfHwrbxlgl9fxzpCquLvmbnMbqzf0Z0+W4QvCJjfjlG3IMYY AuMC/37hc6m0/SGEtN0OjDZDhCLobytkEqDd0hMg2D3KD8yQgrhlhCYtWjdsnIlk AK6JJ0+27Zs4zlBpLqe3Oc9W/FSvJyNvr6JXMBWzj8ngQaqpQKHzr1rHen1sSsGe HhlkvGjtHHv8gIE6ghGPk2DdKafE5UtfZoK+UNG7NWb+8E8YZsPBDl1D/k87kXqA hEusi4rwO0m/0XrKWMAIYVOtnTBGKa31I2rzouX7/7w7tR03wBgTiO6UxI2Mj/Cx S/m7IcCHJYbK8SAvUxYbC47ov3vKp0Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:44 2025 by rpki-client