$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f88b6f38-411e-3762-a1b9-9ff07ca7849a.roa File: f88b6f38-411e-3762-a1b9-9ff07ca7849a.roa (raw, json) Hash identifier: bZe7Q7SPZKHjyieotO3w7ado/4uc0+ytT5/xE2H+m2U= Subject key identifier: 66:48:89:AE:F2:B9:3C:3E:DD:11:A4:1D:3F:2D:11:DA:62:F8:3F:70 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16129FB58650D513BF4EA40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f88b6f38-411e-3762-a1b9-9ff07ca7849a.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11351 IP address blocks: 192.60.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:29:fb:58:65:0d:51:3b:f4:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=9021f400-94ec-4b18-9caa-e1e3058e9074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:42:b9:36:06:f8:1b:2b:6c:5a:fe:9c:a1:39: fb:f2:0c:da:2a:6f:fa:dc:ec:12:2a:49:86:bb:46: a4:f7:cf:80:1c:aa:2d:a2:0d:aa:e7:fc:06:ca:d2: 19:bc:bb:5f:f9:ff:a2:2f:7d:d2:7e:16:29:f4:43: 18:33:96:12:f0:ab:e3:44:04:86:7d:6e:5b:87:07: 37:d0:40:5f:39:c5:46:98:34:82:50:93:63:34:c8: 8d:80:ef:56:ff:2b:c2:a0:5e:b0:51:0b:c8:50:ea: 13:2d:db:e5:2e:06:a3:dc:aa:48:db:96:4f:72:53: e0:a9:4c:f7:c5:e5:de:12:80:3a:69:5a:f2:72:87: e7:bf:15:63:b9:bc:b1:ca:63:2b:db:db:0a:5b:3f: 8c:1e:1b:62:8d:74:52:28:7d:e7:4a:07:65:eb:a8: fe:1b:cc:36:f9:99:b1:f6:a4:e4:15:48:fc:10:ac: 2f:d1:71:e4:0e:a9:b1:64:1c:00:7d:be:07:34:ee: f5:a4:c6:ac:43:1b:f9:40:ed:16:ff:13:fc:8c:5d: 28:40:64:48:00:6a:e4:f0:a7:e1:8f:cd:5f:f7:fc: 2e:bf:d7:a2:3c:7c:69:94:e0:d4:bf:7a:b6:31:05: 3f:4a:02:36:58:7e:d2:ed:f0:16:0b:dd:c1:31:13: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:48:89:AE:F2:B9:3C:3E:DD:11:A4:1D:3F:2D:11:DA:62:F8:3F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f88b6f38-411e-3762-a1b9-9ff07ca7849a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.60.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:77:16:95:82:01:bb:ab:d8:b8:f8:c4:02:12:c7:f7:2f:70: a4:24:ce:fd:0c:94:ea:43:68:53:7a:d2:69:17:95:d8:93:43: 66:2e:ff:80:03:d6:0d:62:67:51:57:b9:82:72:2b:46:70:c4: 8e:81:c1:ff:2e:ae:ce:5a:34:de:c1:c3:ac:4a:48:da:40:5d: aa:67:37:46:28:17:45:17:7a:07:b0:db:be:c0:e1:63:fd:8e: 6a:9d:18:3c:24:94:04:6b:c6:72:08:03:22:64:3f:5a:d0:f8: 68:a1:bc:5f:d4:10:a3:a4:ad:6d:33:cf:03:b6:5b:4c:82:ac: ce:7b:48:29:2c:9c:5e:8e:3a:da:10:65:3b:ee:2c:7c:c5:76: e8:7c:6f:bc:fa:89:96:38:b4:21:a6:33:8b:7a:b2:ae:ad:74: c4:ee:3f:cb:0d:17:9d:f9:7f:af:25:7e:a7:cb:95:fd:61:82: 02:4d:cf:df:09:a7:f0:77:79:30:24:28:0c:aa:68:5d:2d:3c: c2:09:5a:e9:df:ec:ed:90:ad:54:7b:15:ff:b2:19:d1:86:0a: 34:ad:55:5d:3c:52:9f:a9:9b:d0:18:e9:c5:22:fa:7f:65:65: 60:2f:8d:1b:14:bd:a3:be:d2:94:2d:92:6f:73:a3:09:e6:b5: c3:f9:d7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYSn7WGUNUTv06kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OTAyMWY0MDAtOTRlYy00YjE4LTljYWEtZTFlMzA1OGU5MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kK5Ngb4GytsWv6coTn78gzaKm/63OwSKkmG u0ak98+AHKotog2q5/wGytIZvLtf+f+iL33SfhYp9EMYM5YS8KvjRASGfW5bhwc3 0EBfOcVGmDSCUJNjNMiNgO9W/yvCoF6wUQvIUOoTLdvlLgaj3KpI25ZPclPgqUz3 xeXeEoA6aVrycofnvxVjubyxymMr29sKWz+MHhtijXRSKH3nSgdl66j+G8w2+Zmx 9qTkFUj8EKwv0XHkDqmxZBwAfb4HNO71pMasQxv5QO0W/xP8jF0oQGRIAGrk8Kfh j81f9/wuv9eiPHxplODUv3q2MQU/SgI2WH7S7fAWC93BMRMfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZIia7yuTw+3RGkHT8tEdpi+D9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjg4YjZmMzgtNDExZS0z NzYyLWExYjktOWZmMDdjYTc4NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwDzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM53FpWCAbur2Lj4xAISx/cvcKQkzv0MlOpDaFN60mkXldiTQ2Yu/4AD 1g1iZ1FXuYJyK0ZwxI6Bwf8urs5aNN7Bw6xKSNpAXapnN0YoF0UXegew277A4WP9 jmqdGDwklARrxnIIAyJkP1rQ+GihvF/UEKOkrW0zzwO2W0yCrM57SCksnF6OOtoQ ZTvuLHzFduh8b7z6iZY4tCGmM4t6sq6tdMTuP8sNF535f68lfqfLlf1hggJNz98J p/B3eTAkKAyqaF0tPMIJWunf7O2QrVR7Ff+yGdGGCjStVV08Up+pm9AY6cUi+n9l ZWAvjRsUvaO+0pQtkm9zownmtcP51/4= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:59 2025 by rpki-client