$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b650cce8-1353-30d8-b17d-112a50d68ebf.roa File: b650cce8-1353-30d8-b17d-112a50d68ebf.roa (raw, json) Hash identifier: MkEpA6ADx8BULUNUaS34k/65saVHRsDBL5zJsNLoPq4= Subject key identifier: A9:D3:FF:85:C8:F2:E0:57:D8:73:90:05:6A:45:4F:E6:F7:96:59:EF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161CD66F244A838606A9E00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b650cce8-1353-30d8-b17d-112a50d68ebf.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 71.85.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:cd:66:f2:44:a8:38:60:6a:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=a544bc0f-24dc-416a-a363-c7b5617336cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f0:6f:9f:22:b0:f6:bc:00:db:24:0a:7e:78: 1e:a4:3f:d2:ee:13:04:fe:e1:2e:74:32:c1:16:01: e9:49:84:49:c3:ec:e5:c0:01:58:0a:29:14:0c:33: 63:7c:b9:3c:16:b6:ef:1a:1f:28:19:0f:ee:dc:e2: 43:4f:bb:89:5f:c5:0d:9f:46:cf:d7:1b:b6:a3:6e: a8:8c:1c:5e:71:f4:b2:12:5d:de:12:3a:49:9b:e3: b7:4f:42:ca:f7:6e:a8:51:ec:f9:c5:24:50:92:bb: 4b:a7:4d:06:6f:96:f9:57:d1:dc:79:98:1e:22:2d: e9:4e:1b:57:86:17:14:d0:ae:41:be:e7:3b:92:22: 48:e8:19:1b:e5:6f:7f:f7:f1:80:43:5e:65:db:e9: 82:78:d7:73:f8:aa:94:e4:a3:40:cf:4a:89:3f:2b: 1d:2e:47:ce:c9:7a:63:43:18:eb:15:87:ea:8a:29: 50:03:8d:07:e7:b2:7e:7b:f6:6d:2f:c6:54:d3:a0: e8:30:28:f7:e4:c1:83:3d:e4:54:02:26:1f:1e:68: 82:3d:8f:6f:78:17:f1:4c:06:c9:05:df:16:f0:95: 55:c5:91:7e:17:b2:df:ed:00:32:9f:7b:a1:3c:0e: 0a:53:29:7c:16:98:1d:e4:b1:02:70:6c:60:61:90: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D3:FF:85:C8:F2:E0:57:D8:73:90:05:6A:45:4F:E6:F7:96:59:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b650cce8-1353-30d8-b17d-112a50d68ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.85.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bb:5e:e5:0e:d0:7e:9f:f1:6a:8b:f7:58:37:d1:54:63:f7: 50:e0:a5:21:cb:54:fc:38:9e:4d:99:de:87:68:9e:33:f0:b4: 83:24:55:1d:8e:c2:15:14:1b:e1:43:c9:90:90:11:59:20:9f: 3a:cf:47:08:48:6d:f0:1e:19:fb:67:ff:be:fa:5f:63:5a:31: 8a:58:c0:80:87:c4:6b:f4:2d:5b:16:8c:19:18:30:56:b7:aa: db:ac:e1:5a:59:78:95:ec:c0:24:12:09:e8:76:05:08:4f:5f: ad:14:c5:89:42:3f:ca:9a:41:5d:b9:72:5b:98:be:9f:0e:a0: 93:64:13:f6:c5:1e:fa:03:d1:f5:70:ed:94:ea:5b:f9:aa:6e: 4f:1b:9c:c7:a4:ce:f7:c4:3c:81:da:10:e3:ea:77:aa:a9:f7: 1f:0e:6e:72:13:03:39:db:29:01:aa:a9:58:7a:f1:90:ce:12: ba:37:72:46:2f:51:52:65:85:ea:21:b2:d6:da:5c:41:56:3f: f6:69:5b:a0:11:c8:81:dc:a4:77:9c:e6:9f:89:5e:c9:39:c9: d3:9c:ed:8b:58:41:67:1b:3d:75:94:28:1e:cc:c1:04:5d:5a: dc:53:fd:27:f2:dd:2d:64:93:f5:10:fd:d8:35:a8:76:38:78: 93:6e:f6:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYc1m8kSoOGBqngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YTU0NGJjMGYtMjRkYy00MTZhLWEzNjMtYzdiNTYxNzMzNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPBvnyKw9rwA2yQKfngepD/S7hME/uEudDLB FgHpSYRJw+zlwAFYCikUDDNjfLk8FrbvGh8oGQ/u3OJDT7uJX8UNn0bP1xu2o26o jBxecfSyEl3eEjpJm+O3T0LK926oUez5xSRQkrtLp00Gb5b5V9HceZgeIi3pThtX hhcU0K5Bvuc7kiJI6Bkb5W9/9/GAQ15l2+mCeNdz+KqU5KNAz0qJPysdLkfOyXpj QxjrFYfqiilQA40H57J+e/ZtL8ZU06DoMCj35MGDPeRUAiYfHmiCPY9veBfxTAbJ Bd8W8JVVxZF+F7Lf7QAyn3uhPA4KUyl8Fpgd5LECcGxgYZARhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnT/4XI8uBX2HOQBWpFT+b3llnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjY1MGNjZTgtMTM1My0z MGQ4LWIxN2QtMTEyYTUwZDY4ZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO7XuUO0H6f8WqL91g30VRj91DgpSHLVPw4nk2Z3odonjPwtIMkVR2O whUUG+FDyZCQEVkgnzrPRwhIbfAeGftn/776X2NaMYpYwICHxGv0LVsWjBkYMFa3 qtus4VpZeJXswCQSCeh2BQhPX60UxYlCP8qaQV25cluYvp8OoJNkE/bFHvoD0fVw 7ZTqW/mqbk8bnMekzvfEPIHaEOPqd6qp9x8ObnITAznbKQGqqVh68ZDOEro3ckYv UVJlheohstbaXEFWP/ZpW6ARyIHcpHec5p+JXsk5ydOc7YtYQWcbPXWUKB7MwQRd WtxT/Sfy3S1kk/UQ/dg1qHY4eJNu9mI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:56 2025 by rpki-client