$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa File: d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa (raw, json) Hash identifier: tlHeJLr6Yc07+rvp68lZ+VVt7Xzdd8WLi70WzZK+Gy0= Subject key identifier: C8:B5:CA:D4:27:46:B7:FD:BA:ED:5E:22:0C:B7:CC:48:8B:C2:3C:6D Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16131E4A2E7B3648F84A9E0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 66.168.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:31:e4:a2:e7:b3:64:8f:84:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=0e8d0601-ca78-402a-b313-32157c4bcd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:cc:f8:e8:42:20:6d:30:01:e4:98:4a:aa: d2:fe:90:f6:dc:d6:55:bd:24:2b:32:01:34:b5:fa: 01:8f:02:64:81:c5:b6:1d:64:ac:cb:a2:6b:a8:31: 58:d8:3a:66:5f:08:03:be:66:67:b3:b7:99:32:f4: ae:14:41:a1:50:00:da:6d:f3:1c:9b:3c:28:8f:38: 0d:f4:86:d3:9b:a8:87:75:d8:74:bf:e1:dd:68:af: ed:09:fc:8b:23:98:74:db:e3:1e:b7:3b:5f:69:df: 9c:a6:59:8f:3e:b5:c1:85:e0:0b:ff:ea:ab:2e:cd: fc:59:a7:7d:e2:58:70:bb:71:3d:03:58:13:f6:f0: e8:e5:28:03:48:d4:2d:4d:0b:2e:11:a2:c0:d6:58: f8:ef:f1:78:c0:67:a8:07:89:92:9b:b4:fd:f1:70: dc:65:7d:cb:4d:14:e2:c2:8a:de:41:4e:83:bc:0c: 94:e2:c2:7d:69:17:3a:34:c5:91:1f:38:2e:fe:dc: f2:35:c7:57:ed:5b:b9:96:dc:6b:3f:f8:57:f6:de: 49:b7:dd:da:ce:7e:c7:78:95:c1:c6:aa:61:07:b9: d2:73:78:6f:3d:2e:a9:80:74:a8:af:f4:67:dd:ee: 74:ef:f6:bc:5a:13:23:3a:45:33:a7:2c:0b:50:52: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B5:CA:D4:27:46:B7:FD:BA:ED:5E:22:0C:B7:CC:48:8B:C2:3C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:33:fc:7a:69:67:db:54:74:05:d0:5b:ff:a8:3e:1d:c2:e9: be:96:be:dd:48:39:c7:ed:d5:50:62:db:91:fc:ab:d7:35:56: 9b:38:e8:32:70:cf:2f:81:08:8f:59:c6:41:f8:70:0d:61:a4: 3c:9c:42:de:45:df:7b:7b:99:f2:a2:bb:23:55:42:9e:26:e1: 58:7c:8e:43:d8:46:ff:e5:60:02:a8:fb:1b:93:85:52:0f:17: 69:23:54:44:56:3f:5c:28:04:6d:7a:cf:db:f5:37:ac:49:19: 0b:cd:8c:1a:fa:6f:05:e5:30:95:5d:9e:49:65:15:2f:02:2b: c2:11:11:ff:3a:85:40:3e:83:b6:80:c1:4c:53:52:ec:d4:5a: 85:44:7c:4b:9e:13:4e:1e:df:a3:26:9e:b3:eb:86:d8:63:b0: 53:5b:f2:30:85:f2:a8:5f:dc:4b:2b:6f:6d:aa:4f:3e:0a:9a: 36:16:f5:7a:1a:93:5f:3d:91:c8:45:83:cb:f4:93:82:8a:1f: a6:ca:80:ce:cf:34:a1:a0:e0:dd:b7:a6:b2:0d:cd:96:c2:9d: 0c:f7:0e:9a:95:af:65:5f:e0:69:99:8c:74:11:69:9b:b8:7c: fc:5c:d6:93:90:6b:03:23:cc:14:11:90:21:b1:2a:52:cc:c5: f7:b1:e4:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYTHkouezZI+EqeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MGU4ZDA2MDEtY2E3OC00MDJhLWIzMTMtMzIxNTdjNGJjZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgHM+OhCIG0wAeSYSqrS/pD23NZVvSQrMgE0 tfoBjwJkgcW2HWSsy6JrqDFY2DpmXwgDvmZns7eZMvSuFEGhUADabfMcmzwojzgN 9IbTm6iHddh0v+HdaK/tCfyLI5h02+Metztfad+cplmPPrXBheAL/+qrLs38Wad9 4lhwu3E9A1gT9vDo5SgDSNQtTQsuEaLA1lj47/F4wGeoB4mSm7T98XDcZX3LTRTi woreQU6DvAyU4sJ9aRc6NMWRHzgu/tzyNcdX7Vu5ltxrP/hX9t5Jt93azn7HeJXB xqphB7nSc3hvPS6pgHSor/Rn3e507/a8WhMjOkUzpywLUFKCiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMi1ytQnRrf9uu1eIgy3zEiLwjxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDBmZTlmZGItMmI0MS0z Y2QyLWJlNmMtMzNjYzRkNGMyNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkz/HppZ9tUdAXQW/+oPh3C6b6Wvt1IOcft1VBi25H8q9c1Vps46DJw zy+BCI9ZxkH4cA1hpDycQt5F33t7mfKiuyNVQp4m4Vh8jkPYRv/lYAKo+xuThVIP F2kjVERWP1woBG16z9v1N6xJGQvNjBr6bwXlMJVdnkllFS8CK8IREf86hUA+g7aA wUxTUuzUWoVEfEueE04e36MmnrPrhthjsFNb8jCF8qhf3Esrb22qTz4KmjYW9Xoa k189kchFg8v0k4KKH6bKgM7PNKGg4N23prINzZbCnQz3DpqVr2Vf4GmZjHQRaZu4 fPxc1pOQawMjzBQRkCGxKlLMxfex5LU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:47:42 2025 by rpki-client