$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/acb5f663-c43d-31de-9654-f86fe79c8a78.roa File: acb5f663-c43d-31de-9654-f86fe79c8a78.roa (raw, json) Hash identifier: VzWcgSY/aecnLBOWqj9WJgRJbHvp2YymhY4dTwRnNVg= Subject key identifier: 5B:95:40:8D:F4:6F:7E:63:C8:B8:91:69:ED:22:4C:4F:D2:3E:10:AA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DE8338D4762CA4C6EEA00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/acb5f663-c43d-31de-9654-f86fe79c8a78.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.240.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:e8:33:8d:47:62:ca:4c:6e:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=fe129604-afca-4500-b3df-fe5d570c74de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:d5:99:c1:83:e0:3f:94:f5:c5:f5:de:e8: 9b:80:60:fe:83:be:4e:32:b6:16:e0:ee:61:b3:11: ea:15:ef:df:7f:4a:f7:fc:5d:10:06:2e:42:c3:19: 7e:bf:57:42:68:e7:ec:a9:1f:9c:85:f4:50:3a:2d: 89:65:3c:f6:01:94:07:ec:ca:1e:04:e8:9e:82:fc: 81:89:8d:4e:6e:6f:06:3d:90:1b:3f:8b:d7:28:d9: d2:08:6b:d9:71:9e:42:f4:06:1c:57:9e:37:c1:bf: 1b:74:37:89:45:21:1e:76:03:88:8f:d9:6d:04:79: d0:79:1d:22:75:45:f7:b7:79:a5:ec:cd:3f:ef:d4: 6d:ef:77:14:7e:22:1f:4e:80:2f:fe:0e:58:81:d5: 1c:e0:b5:88:33:56:fd:22:19:bb:c0:2d:f5:d5:db: 1a:c4:26:bb:18:3f:90:43:b6:a3:35:cc:b7:c7:b5: 54:28:5a:32:a7:3f:70:79:8a:d1:aa:78:93:42:33: 7d:f3:b7:2a:79:69:50:e3:86:17:a3:f1:ff:2d:31: 9a:82:ff:ca:86:63:56:a6:03:d3:56:7f:e9:98:b3: 1b:32:6c:b6:4a:c0:b7:c3:46:1c:c4:e7:a9:8b:42: 84:c8:42:2b:f2:bf:60:46:34:5a:c0:35:52:13:d0: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:40:8D:F4:6F:7E:63:C8:B8:91:69:ED:22:4C:4F:D2:3E:10:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/acb5f663-c43d-31de-9654-f86fe79c8a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.240.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3e:31:d5:18:7e:e1:2e:7a:c9:8d:75:20:65:85:28:43:b3: 67:3b:ae:2b:9d:fe:ae:50:58:7c:38:1b:ed:e3:74:8b:14:29: 54:1d:24:71:55:7c:e9:81:27:fd:f2:0c:ca:86:01:de:d3:97: 85:fa:09:65:75:5c:f9:82:39:f5:f5:59:2d:db:11:f2:10:88: 60:81:46:23:b3:16:2b:76:54:fb:e2:66:e2:c3:4a:a6:31:47: 47:7b:48:ba:66:b4:36:d1:c4:27:50:a6:61:7a:d5:4f:51:de: 6c:2e:0d:d8:ec:00:1e:78:cf:10:ea:a5:e0:4c:f8:f2:e7:cb: cd:f7:17:92:27:54:a0:9b:a1:95:fc:18:25:58:76:d7:dd:95: 46:51:e1:d9:21:02:a8:90:c8:10:26:bb:47:7c:64:e0:12:67: b3:9a:9a:50:ff:53:ca:ab:7d:e6:7e:62:2e:0e:f1:89:31:10: fb:cb:47:b5:fe:0e:de:b2:cc:d5:07:c2:bd:28:55:af:2e:e7: 3b:11:49:87:d0:86:ce:08:18:4d:19:51:a2:80:81:75:f1:0c: 4c:3d:71:5e:e0:84:b0:7f:b0:8e:e1:c7:2d:6f:49:3c:ea:35: 78:0c:03:86:03:67:f8:78:0c:aa:bf:e7:ed:89:af:5d:9b:57: 5b:d0:a5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHegzjUdiykxu6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZmUxMjk2MDQtYWZjYS00NTAwLWIzZGYtZmU1ZDU3MGM3NGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL3VmcGD4D+U9cX13uibgGD+g75OMrYW4O5h sxHqFe/ff0r3/F0QBi5Cwxl+v1dCaOfsqR+chfRQOi2JZTz2AZQH7MoeBOiegvyB iY1Obm8GPZAbP4vXKNnSCGvZcZ5C9AYcV543wb8bdDeJRSEedgOIj9ltBHnQeR0i dUX3t3ml7M0/79Rt73cUfiIfToAv/g5YgdUc4LWIM1b9Ihm7wC311dsaxCa7GD+Q Q7ajNcy3x7VUKFoypz9weYrRqniTQjN987cqeWlQ44YXo/H/LTGagv/KhmNWpgPT Vn/pmLMbMmy2SsC3w0YcxOepi0KEyEIr8r9gRjRawDVSE9ChcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuVQI30b35jyLiRae0iTE/SPhCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWNiNWY2NjMtYzQzZC0z MWRlLTk2NTQtZjg2ZmU3OWM4YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM+MdUYfuEuesmNdSBlhShDs2c7riud/q5QWHw4G+3jdIsUKVQdJHFV fOmBJ/3yDMqGAd7Tl4X6CWV1XPmCOfX1WS3bEfIQiGCBRiOzFit2VPviZuLDSqYx R0d7SLpmtDbRxCdQpmF61U9R3mwuDdjsAB54zxDqpeBM+PLny833F5InVKCboZX8 GCVYdtfdlUZR4dkhAqiQyBAmu0d8ZOASZ7OamlD/U8qrfeZ+Yi4O8YkxEPvLR7X+ Dt6yzNUHwr0oVa8u5zsRSYfQhs4IGE0ZUaKAgXXxDEw9cV7ghLB/sI7hxy1vSTzq NXgMA4YDZ/h4DKq/5+2Jr12bV1vQpZY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:38 2025 by rpki-client