$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b0289b11-427f-379e-854e-7555c1f611a5.roa File: b0289b11-427f-379e-854e-7555c1f611a5.roa (raw, json) Hash identifier: WpciE4xNONjMIIqwUF+Y+fFTI8iHytv7ss3NSpxXwmk= Subject key identifier: B4:96:2D:61:DC:7E:23:DE:F2:5B:1A:82:6C:2A:21:1B:CB:BA:21:F3 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA1613753245063805D380100 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b0289b11-427f-379e-854e-7555c1f611a5.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 24.247.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:37:53:24:50:63:80:5d:38:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=3b7e9992-e6f7-4c33-83e9-a427019c65b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:34:73:a1:d8:cc:e4:b2:f4:13:76:cb:84: 1d:b6:e0:ac:64:49:62:b6:a3:6d:7f:f2:86:bd:68: 44:ef:09:17:57:99:a9:01:43:4e:4b:8a:46:ed:9c: 9f:b2:b3:be:43:c1:69:10:86:d9:a6:df:d8:d9:bc: 2b:3e:56:0e:98:86:72:b0:c2:cf:73:83:3f:60:c1: ce:b1:10:4e:91:a0:20:1c:e8:97:c0:fc:eb:6b:7d: 3f:86:8a:47:16:7f:aa:6d:a5:be:97:e7:71:a8:2c: f3:31:d3:01:e2:3e:45:b7:3a:5a:60:38:b8:a9:45: 85:48:e6:81:ab:54:17:56:46:83:c4:8f:46:3b:f7: de:48:9b:2f:8b:10:1a:f6:13:45:f0:36:8c:3d:9c: bf:18:c9:b4:ac:5e:7f:a4:e6:51:68:bf:bd:33:17: 14:bc:bd:e4:e6:39:5b:a3:7d:7d:31:b6:2e:64:b0: 68:4d:99:b0:6b:3d:d0:a6:0b:83:49:4e:50:78:b2: 74:f6:ff:5f:f8:24:d9:7f:04:b9:06:5b:48:e3:5a: 57:8f:b9:99:f0:a3:05:8a:57:30:d0:35:5d:db:6f: 48:a0:f3:75:8d:0f:2f:33:96:af:bf:ca:cc:9b:30: 9b:76:2e:75:62:6a:00:34:1c:80:0f:ed:83:dc:30: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:2D:61:DC:7E:23:DE:F2:5B:1A:82:6C:2A:21:1B:CB:BA:21:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b0289b11-427f-379e-854e-7555c1f611a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.247.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9e:aa:49:2c:9d:44:9e:c6:75:1f:9e:07:fb:0a:58:3f:0e: bf:ea:40:a7:3e:28:73:f8:0d:92:1b:d4:7a:f7:81:fc:79:a9: 94:93:8c:b7:d0:bd:8e:bc:e5:5e:bf:09:75:b5:8a:09:d8:0a: 6c:bb:2f:6f:f2:4b:01:66:8f:63:70:dc:b7:e5:59:74:4f:9c: 70:9f:2c:95:ca:c6:31:38:df:90:1c:d6:a1:19:e6:18:4e:23: b4:4d:1a:67:0a:38:29:d1:83:65:6a:3e:b3:0a:9c:23:0d:1f: af:41:3b:1e:5a:e0:f0:43:7d:2e:29:58:ce:33:71:4b:96:24: 45:0e:9a:5f:5e:e6:85:f2:f1:67:14:21:61:8e:6b:3a:85:29: 54:c6:0a:37:be:81:55:44:f3:91:87:56:d4:db:e1:0e:7a:2b: 80:d5:49:8e:bb:0b:f4:fd:23:e9:7a:7d:22:ab:5f:ca:f6:b5: 08:b9:f2:27:f1:89:68:97:6c:39:d5:e4:3a:c4:17:e5:82:1a: 0a:a6:25:f8:07:f7:67:21:94:61:af:14:84:1e:b3:13:f5:1e: e9:8f:7e:93:7f:d5:35:81:b6:1f:0f:1f:b6:aa:11:17:70:42: bd:5b:d4:43:de:69:d8:22:0b:dd:64:62:fd:f4:71:5f:ce:50: d6:85:0b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYTdTJFBjgF04AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk M2I3ZTk5OTItZTZmNy00YzMzLTgzZTktYTQyNzAxOWM2NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeY0c6HYzOSy9BN2y4QdtuCsZElitqNtf/KG vWhE7wkXV5mpAUNOS4pG7ZyfsrO+Q8FpEIbZpt/Y2bwrPlYOmIZysMLPc4M/YMHO sRBOkaAgHOiXwPzra30/hopHFn+qbaW+l+dxqCzzMdMB4j5FtzpaYDi4qUWFSOaB q1QXVkaDxI9GO/feSJsvixAa9hNF8DaMPZy/GMm0rF5/pOZRaL+9MxcUvL3k5jlb o319MbYuZLBoTZmwaz3QpguDSU5QeLJ09v9f+CTZfwS5BltI41pXj7mZ8KMFilcw 0DVd229IoPN1jQ8vM5avv8rMmzCbdi51YmoANByAD+2D3DAJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSWLWHcfiPe8lsagmwqIRvLuiHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjAyODliMTEtNDI3Zi0z NzllLTg1NGUtNzU1NWMxZjYxMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGPeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOeqkksnUSexnUfngf7Clg/Dr/qQKc+KHP4DZIb1Hr3gfx5qZSTjLfQ vY685V6/CXW1ignYCmy7L2/ySwFmj2Nw3LflWXRPnHCfLJXKxjE435Ac1qEZ5hhO I7RNGmcKOCnRg2VqPrMKnCMNH69BOx5a4PBDfS4pWM4zcUuWJEUOml9e5oXy8WcU IWGOazqFKVTGCje+gVVE85GHVtTb4Q56K4DVSY67C/T9I+l6fSKrX8r2tQi58ifx iWiXbDnV5DrEF+WCGgqmJfgH92chlGGvFIQesxP1HumPfpN/1TWBth8PH7aqERdw Qr1b1EPeadgiC91kYv30cV/OUNaFC4k= -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:39 2025 by rpki-client