$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af34891b-dc1e-39f7-aa39-5f54c9c07fc1.roa File: af34891b-dc1e-39f7-aa39-5f54c9c07fc1.roa (raw, json) Hash identifier: BNsI0PH9j+JLBZsSw2Ys4S7innMtw+SmEh8R0WTKdpc= Subject key identifier: 4A:76:B9:21:6E:75:2D:2B:9A:73:7E:5E:41:F5:9C:E3:45:F1:3C:12 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161FB6785EC5A77073D5D80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af34891b-dc1e-39f7-aa39-5f54c9c07fc1.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 71.95.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:fb:67:85:ec:5a:77:07:3d:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=4a6207a1-5968-4706-9e13-7e5f41c8f5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:aa:2a:cd:75:71:2c:c9:a0:43:d4:51:93: 9e:21:f9:ea:11:cb:18:71:88:3c:44:a9:5d:20:26: 78:f9:84:e0:f0:92:01:c0:35:69:8b:85:2f:8b:5f: 39:31:70:88:b3:c1:52:d7:6a:71:32:0d:62:0e:95: 6b:0e:06:d4:37:59:20:12:a9:c4:c5:0f:8e:15:71: 36:bb:f5:5a:53:6b:0d:f9:6d:d5:b8:39:0f:2c:bb: ef:02:33:27:1d:28:5f:d4:40:ee:8a:bf:7b:1b:24: 1c:e0:6f:3f:51:ef:5c:c8:40:45:b9:8a:7b:69:00: 7b:71:48:53:f9:51:a8:ec:bb:77:3a:ec:89:05:76: 67:d7:f2:80:8d:30:12:8f:97:f2:c8:fb:c1:0f:45: 02:0a:1f:11:87:ac:52:a6:68:9f:18:f3:2b:8d:b0: 1f:23:ec:e3:bc:80:0b:3d:b9:84:4f:83:d9:f8:4b: eb:24:87:b3:3f:96:87:f7:d9:b0:85:19:19:c1:2e: c6:55:17:e4:c6:0b:3b:ce:b0:49:ab:e8:1d:58:02: 73:b0:f4:37:80:a9:58:e2:a5:47:82:a0:7c:67:14: d1:6b:52:f5:3c:9a:46:c2:32:30:4e:8b:3c:e3:d0: 17:10:93:3e:02:fc:7e:2a:1d:72:be:3f:10:39:37: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:76:B9:21:6E:75:2D:2B:9A:73:7E:5E:41:F5:9C:E3:45:F1:3C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af34891b-dc1e-39f7-aa39-5f54c9c07fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.95.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e5:dd:7a:0e:1e:a2:5f:41:0f:8f:91:51:43:05:4f:f0:de: f4:05:14:51:34:00:3a:2f:1d:df:0c:32:a8:ea:43:f6:7e:a4: 8a:8e:bb:0d:0b:ad:5d:f4:7b:37:56:00:e5:12:95:3c:eb:7d: b8:bc:20:1a:d3:eb:7a:cc:40:36:a7:54:4f:ef:b2:7d:99:fa: b6:4e:f3:c0:bf:02:53:ec:12:4e:22:70:2a:21:73:94:26:81: 93:9e:95:bf:61:0d:db:2b:14:3e:4b:9d:ac:2d:98:df:cd:74: 5b:f6:5b:d3:b1:0f:fa:ef:da:ea:86:3c:02:44:7c:ea:fe:ff: b9:91:07:71:c5:62:ca:1a:e7:5e:0f:f5:aa:1e:f9:70:92:c5: 58:f7:5c:f0:c8:93:d7:70:92:6a:37:ac:94:bb:54:15:7c:94: 29:28:61:7b:5d:8a:af:ea:ef:fe:29:13:fc:96:ad:ce:bd:d9: e7:f4:12:60:30:fc:90:0e:7a:cb:f8:31:ce:d9:79:2e:dd:1e: ee:a3:51:3a:26:48:86:d6:82:4e:6a:96:69:85:3e:86:ec:8c: d3:8e:c5:69:e2:2e:f8:aa:4a:6d:ac:48:2e:53:98:b3:1a:15: e4:38:b3:64:fa:23:4c:72:70:6b:4c:01:35:74:aa:cc:6c:3c: 9e:7f:71:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYftnhexadwc9XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NGE2MjA3YTEtNTk2OC00NzA2LTllMTMtN2U1ZjQxYzhmNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiOqKs11cSzJoEPUUZOeIfnqEcsYcYg8RKld ICZ4+YTg8JIBwDVpi4Uvi185MXCIs8FS12pxMg1iDpVrDgbUN1kgEqnExQ+OFXE2 u/VaU2sN+W3VuDkPLLvvAjMnHShf1EDuir97GyQc4G8/Ue9cyEBFuYp7aQB7cUhT +VGo7Lt3OuyJBXZn1/KAjTASj5fyyPvBD0UCCh8Rh6xSpmifGPMrjbAfI+zjvIAL PbmET4PZ+EvrJIezP5aH99mwhRkZwS7GVRfkxgs7zrBJq+gdWAJzsPQ3gKlY4qVH gqB8ZxTRa1L1PJpGwjIwTos849AXEJM+Avx+Kh1yvj8QOTfcNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp2uSFudS0rmnN+XkH1nONF8TwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWYzNDg5MWItZGMxZS0z OWY3LWFhMzktNWY1NGM5YzA3ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR1/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfl3XoOHqJfQQ+PkVFDBU/w3vQFFFE0ADovHd8MMqjqQ/Z+pIqOuw0L rV30ezdWAOUSlTzrfbi8IBrT63rMQDanVE/vsn2Z+rZO88C/AlPsEk4icCohc5Qm gZOelb9hDdsrFD5LnawtmN/NdFv2W9OxD/rv2uqGPAJEfOr+/7mRB3HFYsoa514P 9aoe+XCSxVj3XPDIk9dwkmo3rJS7VBV8lCkoYXtdiq/q7/4pE/yWrc692ef0EmAw /JAOesv4Mc7ZeS7dHu6jUTomSIbWgk5qlmmFPobsjNOOxWniLviqSm2sSC5TmLMa FeQ4s2T6I0xycGtMATV0qsxsPJ5/cfY= -----END CERTIFICATE-----Generated at Tue Aug 5 20:09:16 2025 by rpki-client