$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa File: ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa (raw, json) Hash identifier: lqBL0nHK8lUqBl7kIGc/g+ePHHLKG7w+lJ8hu5ebdeg= Subject key identifier: C7:83:2F:9B:D6:5A:69:FD:C9:C4:14:DC:84:5C:34:62:0D:07:66:41 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B25FC39948D3C3BD09A622800 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 20115 IP address blocks: 150.224.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:39:94:8d:3c:3b:d0:9a:62:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=66a490f4-947d-4aa5-af1b-091521522b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:51:0e:dc:4f:3b:d5:a4:18:8e:5f:b3:51: 7f:b5:10:82:41:2d:34:4c:13:b7:70:04:ea:d9:fa: e1:3c:fd:2a:7e:8f:4e:5e:d6:b6:7e:67:16:c6:ba: 7f:66:b6:23:dc:84:f0:54:21:50:8a:d2:e2:19:92: 25:40:63:25:f6:b8:52:00:8c:75:bf:bc:f4:1d:93: 4b:d1:d1:2a:2d:02:48:ea:cd:0a:e5:ad:eb:cb:94: e8:c6:ca:4e:2c:09:a1:9d:89:1e:37:94:1b:1c:b2: 2b:1d:20:e8:66:d4:52:dc:f7:f3:f9:ee:6b:18:0f: d6:c7:5f:15:88:bb:b3:19:e5:7d:81:49:36:23:72: 21:76:78:a2:f1:5f:51:e7:b4:0f:62:3b:70:6f:80: 95:81:10:3e:9d:8c:15:a7:51:e5:fc:37:b3:c7:1e: 0f:58:bc:6f:23:a0:d7:7a:1e:b4:99:6e:11:2a:06: 96:47:4a:2a:0b:a9:30:44:bd:e8:16:98:5e:2a:9e: 08:95:88:20:4a:77:3e:f3:3e:f5:2c:ab:bc:12:27: 36:db:a7:56:26:47:ca:f3:40:48:ab:0c:58:31:36: ee:c2:25:20:8b:ea:1c:f0:e2:9c:34:86:c6:6b:ec: 7d:d8:cf:10:33:6b:72:ea:ca:de:73:6f:74:61:32: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:83:2F:9B:D6:5A:69:FD:C9:C4:14:DC:84:5C:34:62:0D:07:66:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.224.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ec:b0:51:f2:ef:53:09:01:b8:bc:25:00:bc:e1:c0:61:c3: c2:b6:51:5d:ca:3a:6b:6e:1d:8f:d5:36:fa:f8:fa:08:db:88: a5:15:15:6b:99:06:1c:de:ad:fe:39:79:2d:ae:54:0e:5b:b0: 34:9d:2f:1c:fc:3e:be:1d:ef:2d:99:e0:46:6d:56:92:f4:44: 78:7d:12:b0:0c:d6:60:1d:a0:ca:69:c9:77:41:d1:e9:ef:9a: 61:34:76:4f:f1:78:53:d9:8d:6f:3f:f1:47:99:02:5e:cd:9b: d8:27:a2:84:ca:55:73:bb:1c:c0:75:d1:11:65:ef:37:c0:9c: 99:59:9c:2d:d4:e6:8d:70:ac:c7:b6:f5:80:68:9e:1e:69:40: b0:70:e2:37:ec:3e:8a:1a:8a:d9:2b:c1:25:ed:98:79:fc:4f: b9:b5:98:75:1b:69:40:ac:b1:08:4b:aa:e6:4f:5a:19:40:39: 60:dd:86:1e:e9:f4:8a:dc:56:de:cf:d8:41:6d:48:bc:9c:79: c5:20:d2:34:f3:2a:82:2e:a7:c0:95:28:67:b7:75:42:d5:9b: 5a:54:17:7e:d7:b7:da:78:e9:a3:f1:4f:46:86:1a:ca:7a:3d: 52:ca:7d:b4:df:9c:cf:f6:a3:eb:18:93:e9:c8:b2:37:c7:ca: 31:14:f4:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DmUjTw70JpiKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NjZhNDkwZjQtOTQ3ZC00YWE1LWFmMWItMDkxNTIxNTIyYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwRRDtxPO9WkGI5fs1F/tRCCQS00TBO3cATq 2frhPP0qfo9OXta2fmcWxrp/ZrYj3ITwVCFQitLiGZIlQGMl9rhSAIx1v7z0HZNL 0dEqLQJI6s0K5a3ry5ToxspOLAmhnYkeN5QbHLIrHSDoZtRS3Pfz+e5rGA/Wx18V iLuzGeV9gUk2I3Ihdnii8V9R57QPYjtwb4CVgRA+nYwVp1Hl/Dezxx4PWLxvI6DX eh60mW4RKgaWR0oqC6kwRL3oFpheKp4IlYggSnc+8z71LKu8Eic226dWJkfK80BI qwxYMTbuwiUgi+oc8OKcNIbGa+x92M8QM2ty6srec290YTL+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeDL5vWWmn9ycQU3IRcNGINB2ZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2E5OGE2MDAtMTU1OC0z ZTUyLTkxYWQtNjRkMmVkMzhkOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBluD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLssFHy71MJAbi8JQC84cBhw8K2UV3KOmtuHY/VNvr4+gjbiKUVFWuZ Bhzerf45eS2uVA5bsDSdLxz8Pr4d7y2Z4EZtVpL0RHh9ErAM1mAdoMppyXdB0env mmE0dk/xeFPZjW8/8UeZAl7Nm9gnooTKVXO7HMB10RFl7zfAnJlZnC3U5o1wrMe2 9YBonh5pQLBw4jfsPooaitkrwSXtmHn8T7m1mHUbaUCssQhLquZPWhlAOWDdhh7p 9IrcVt7P2EFtSLycecUg0jTzKoIup8CVKGe3dULVm1pUF37Xt9p46aPxT0aGGsp6 PVLKfbTfnM/2o+sYk+nIsjfHyjEU9Do= -----END CERTIFICATE-----Generated at Wed Nov 5 03:17:01 2025 by rpki-client