$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af5b8b18-9fa6-3d8d-bde9-0a60d92bad2c.roa File: af5b8b18-9fa6-3d8d-bde9-0a60d92bad2c.roa (raw, json) Hash identifier: Jb5J1ZcuIEM2ehk921hwTAHvbbA/ylg1CFso4SjkEQc= Subject key identifier: 39:89:AC:BD:D1:95:52:50:DE:CC:68:72:1F:EA:91:89:F5:93:C6:29 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DF8E9CE98A6082A2E2E00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af5b8b18-9fa6-3d8d-bde9-0a60d92bad2c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 71.13.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:f8:e9:ce:98:a6:08:2a:2e:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0e96feb1-98bc-4b91-a5a6-dc454ce48a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:41:02:e3:bc:1b:93:09:17:80:2a:d4:49: 96:46:b2:7b:6a:d5:e9:9a:f1:5b:cd:39:f0:4c:dc: 07:7c:a9:43:3a:35:f9:1f:6e:24:3c:24:68:b3:c0: ff:22:cc:15:ee:2d:c2:9b:6b:d1:ca:4d:28:fd:29: 7c:77:4d:27:ed:d0:bf:b2:65:e2:16:72:55:a1:11: f6:fc:1f:3a:d7:f0:11:28:c5:12:9c:18:ba:99:cc: de:a4:29:87:d4:a8:2a:b7:92:6b:60:32:78:f0:ab: ba:ee:1d:c7:09:88:6c:43:81:64:3e:af:18:64:82: 93:73:94:5a:55:92:67:ec:da:b5:a2:12:d1:eb:9e: 1a:72:e1:17:cf:cb:a0:d5:2e:c9:4e:9d:f3:c1:c7: 64:26:a0:d9:41:5d:95:90:5b:06:28:05:75:27:52: 9b:28:26:0a:16:b5:d0:df:28:2c:ab:99:ae:2e:c1: 9a:97:3e:fc:4d:da:0f:9a:29:81:3a:68:6c:54:b6: 25:b4:c1:89:ac:33:16:c9:34:f8:db:d1:a0:0a:09: a3:9d:8a:56:37:e2:79:b8:43:90:c4:18:c5:b7:0f: dc:44:0e:d6:13:da:97:2c:cd:ed:9f:2a:65:64:ca: 60:f6:83:27:55:6d:a3:4e:23:24:42:fe:7e:b0:40: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:89:AC:BD:D1:95:52:50:DE:CC:68:72:1F:EA:91:89:F5:93:C6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af5b8b18-9fa6-3d8d-bde9-0a60d92bad2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.13.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e7:4d:48:a0:01:9f:1d:65:6f:17:8a:86:60:2a:94:da:41: e7:81:0f:0a:0a:ca:b5:10:46:05:ed:91:4e:2d:b2:72:00:1c: d3:ea:d6:eb:cb:b4:89:91:f2:ba:bc:62:d5:3c:a4:38:df:18: 7c:ad:67:76:4d:bb:55:03:da:ed:3d:9f:8d:ca:bf:0b:33:69: c6:06:f7:c6:ab:31:68:b0:3a:60:5b:19:5d:50:f2:4c:41:31: 19:33:40:e5:7d:4c:8b:df:4e:19:6d:e6:b3:08:3a:9b:58:6f: 2d:61:1f:8d:77:9a:73:67:03:82:4b:be:71:7b:d0:de:cf:57: 08:1d:69:db:7c:8f:36:e7:4c:2e:71:57:ac:2a:03:e5:8c:ce: c8:e6:de:df:2f:33:6c:ca:ab:c9:38:d7:74:63:36:65:44:e7: 52:c6:98:9d:4b:83:94:51:fc:5a:e2:49:a1:e9:6f:17:e9:92: 8f:b0:8b:fd:33:ad:46:fa:6c:19:ef:05:9c:31:87:6a:23:70: c9:bc:2c:7b:61:c0:f7:09:0a:40:14:34:9e:14:ed:1e:f2:08: 01:68:cc:d6:27:27:a9:43:b0:0c:8e:b1:5c:48:c2:c3:36:21: f5:02:8a:b3:0e:99:01:25:8b:5e:2e:d6:6c:eb:aa:80:d2:60: 37:ff:a3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfjpzpimCCouLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGU5NmZlYjEtOThiYy00YjkxLWE1YTYtZGM0NTRjZTQ4YTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RBAuO8G5MJF4Aq1EmWRrJ7atXpmvFbzTnw TNwHfKlDOjX5H24kPCRos8D/IswV7i3Cm2vRyk0o/Sl8d00n7dC/smXiFnJVoRH2 /B861/ARKMUSnBi6mczepCmH1Kgqt5JrYDJ48Ku67h3HCYhsQ4FkPq8YZIKTc5Ra VZJn7Nq1ohLR654acuEXz8ug1S7JTp3zwcdkJqDZQV2VkFsGKAV1J1KbKCYKFrXQ 3ygsq5muLsGalz78TdoPmimBOmhsVLYltMGJrDMWyTT429GgCgmjnYpWN+J5uEOQ xBjFtw/cRA7WE9qXLM3tnyplZMpg9oMnVW2jTiMkQv5+sEBl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmJrL3RlVJQ3sxoch/qkYn1k8YpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWY1YjhiMTgtOWZhNi0z ZDhkLWJkZTktMGE2MGQ5MmJhZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARw2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALnTUigAZ8dZW8XioZgKpTaQeeBDwoKyrUQRgXtkU4tsnIAHNPq1uvL tImR8rq8YtU8pDjfGHytZ3ZNu1UD2u09n43KvwszacYG98arMWiwOmBbGV1Q8kxB MRkzQOV9TIvfThlt5rMIOptYby1hH413mnNnA4JLvnF70N7PVwgdadt8jzbnTC5x V6wqA+WMzsjm3t8vM2zKq8k413RjNmVE51LGmJ1Lg5RR/FriSaHpbxfpko+wi/0z rUb6bBnvBZwxh2ojcMm8LHthwPcJCkAUNJ4U7R7yCAFozNYnJ6lDsAyOsVxIwsM2 IfUCirMOmQEli14u1mzrqoDSYDf/o3c= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:31 2025 by rpki-client