$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/caf208e9-5d1e-3763-af97-ae78b05d2c9b.roa File: caf208e9-5d1e-3763-af97-ae78b05d2c9b.roa (raw, json) Hash identifier: fbSUWjRlEqWFdxiYPprB2AyZBdRt7qH4zxyzR3CLzUc= Subject key identifier: 14:92:F6:7B:9D:EC:07:ED:16:F8:53:20:A3:6F:8A:20:B3:D2:79:20 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161DFA042A742DA82D07F80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/caf208e9-5d1e-3763-af97-ae78b05d2c9b.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 24.159.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:df:a0:42:a7:42:da:82:d0:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=99ee5a66-94aa-4c89-a54f-9ecf915efcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:91:88:f0:1c:01:02:a7:c3:07:34:96:6a: d6:48:f5:73:11:98:8c:be:3f:f0:1b:54:d6:02:ee: 92:26:8b:4f:c6:66:07:57:fb:00:61:fb:89:e4:b2: b1:0d:06:a1:bc:bf:87:70:82:6d:d6:47:f1:cf:cc: 00:8a:df:d7:ef:53:3d:3e:f8:9a:34:2b:70:02:53: b2:51:e9:4b:de:e9:53:b6:dd:c2:62:d7:7e:b7:04: 6f:63:d0:0d:c4:b5:9a:ce:6f:84:74:7d:79:17:d1: 69:97:38:4e:79:be:9c:62:0a:36:1b:37:9c:93:12: e9:39:36:94:fb:c7:fe:5c:8e:30:16:08:00:15:aa: 74:1d:5e:b0:92:6a:b5:1e:29:a3:54:7a:de:2b:e2: 33:77:45:6b:dd:ac:58:72:9f:5e:55:ff:ed:f5:a4: 01:62:78:23:ac:03:af:24:95:33:57:81:72:d9:ca: e6:5b:7b:58:48:ec:aa:3e:89:34:31:29:d7:ed:ed: 88:8e:86:36:79:3f:81:77:ad:0d:50:5f:36:c6:b1: 83:87:3f:36:51:73:cd:6e:cb:8c:b0:f0:73:7f:ba: de:29:98:bf:aa:54:ad:57:f7:df:13:9d:a4:3f:2a: a3:f2:7f:43:1e:9e:e2:82:88:53:11:87:c3:e8:55: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:F6:7B:9D:EC:07:ED:16:F8:53:20:A3:6F:8A:20:B3:D2:79:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/caf208e9-5d1e-3763-af97-ae78b05d2c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.159.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0d:bd:ac:b1:0a:a7:14:d0:8f:3a:71:83:03:fc:ad:29:0b: da:e3:a8:8e:98:76:69:a4:03:f2:2f:8b:7d:8a:ef:a9:19:47: 79:80:8a:31:87:fa:75:3f:45:73:db:fe:97:0a:1d:59:45:f1: 00:3f:8a:3f:21:15:c6:fc:45:23:36:1f:08:cc:92:8d:fe:99: 3c:25:5d:e6:f0:55:69:7c:4e:d0:7d:bd:7f:c4:c5:7a:3c:5a: 88:e4:cc:73:e2:f2:44:e6:9c:85:f4:ba:86:67:73:0a:bc:75: b7:de:9e:37:26:d0:77:0e:1a:51:3b:0b:05:83:ff:68:ae:7a: 1a:79:5f:e6:73:33:aa:2f:82:66:7e:16:e2:44:ce:1e:af:46: 0f:ab:7d:66:27:78:a4:30:10:df:72:67:26:1d:7e:fe:52:b6: 44:0e:3c:64:69:92:0f:72:89:5c:7c:27:23:bd:ee:6b:02:3d: 72:e9:a4:d1:e3:7f:50:01:78:c9:b8:83:da:c8:d9:90:ae:cc: 6f:99:b7:97:4e:c3:25:6a:ad:14:de:18:54:72:94:05:27:5e: 93:ce:a1:de:78:4a:80:f1:02:c9:11:f0:ca:21:8e:13:d6:bb: 59:8b:52:43:4f:b6:3f:bd:9d:2c:d2:33:99:24:f8:85:f1:0e: a3:a5:3a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYd+gQqdC2oLQf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OTllZTVhNjYtOTRhYS00Yzg5LWE1NGYtOWVjZjkxNWVmY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aGRiPAcAQKnwwc0lmrWSPVzEZiMvj/wG1TW Au6SJotPxmYHV/sAYfuJ5LKxDQahvL+HcIJt1kfxz8wAit/X71M9PviaNCtwAlOy UelL3ulTtt3CYtd+twRvY9ANxLWazm+EdH15F9FplzhOeb6cYgo2GzeckxLpOTaU +8f+XI4wFggAFap0HV6wkmq1HimjVHreK+Izd0Vr3axYcp9eVf/t9aQBYngjrAOv JJUzV4Fy2crmW3tYSOyqPok0MSnX7e2IjoY2eT+Bd60NUF82xrGDhz82UXPNbsuM sPBzf7reKZi/qlStV/ffE52kPyqj8n9DHp7igohTEYfD6FU3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSS9nud7AftFvhTIKNviiCz0nkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2FmMjA4ZTktNWQxZS0z NzYzLWFmOTctYWU3OGIwNWQyYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJ/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoNvayxCqcU0I86cYMD/K0pC9rjqI6YdmmkA/Ivi32K76kZR3mAijGH +nU/RXPb/pcKHVlF8QA/ij8hFcb8RSM2HwjMko3+mTwlXebwVWl8TtB9vX/ExXo8 WojkzHPi8kTmnIX0uoZncwq8dbfenjcm0HcOGlE7CwWD/2iuehp5X+ZzM6ovgmZ+ FuJEzh6vRg+rfWYneKQwEN9yZyYdfv5StkQOPGRpkg9yiVx8JyO97msCPXLppNHj f1ABeMm4g9rI2ZCuzG+Zt5dOwyVqrRTeGFRylAUnXpPOod54SoDxAskR8MohjhPW u1mLUkNPtj+9nSzSM5kk+IXxDqOlOm0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:33 2025 by rpki-client